last executing test programs: 22.412453179s ago: executing program 2 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000c80)={0x2, 0x0, [{0x345, 0x0, 0x8}, {0x3b9, 0x0, 0xfffffffffffeffff}]}) 22.248710302s ago: executing program 2 (id=27): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 22.101729504s ago: executing program 2 (id=29): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0x60000000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x9, 0x1fc, 0x0, 0x10000, 0xba8, 0xd, 0x1000, 0x4, 0x2, 0x3, 0xffffffff, 0x4, 0x2, 0xffffffffffffffff, 0x7fff], 0xdddd3000, 0x211380}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.789780429s ago: executing program 2 (id=33): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) creat(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) r4 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) 21.544405549s ago: executing program 2 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xbe5b40ab4292b0ff, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0xb, 0x3, 0xffffffd8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 21.168645169s ago: executing program 2 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x242901, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x80000004, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x3, 0x5, 0x2, 0x9, 0x4, 0x5, 0x0, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1001c, 0x6, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x5, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x2, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1af6, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x6, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff6, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x16, 0xf3, 0x0, 0x7fffffffffffe, 0xe07e, 0x8, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 21.085352436s ago: executing program 32 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x242901, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x80000004, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x3, 0x5, 0x2, 0x9, 0x4, 0x5, 0x0, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1001c, 0x6, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x5, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x2, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1af6, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x6, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff6, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x16, 0xf3, 0x0, 0x7fffffffffffe, 0xe07e, 0x8, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.87666787s ago: executing program 5 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.760766899s ago: executing program 5 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000ac0)={0x1, 0x0, [{0x8b, 0x0, 0xe}]}) 1.593700652s ago: executing program 5 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r3, 0x1000006, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xe0003, 0x0, [0x6, 0x6, 0x9c, 0x2, 0xa, 0xffffffff, 0x200000000006, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.300642746s ago: executing program 3 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r4, 0x1000006, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0xaaaac09, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.276408678s ago: executing program 1 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x74]}}]}) 1.132193969s ago: executing program 5 (id=275): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000240)='mqueue\x00', 0x189, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1.131885099s ago: executing program 1 (id=276): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41000000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0x307}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000180), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000140), 0x0}, 0x20) 1.049922846s ago: executing program 5 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x7f, 0x1}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) 932.732385ms ago: executing program 1 (id=280): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x43000c80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 899.179338ms ago: executing program 3 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x38]}}]}) chdir(&(0x7f00000004c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) 770.668999ms ago: executing program 0 (id=284): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0xce23, @private=0xa010102}], 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa38bbbbbbbbbbbb000d020000e02a0300002a44629e92c9e44c6e8d0500000000000000ad43f74b"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 758.12176ms ago: executing program 4 (id=285): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0xf, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x1000000000000084, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x1c37, 0xd58, 0x0, 0xfffffffffffffffb], 0xdddd1000, 0x84a92}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 692.606115ms ago: executing program 3 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r2, 0x1}, 0x20) 692.343285ms ago: executing program 5 (id=287): pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 641.832499ms ago: executing program 4 (id=288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="06000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 633.258419ms ago: executing program 0 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x0, 0xa2) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) llistxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 553.479726ms ago: executing program 3 (id=290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41000000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0x307}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000180), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000140), 0x0}, 0x20) 541.219307ms ago: executing program 1 (id=291): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048844) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e1d, @empty}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 467.472193ms ago: executing program 0 (id=292): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xf0fe, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f00000003c0)=@sco, 0x80, 0x0}, 0x3}], 0x1, 0x40000040, 0x0) sendmmsg$inet6(r0, &(0x7f0000004a40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x80, @empty, 0x1}, 0x1c, 0x0}}], 0x5a, 0x0) 424.719426ms ago: executing program 4 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000d901"]) 421.073637ms ago: executing program 3 (id=294): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x1005) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0x101) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 352.421322ms ago: executing program 1 (id=295): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@cruft}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) 272.655818ms ago: executing program 0 (id=296): mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x103) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000002) socket$inet6(0xa, 0x2, 0x3a) lseek(r2, 0x2004, 0x0) 272.376778ms ago: executing program 4 (id=297): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) readv(r0, &(0x7f0000006300)=[{&(0x7f0000001880)=""/45, 0x2d}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005300)=""/4096, 0x1000}], 0x3) 272.191489ms ago: executing program 3 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x3000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x7f, 0x10}, {0x8080000, 0x0, 0x2e591ac03c405730, 0x8, 0x0, 0x3, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x2, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0x10, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x8080000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x1000, 0x128, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 211.931843ms ago: executing program 4 (id=299): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071184d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) 195.824885ms ago: executing program 0 (id=300): r0 = syz_open_dev$loop(&(0x7f00000004c0), 0xa40, 0x98db41) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x0, {0x0, 0x0, 0x0, 0xbb4, 0x1, 0x0, 0x1, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4ecb80cc9bd36b93b23733e601000000000000005aba1c98911df5ba72296556740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x7f, 0x87]}}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000300)) 651.59µs ago: executing program 4 (id=301): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xcf, 0x1, 0xfd, 0x2, 0x3a, 0x1, 0x4, 0x0, 0x3, 0x6, 0x52, 0xe1, 0x4, 0x90}, 0xe) sendto$inet6(r0, &(0x7f0000000340)="03", 0x1, 0x48080, &(0x7f00000000c0)={0xa, 0x4e1e, 0x8, @loopback, 0x3}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000021, 0x0) 250.01µs ago: executing program 0 (id=302): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x1, 0x4}], 0x10}}], 0x2, 0x0) 0s ago: executing program 1 (id=303): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) open(0x0, 0x108843, 0x98) close(0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r2, 0x4}, 0x10) r3 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. syzkaller login: [ 49.871856][ T4171] cgroup: Unknown subsys name 'net' [ 50.029265][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.159502][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.502517][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.565990][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.669085][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.677284][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.685454][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.712979][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.723327][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.730417][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.738808][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.815601][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.825801][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.832875][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.840758][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.853015][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.872165][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.879570][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.887587][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.910013][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.934034][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.958542][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.996163][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.011072][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.018523][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.026938][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.036451][ T4188] team0: Port device team_slave_0 added [ 53.042545][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.049882][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.058216][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.086842][ T4188] team0: Port device team_slave_1 added [ 53.103910][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.111262][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.119647][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.153134][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.160377][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.168086][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.185736][ T4181] team0: Port device team_slave_0 added [ 53.204574][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.222777][ T4181] team0: Port device team_slave_1 added [ 53.229260][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.236417][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.262437][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.284037][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.295543][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.314927][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.322346][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.348589][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.377288][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.397875][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.405035][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.412797][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.434900][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.441864][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.468030][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.480709][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.487905][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.513924][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.525056][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.532145][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.539877][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.552822][ T4182] team0: Port device team_slave_0 added [ 53.584650][ T4182] team0: Port device team_slave_1 added [ 53.592246][ T4191] team0: Port device team_slave_0 added [ 53.619922][ T4191] team0: Port device team_slave_1 added [ 53.628044][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.634575][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.646226][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.688177][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.716101][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.723063][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.749185][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.763729][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.770783][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.796833][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.814257][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.821293][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.847351][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.862300][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.869181][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.875972][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.883755][ T4181] Cannot create hsr debugfs directory [ 53.909359][ T4189] team0: Port device team_slave_0 added [ 53.916175][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.923132][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.949267][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.976784][ T4189] team0: Port device team_slave_1 added [ 53.985742][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.992317][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.998785][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.006458][ T4182] Cannot create hsr debugfs directory [ 54.070397][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.077902][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.104055][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.137111][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.144061][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.170221][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.183118][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.190306][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.197096][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.204658][ T4191] Cannot create hsr debugfs directory [ 54.225699][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 54.232419][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 54.285480][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.292317][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.298930][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.304792][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 54.312656][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 54.313595][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 54.318827][ T4189] Cannot create hsr debugfs directory [ 54.518717][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.529432][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.540526][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.549450][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.608145][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.618935][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.640735][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.656807][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.704253][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.721777][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.732843][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.751911][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.815462][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.847850][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.862522][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.881896][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.898881][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.914100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.924635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.937935][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.951709][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.960241][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.968768][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.989962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.000317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.010012][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.017417][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.027717][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.057148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.067341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.076176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.084401][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.091464][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.101169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.115230][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.144336][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.155186][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.179586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.189010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.198699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.209228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.217750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.227198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.235790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.244280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.252949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.261307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.269431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.277862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.288570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.306490][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.318002][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.360378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.376891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.391401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.401809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.411189][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.418279][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.427111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.438592][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.462132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.472774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.489384][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.496552][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.512128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.521062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.530218][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.537335][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.567819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.577445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.587223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.596021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.604592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.613441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.622360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.633508][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.640815][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.648472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.658916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.670293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.679655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.690297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.716693][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.726631][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.739430][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.750593][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.776840][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.787989][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.805753][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.813713][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.821761][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.830026][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.838517][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.847797][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.856460][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.864635][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.873138][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.887883][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.913974][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.938712][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.951244][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.960523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.971001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.988527][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.013148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.029467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.054649][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.081296][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.095283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.103703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.112792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.128116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.139202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.147968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.157219][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.164290][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.172105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.196163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.212205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.234613][ T4188] device veth0_vlan entered promiscuous mode [ 56.250770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.265739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.273697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.283853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.292347][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.299407][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.305046][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 56.308789][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 56.319666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.328093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.336075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.344543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.353273][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.360363][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.369140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.377904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.384942][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 56.386662][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 56.394873][ T4250] Bluetooth: hci2: command 0x041b tx timeout [ 56.406539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.416023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.425133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.433462][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.440552][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.448426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.457540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.487349][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.499851][ T4188] device veth1_vlan entered promiscuous mode [ 56.510421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.520091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.529497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.539263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.548247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.557680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.565159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.572634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.597036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.605779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.614252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.622926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.632295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.641904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.650812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.659656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.669055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.678097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.688132][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.700482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.711989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.721985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.730906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.756962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.767746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.779475][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.810728][ T4188] device veth0_macvtap entered promiscuous mode [ 56.819394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.828422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.837662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.866542][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.876941][ T4188] device veth1_macvtap entered promiscuous mode [ 56.904371][ T4181] device veth0_vlan entered promiscuous mode [ 56.920565][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.929422][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.938502][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.948810][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.957387][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.966318][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.974053][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.991223][ T4181] device veth1_vlan entered promiscuous mode [ 57.009373][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.042316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.055751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.076511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.086155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.113720][ T4182] device veth0_vlan entered promiscuous mode [ 57.139364][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.149269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.166899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.181306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.191748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.205679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.213475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.224088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.233044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.246204][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.257210][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267798][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.276771][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.293434][ T4181] device veth0_macvtap entered promiscuous mode [ 57.312477][ T4182] device veth1_vlan entered promiscuous mode [ 57.332239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.341100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.350890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.358529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.367753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.376694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.385535][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.405896][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.413670][ T4181] device veth1_macvtap entered promiscuous mode [ 57.489315][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.505542][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.513616][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.530212][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.544216][ T4182] device veth0_macvtap entered promiscuous mode [ 57.553276][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.564087][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.577759][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.601198][ T4182] device veth1_macvtap entered promiscuous mode [ 57.616278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.624376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.639155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.651113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.664275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.683858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.693422][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.703996][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.718762][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.751109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.760791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.770320][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.780241][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.789257][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.798998][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.838661][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.851145][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.860027][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.870903][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.880997][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.892298][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.903279][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.921231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.929971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.940349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.948327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.957236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.980727][ T4191] device veth0_vlan entered promiscuous mode [ 57.992947][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.005070][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.015282][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.025993][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.037524][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.055512][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.064285][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.073611][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.082614][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.094016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.102831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.111631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.120408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.128867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.138400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.147470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.155914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.163496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.171744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.186212][ T4189] device veth0_vlan entered promiscuous mode [ 58.204446][ T4191] device veth1_vlan entered promiscuous mode [ 58.250608][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.261251][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.270883][ T4189] device veth1_vlan entered promiscuous mode [ 58.303533][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.313460][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.323634][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.332606][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.385155][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 58.391495][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 58.406917][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.417771][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.436158][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.446502][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.456303][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.466199][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 58.468905][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.481663][ T4191] device veth0_macvtap entered promiscuous mode [ 58.488336][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 58.493275][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.499015][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 58.516108][ T4189] device veth0_macvtap entered promiscuous mode [ 58.523153][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.533298][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.575106][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.594039][ T4189] device veth1_macvtap entered promiscuous mode [ 58.629966][ T4191] device veth1_macvtap entered promiscuous mode [ 58.636772][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.650192][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.678411][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.691064][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.704459][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.723035][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.742006][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.753246][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.774284][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.802720][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.823606][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.834338][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.846390][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.856678][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.869476][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.879885][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.900547][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.926620][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.941916][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.942009][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.974841][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.981563][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.991022][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.999384][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.008897][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.021481][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.031129][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.041356][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.052228][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.069285][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.091895][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.115016][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.130110][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.140915][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.158866][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.178253][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.197164][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.211225][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.229906][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.242802][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.259890][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.271723][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.283963][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.296075][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.303467][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.319960][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.331863][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.350596][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.388685][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.395086][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.398569][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.414911][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.415033][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.431833][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.465599][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.474346][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.491820][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.500903][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.545255][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.790351][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.808613][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.851575][ T457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.864843][ T457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.893187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.923551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.948845][ T457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.964912][ T457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.009304][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.028714][ T4220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.051282][ T4220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.089433][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.185848][ T4317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.205728][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 60.466438][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 60.474466][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 60.546787][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 60.555003][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 60.565087][ T7] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 60.584971][ T7] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 60.586118][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.609531][ T7] usb 2-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.667342][ T7] usb 2-1: config 1 interface 0 has no altsetting 0 [ 60.678268][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 60.745309][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.764910][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 60.798814][ T7] usb 2-1: SerialNumber: syz [ 60.803657][ T4330] netlink: 'syz.2.16': attribute type 12 has an invalid length. [ 60.821550][ T4330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16'. [ 60.835471][ T4308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.855017][ T4308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.874365][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 61.010753][ T21] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 61.026079][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.030676][ T21] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 61.053203][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.071354][ T4342] syz.2.21[4342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.071509][ T4342] syz.2.21[4342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.074144][ T21] usb 4-1: config 0 has no interface number 0 [ 61.085174][ T4308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.132119][ T4308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.295212][ T21] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 61.324760][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.333650][ T21] usb 4-1: Product: syz [ 61.338401][ T21] usb 4-1: Manufacturer: syz [ 61.343369][ T21] usb 4-1: SerialNumber: syz [ 61.361918][ T21] usb 4-1: config 0 descriptor?? [ 61.385040][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.430901][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.442769][ T4228] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 61.452556][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.475858][ T4228] usb 5-1: config 0 descriptor?? [ 61.641471][ T7] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 61.852915][ T1108] usb 2-1: USB disconnect, device number 2 [ 61.870684][ T21] usb 4-1: Found UVC 0.00 device syz (046c:14e0) [ 61.871600][ T1108] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 61.884616][ T21] usb 4-1: No valid video chain found. [ 61.938341][ T21] usb 4-1: USB disconnect, device number 2 [ 61.982881][ T4228] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 62.005879][ T4228] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 62.092395][ T4384] syz.0.35[4384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.092547][ T4384] syz.0.35[4384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.189367][ T4228] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 62.674861][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 62.836206][ T4323] udc-core: couldn't find an available UDC or it's busy [ 62.853185][ T4323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.905031][ T4228] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 62.935071][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 62.941207][ T4228] usb 5-1: USB disconnect, device number 2 [ 63.054866][ T1108] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 63.074930][ T1108] usb 4-1: config 0 has no interface number 0 [ 63.084796][ T1108] usb 4-1: config 0 interface 184 has no altsetting 0 [ 63.209408][ T4418] fido_id[4418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 63.246055][ T1108] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 63.275339][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.283385][ T1108] usb 4-1: Product: syz [ 63.331028][ T1108] usb 4-1: Manufacturer: syz [ 63.338292][ T1108] usb 4-1: SerialNumber: syz [ 63.352533][ T1108] usb 4-1: config 0 descriptor?? [ 63.395999][ T1108] smsc75xx v1.0.0 [ 63.450365][ T4416] chnl_net:caif_netlink_parms(): no params data found [ 63.499689][ T4430] syz.4.46[4430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.499841][ T4430] syz.4.46[4430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.674204][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.694560][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.703975][ T4416] device bridge_slave_0 entered promiscuous mode [ 63.713082][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.720473][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.735927][ T4416] device bridge_slave_1 entered promiscuous mode [ 63.887757][ T4416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.955710][ T4416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.052653][ T1108] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 64.082236][ T1108] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.118147][ T4416] team0: Port device team_slave_0 added [ 64.136310][ T4416] team0: Port device team_slave_1 added [ 64.206384][ T4416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.224826][ T4416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.293353][ T4416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.333803][ T4416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.372199][ T4416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.451626][ T4416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.588321][ T4416] device hsr_slave_0 entered promiscuous mode [ 64.619376][ T4416] device hsr_slave_1 entered promiscuous mode [ 64.639858][ T4416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.661670][ T4416] Cannot create hsr debugfs directory [ 65.025412][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 65.095585][ T4416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.136981][ T4416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.167468][ T4416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.199447][ T4416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.530776][ T4416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.579625][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.622637][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.657741][ T4416] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.712313][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.727223][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.754784][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.761914][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.800224][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.846720][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.874199][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.884911][ T1108] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 65.895368][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.902878][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.924851][ T1108] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 65.962979][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.965994][ T1108] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 65.988355][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.038856][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.064815][ T1108] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 66.096541][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.105472][ T1108] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 66.125726][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.146053][ T1108] usb 4-1: USB disconnect, device number 3 [ 66.164861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.193868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.258024][ T4416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.299338][ T4416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.341111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.355462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.385480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.445053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.481950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.972447][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.074329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.097480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.110408][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 67.298351][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.357083][ T4416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.455529][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.562205][ T4521] 9pnet: Insufficient options for proto=fd [ 67.583671][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.759777][ T4523] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.156793][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.185890][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.276242][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.302975][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.337856][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.375590][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.417739][ T4416] device veth0_vlan entered promiscuous mode [ 68.475000][ T4416] device veth1_vlan entered promiscuous mode [ 68.572135][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.582525][ T4549] kvm: pic: non byte read [ 68.590189][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.627183][ T4549] kvm: pic: non byte read [ 68.632471][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.659104][ T4549] kvm: pic: non byte read [ 68.675547][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.696578][ T4549] kvm: pic: non byte read [ 68.726897][ T4416] device veth0_macvtap entered promiscuous mode [ 68.727419][ T4549] kvm: pic: non byte read [ 68.762355][ T4416] device veth1_macvtap entered promiscuous mode [ 68.779509][ T4549] kvm: pic: non byte read [ 68.819336][ T4549] kvm: pic: non byte read [ 68.835594][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.852950][ T4549] kvm: pic: non byte read [ 68.865443][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.885078][ T4549] kvm: pic: non byte read [ 68.889556][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.906369][ T4549] kvm: pic: non byte read [ 68.917005][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.937200][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.967399][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.988095][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.014805][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.024659][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.058678][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.086438][ T4416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.124935][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.133234][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.167815][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.185937][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 69.203310][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.236897][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.283269][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.327337][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.395312][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.424733][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.461700][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.489313][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.501918][ T4588] netlink: 'syz.4.97': attribute type 11 has an invalid length. [ 69.528942][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.549430][ T4416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.566105][ T4589] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 69.587858][ T4416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.602302][ T4416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.650409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.660826][ T4594] 9pnet: Insufficient options for proto=fd [ 69.670318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.685105][ T4288] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 69.703335][ T4416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.729775][ T4416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.754308][ T4416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.780421][ T4416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.935505][ T4288] usb 4-1: Using ep0 maxpacket: 32 [ 70.007906][ T457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.028857][ T457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.054895][ T4288] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.078780][ T4288] usb 4-1: config 0 has no interface number 0 [ 70.088044][ T4288] usb 4-1: config 0 interface 184 has no altsetting 0 [ 70.179355][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.203160][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.220433][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.269125][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.308380][ T4288] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.324849][ T4288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.332888][ T4288] usb 4-1: Product: syz [ 70.357175][ T4288] usb 4-1: Manufacturer: syz [ 70.372102][ T4288] usb 4-1: SerialNumber: syz [ 70.390462][ T4288] usb 4-1: config 0 descriptor?? [ 70.446158][ T4288] smsc75xx v1.0.0 [ 70.560200][ T154] device hsr_slave_0 left promiscuous mode [ 70.585565][ T154] device hsr_slave_1 left promiscuous mode [ 70.636839][ T7] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.684471][ T7] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.765867][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.781706][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.808898][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.836279][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.887006][ T154] device bridge_slave_1 left promiscuous mode [ 70.894227][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.954923][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.961510][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.979880][ T154] device bridge_slave_0 left promiscuous mode [ 70.994227][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.080482][ T154] device veth1_macvtap left promiscuous mode [ 71.087779][ T154] device veth0_macvtap left promiscuous mode [ 71.098757][ T154] device veth1_vlan left promiscuous mode [ 71.114452][ T154] device veth0_vlan left promiscuous mode [ 71.127843][ T4288] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 71.166136][ T4288] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 71.265187][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 71.464808][ T4228] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 71.581689][ T154] team0 (unregistering): Port device team_slave_1 removed [ 71.612954][ T154] team0 (unregistering): Port device team_slave_0 removed [ 71.661018][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.686494][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.744061][ T154] bond0 (unregistering): Released all slaves [ 71.845392][ T4228] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 71.864979][ T4228] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 71.899358][ T4228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.919624][ T4228] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 71.941047][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.949647][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.003986][ T4228] usb 2-1: config 0 descriptor?? [ 72.035399][ T4646] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.209685][ T1108] usb 6-1: Using ep0 maxpacket: 8 [ 72.336357][ T1108] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.372077][ T1108] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.389861][ T1108] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.399647][ T1108] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 72.414049][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.437527][ T1108] usb 6-1: config 0 descriptor?? [ 72.518191][ T4228] wacom 0003:056A:0064.0003: unknown main item tag 0x0 [ 72.535082][ T4228] wacom 0003:056A:0064.0003: unknown main item tag 0x0 [ 72.562461][ T4228] wacom 0003:056A:0064.0003: unknown main item tag 0x0 [ 72.575935][ T4228] wacom 0003:056A:0064.0003: unknown main item tag 0x0 [ 72.598650][ T4228] wacom 0003:056A:0064.0003: unknown main item tag 0x0 [ 72.614794][ T4228] wacom 0003:056A:0064.0003: unknown main item tag 0x0 [ 72.632339][ T4228] wacom 0003:056A:0064.0003: unknown main item tag 0x0 [ 72.643303][ T4228] wacom 0003:056A:0064.0003: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 72.691942][ T4228] wacom 0003:056A:0064.0003: hidraw0: USB HID vff.f7 Device [HID 056a:0064] on usb-dummy_hcd.1-1/input0 [ 72.720031][ T4228] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0064.0003/input/input5 [ 72.760999][ T4288] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 72.786670][ T4288] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 72.808762][ T4288] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 72.837776][ T4288] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 72.875101][ T4288] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 72.926511][ T4288] usb 4-1: USB disconnect, device number 4 [ 72.956048][ T1108] smartjoyplus 0003:0B43:0003.0004: ignoring exceeding usage max [ 73.007840][ T1108] smartjoyplus 0003:0B43:0003.0004: item fetching failed at offset 10/11 [ 73.040543][ T1108] smartjoyplus 0003:0B43:0003.0004: parse failed [ 73.059669][ T1108] smartjoyplus: probe of 0003:0B43:0003.0004 failed with error -22 [ 73.141611][ T4249] usb 6-1: USB disconnect, device number 2 [ 74.181157][ T4313] usb 2-1: USB disconnect, device number 3 [ 74.360930][ T4751] device syzkaller0 entered promiscuous mode [ 75.674490][ T4822] netlink: 'syz.4.153': attribute type 27 has an invalid length. [ 75.738338][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.754391][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.789598][ T4822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.854771][ T4825] tipc: Enabling of bearer rejected, failed to enable media [ 76.067365][ T13] cfg80211: failed to load regulatory.db [ 76.342024][ T4845] process 'syz.4.161' launched './file0' with NULL argv: empty string added [ 76.595095][ T4862] No such timeout policy "syz0" [ 76.853204][ T4878] overlayfs: failed to clone upperpath [ 76.880529][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.930080][ T4880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.382521][ T4906] netlink: 'syz.1.181': attribute type 2 has an invalid length. [ 78.422484][ T4970] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.627897][ T4978] loop5: detected capacity change from 0 to 164 [ 78.662171][ T4977] overlayfs: failed to clone upperpath [ 78.747808][ T4981] fuse: Bad value for 'fd' [ 79.321441][ T5014] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.401233][ T5009] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 79.464950][ T5009] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 79.650800][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 80.442099][ T5055] syz.0.229[5055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.442254][ T5055] syz.0.229[5055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.857636][ T5079] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.097613][ T5087] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.134003][ T5090] syz.4.243[5090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.134158][ T5090] syz.4.243[5090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.135526][ T5087] overlayfs: failed to set xattr on upper [ 81.317166][ T5087] overlayfs: ...falling back to index=off,metacopy=off. [ 81.356316][ T5087] overlayfs: conflicting lowerdir path [ 81.797185][ T5128] syz.1.258[5128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.797424][ T5128] syz.1.258[5128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.087634][ T5148] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.222308][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.254888][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.262037][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.290012][ T5153] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 82.303407][ T5153] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.544329][ T5162] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 82.569482][ T5162] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.744403][ T5182] tap0: tun_chr_ioctl cmd 1073935638 [ 82.748676][ T5184] loop1: detected capacity change from 0 to 128 [ 82.761761][ T5182] tap0: tun_chr_ioctl cmd 2147767517 [ 82.856811][ T5184] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.096990][ T5205] overlayfs: failed to clone upperpath [ 83.108139][ T5203] Zero length message leads to an empty skb [ 83.400062][ T5218] loop1: detected capacity change from 0 to 764 [ 83.513258][ T5225] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1735060478 (27760967648 ns) > initial count (27267544304 ns). Using initial count to start timer. [ 83.547286][ T5218] rock: directory entry would overflow storage [ 83.562258][ T5218] rock: sig=0x5245, size=8, remaining=5 [ 83.629923][ T5225] ------------[ cut here ]------------ [ 83.640430][ T5225] WARNING: CPU: 1 PID: 5225 at arch/x86/kvm/x86.c:10351 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 83.695634][ T5225] Modules linked in: [ 83.699778][ T5225] CPU: 1 PID: 5225 Comm: syz.3.298 Not tainted syzkaller #0 [ 83.742237][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.800716][ T5225] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 83.844857][ T5225] Code: e8 01 41 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 e6 40 ad 00 e9 c8 ed ff ff e8 dc da 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 83.897569][ T5225] RSP: 0018:ffffc9000355fc30 EFLAGS: 00010287 [ 83.903715][ T5225] RAX: ffffffff810eefd4 RBX: ffff888057614000 RCX: 0000000000080000 [ 83.918637][ T5225] RDX: ffffc9000e059000 RSI: 0000000000000421 RDI: 0000000000000422 [ 83.970786][ T5225] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad3196 [ 83.979962][ T5225] R10: fffffbfff1ad3196 R11: 1ffffffff1ad3195 R12: ffff88806362e001 [ 83.995696][ T5225] R13: 1ffff1100aec281e R14: ffff8880576140f0 R15: ffff88806362e000 [ 84.003713][ T5225] FS: 00007fa4c78a46c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 84.019575][ T5225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.027584][ T5225] CR2: 00007f36443f8ad8 CR3: 00000000543e1000 CR4: 00000000003526e0 [ 84.040473][ T5225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.048678][ T5225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.059874][ T5225] Call Trace: [ 84.063199][ T5225] [ 84.066302][ T5225] ? __lock_acquire+0x7c60/0x7c60 [ 84.071398][ T5225] kvm_vcpu_ioctl+0x887/0xb80 [ 84.076440][ T5225] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 84.082142][ T5225] ? bpf_lsm_file_ioctl+0x5/0x10 [ 84.087182][ T5225] ? security_file_ioctl+0x7c/0xa0 [ 84.092318][ T5225] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 84.098102][ T5225] __se_sys_ioctl+0xfa/0x170 [ 84.102808][ T5225] do_syscall_64+0x4c/0xa0 [ 84.108639][ T5225] ? clear_bhb_loop+0x30/0x80 [ 84.113386][ T5225] ? clear_bhb_loop+0x30/0x80 [ 84.119203][ T5225] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.126384][ T5225] RIP: 0033:0x7fa4c963cbe9 [ 84.130824][ T5225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.160378][ T5225] RSP: 002b:00007fa4c78a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.174135][ T5225] RAX: ffffffffffffffda RBX: 00007fa4c9873fa0 RCX: 00007fa4c963cbe9 [ 84.188402][ T5225] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 84.197742][ T5225] RBP: 00007fa4c96bfe19 R08: 0000000000000000 R09: 0000000000000000 [ 84.210937][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.221784][ T5225] R13: 00007fa4c9874038 R14: 00007fa4c9873fa0 R15: 00007ffce791aed8 [ 84.249784][ T5225] [ 84.252855][ T5225] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.260241][ T5225] CPU: 1 PID: 5225 Comm: syz.3.298 Not tainted syzkaller #0 [ 84.267813][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.277969][ T5225] Call Trace: [ 84.281275][ T5225] [ 84.284229][ T5225] dump_stack_lvl+0x168/0x230 [ 84.288942][ T5225] ? show_regs_print_info+0x20/0x20 [ 84.294157][ T5225] ? load_image+0x3b0/0x3b0 [ 84.298778][ T5225] panic+0x2c9/0x7f0 [ 84.302711][ T5225] ? bpf_jit_dump+0xd0/0xd0 [ 84.307240][ T5225] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 84.313078][ T5225] __warn+0x248/0x2b0 [ 84.317075][ T5225] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 84.322906][ T5225] report_bug+0x1b7/0x2e0 [ 84.327261][ T5225] handle_bug+0x3a/0x70 [ 84.331436][ T5225] exc_invalid_op+0x16/0x40 [ 84.335960][ T5225] asm_exc_invalid_op+0x16/0x20 [ 84.340825][ T5225] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 84.347259][ T5225] Code: e8 01 41 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 e6 40 ad 00 e9 c8 ed ff ff e8 dc da 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 84.366976][ T5225] RSP: 0018:ffffc9000355fc30 EFLAGS: 00010287 [ 84.373094][ T5225] RAX: ffffffff810eefd4 RBX: ffff888057614000 RCX: 0000000000080000 [ 84.381083][ T5225] RDX: ffffc9000e059000 RSI: 0000000000000421 RDI: 0000000000000422 [ 84.389089][ T5225] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad3196 [ 84.397084][ T5225] R10: fffffbfff1ad3196 R11: 1ffffffff1ad3195 R12: ffff88806362e001 [ 84.405162][ T5225] R13: 1ffff1100aec281e R14: ffff8880576140f0 R15: ffff88806362e000 [ 84.413175][ T5225] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 84.419196][ T5225] ? __lock_acquire+0x7c60/0x7c60 [ 84.424364][ T5225] kvm_vcpu_ioctl+0x887/0xb80 [ 84.429070][ T5225] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 84.434750][ T5225] ? bpf_lsm_file_ioctl+0x5/0x10 [ 84.439704][ T5225] ? security_file_ioctl+0x7c/0xa0 [ 84.444841][ T5225] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 84.450528][ T5225] __se_sys_ioctl+0xfa/0x170 [ 84.455156][ T5225] do_syscall_64+0x4c/0xa0 [ 84.459588][ T5225] ? clear_bhb_loop+0x30/0x80 [ 84.464278][ T5225] ? clear_bhb_loop+0x30/0x80 [ 84.468983][ T5225] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.474904][ T5225] RIP: 0033:0x7fa4c963cbe9 [ 84.479338][ T5225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.498958][ T5225] RSP: 002b:00007fa4c78a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.507397][ T5225] RAX: ffffffffffffffda RBX: 00007fa4c9873fa0 RCX: 00007fa4c963cbe9 [ 84.515388][ T5225] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 84.523378][ T5225] RBP: 00007fa4c96bfe19 R08: 0000000000000000 R09: 0000000000000000 [ 84.531370][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.539370][ T5225] R13: 00007fa4c9874038 R14: 00007fa4c9873fa0 R15: 00007ffce791aed8 [ 84.547387][ T5225] [ 84.550622][ T5225] Kernel Offset: disabled [ 84.555059][ T5225] Rebooting in 86400 seconds..