last executing test programs: 14.015819293s ago: executing program 3 (id=245): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r2, r1}) 13.585633826s ago: executing program 3 (id=247): r0 = getpid() setpriority(0x2, r0, 0x41a) 13.536084258s ago: executing program 0 (id=248): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r2, r1}) 13.003871314s ago: executing program 3 (id=251): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) move_pages(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x204450, 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) 12.915220637s ago: executing program 0 (id=252): sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa4}]}}}}}}}, 0x0) 9.883360722s ago: executing program 3 (id=255): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) 9.824485493s ago: executing program 0 (id=256): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x80004000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 9.750119416s ago: executing program 3 (id=259): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x400, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfe, 0x69f, &(0x7f0000000f00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x721, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x840) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) 7.151222367s ago: executing program 3 (id=271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) poll(&(0x7f0000000140)=[{r1, 0x208}, {r0, 0x80}], 0x2, 0x401) 4.620708906s ago: executing program 4 (id=276): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r1}) 4.520122429s ago: executing program 2 (id=277): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) 4.402680433s ago: executing program 2 (id=278): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) 4.219949139s ago: executing program 2 (id=280): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) r6 = dup(r0) write$UHID_INPUT(r6, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x50007a2) 4.205324669s ago: executing program 1 (id=281): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xdc1, &(0x7f0000000600)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}], @ipv6=@generic={0x5, 0x6, "f557c3", 0xd83, 0x5c, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, {[@fragment={0x2, 0x0, 0x2, 0x0, 0x0, 0xf, 0x64}, @dstopts={0x33, 0x190, '\x00', [@generic={0x6, 0xc7f, "b531b33afff2ca687b7d2d7f8130edf349a3d43a1f485f8c1064b45c4068ed11f05c6efcea36093054f894f35a0ca23e47bd72f21faf21022562b803b1771d8f843e79976ae537643fae170d2f7fecb27045a61cfecaceccffc566645fde811742508aebc15194b173b3aafa8fda1b71fdccba02871c2ba39040674f218c228541afe14f1e184ae4bbd74c4631031c2e585d73b500b3f9c9efc5b20576afad59382f6d8232b6421a2fe560a460b7c9907633aa0832e0aaafdf204618b0e730083facfbfb8677d576156f29dea6c3de1524e1cbd38168f77fdd5aa48b0cf6e7d9f1b473e3a59743c14d6a2d5cd78158a014ad572fb407474c8b933aaf89a945282428ada6e4838e5ef51222cd92ab627e83c16c4881759f867f0ad70174e175048c82ea30d05f601aef1f7fe6db13d92474f440f04b0652cd004714f9b09791fefa8d52cedffa00d7c3d11b6f7192d15e545c1a88d53c90345f39bf1c3718454e642459ba97ff299c64b862446a22b6aa4a9f8d3bff99e1d4053c327f5a194a7587b45c21b0a072e6d41ad2cd4a2275abc1fc3f32cb55871f6a51f02350948f513af210f60f13a17cb6ac4973f22f2aed5e8963c5962ad0bc77e8a611ac18c4eea05e91f351a01d4b0aa697d65a65869b85d20b47d38fad94724098bc37f0fdd219a108c1894229859304002cc9e101c6db5185537f43ab73db6f6717016db792d87e22b61e310ad7ed73c824480592ac9595bf1505647e5b9426f9ef86e044bb1e3d71a0589dac2237b286a17c8f2b4b40b6cab5ee866413b4ce0027eda11de465f8a9ed4f809a2eec255aa905e5d8f19a796ac76628a2c3924b9cdd9250a4868f08961a7a9fa40cb28cb8414d250b8ef1395f7802f78b3a001915a3ad5833a607b99b787209c935cc99308d8cfc589132faa77cd0d1a398488d1e844468b2faea3b93aa1702b9c6ce825e1fa23c47ff97e10e0fc0dee0a0421d10a95274476c3de87524162adc436f21e335ebc789c2ba5b6019107c44ae8c71f6b8627ceac84b66222a5f1e74696bbe87cabf531e552f8d570874830c184a460a77dc773a39f649d4b709c15dda583b14c8cecafe2ec683865597c8e0eaf8348c790b790dd1589091458cdbdb93cabe059fb365f5699dea10f2084f1d897ddc3d939764691c00b49a6f4c3147b27de12ad8a946413292bc285df596cd26c126d4e3524a0efc1a47204e4bf48798d5b5192e89f5ce2748fc5118901a262417898e2d22c2299811dc692fd763117b597ffff0b7867ca89b48aae77ec5d6c97de093e0241dfb521e84c88676d0a9676963fc901615c6075604c369e7a83719ff8e9f9638e88aac24f09ba60eea7a4458a4617bcb081f920ccb2475bdf8fee180a2a13e4f363d1176177c11b9826318c95e3e40dbd828acc48b99ee7fe63edeba5be1d75f4ea559473f83661c16ffc2c494b9fda6076498c2590e6ae1da7ed4c3ff4dc0e093b89f8c5777d7f6b414eb908f0ae6de921593a463d764d53a6f4dd4637a3c90b0370f0aa5ab9a3531d4b08d7e080774992b446e85081ab2f8a52321e4f82b4561d91ab0b573478fff6ebb9a8a4b1ce9e4f6a392d95c26b3c94f1cbecfa5a00fceb1ed65ba9ca9b53c3d5dd69d2b0abc4e0e6a4fdb9257b53c76c5495aa6ed92d46be1a14435f96819f3c3eed78998c6fc0f95cc894c2eaf19943cb306418fe0bb9c5610ed1f3e088bb5e9a5b8cfecbb44777ce584689e9d9a247a5d6e470fd3ffaf264ba843967e862dcb7bb02f2d3ba8c86f0b1e934ce35d1aaca5e7e383a88ed212e85836b1f039ad0c60197b8414a64e3c3b564e4445fcb642dfd53d0b72ed73a280387d2495be1eeef6a63539876a5673faed7187533a62a05c86486c62c95a61fac78e378349a4da0b5c2d3a8faf05669d61ae1f1d414a1ff798f5e57faed3218d423c12db0fd3fe5f35adc7f5448f9f9d360a0a1070e966ef26045796f6b64e33231fe9018e5d1adac36f580505374ed876aca5f9d2c5ba391430c36f256b0e1fea4ade89fdeef4a674325034d407fd9ec9a22a90353fb5e9c2badce3d4f929ddecd8982336b16af1cc35ca84afe3e4536106af582eb0cc7333e6f2afe5dc88584fb34001af157efa5d5eff964fa74b6ef58fc25b5550abab0e91544b36fbe6f4d4a4091d8cc4840fa277f9986f952917abc11d5a2852ad9b00b0b46c9f53732cd6fd5d2ec0410fe741510914917f806da5ad3a1c939f9f9097e5856fc57bcc8a77fe2a0ab6522bff9bc724458b751eed93b50d1ec1285f36ed338c8835094da621c8cb351d040fb4b1959cece346967b9cad1eec59e496fdacf58d5baee31bf7140e00bf245b79f6f90ce2e9ab895ab20b88f52470db327d5500ff083c1541f48311e2d7ce835338421ba55c9b69d9932704fcd72e200fd99f9f77b10deeb8b21211322afef1da4035dfa3c1d9778b033a138b627252703a966c4498359c489fef0bbceb958c866a9e3ea240bd502c63eaa6697c78755fd8a14bf0d301314890a4eff7db4f183e8235a657505accc77041025323b2c8778b513257b534c6a51737e9caa90f12f7666aec6bf8e31b38f795759bf7533b9f7d2f512408c4b8cb29b13b2bc14a5e1a4fbfc4202d373587eb1dc4e1882562f812e21e70b2179e5e772344a647ccce8979b1714833d77244a4f5650dc7ec60e4e4f2bc078a6086c7cef8c142dc0b48db3d33e57df8b121de09689c613a21c5b8003f666fab430c842140430c3fc84be78eab8f90ae0ea3b2a3a2a32f2321ed7beb2e289a5330bdf71ccf39e00caa2c8045866794bb40ad8befbc1c21a21365e000448c759a7728abaf2324141ac08c2d33a9ef7149cf8474bf4b95048fb150c69b9a61aec8abcb6f16aec930676a6d1cd30af17fc4dbfed01133ce802d1b0502013d11892c4a84aab449da258ad41db943c01bb606981919071de742f859db852b4c5c9c50d56c7487abd5774b0dd135fcdc2ee774af1027c1b873978011f50a29e1140f56291e295b8f27e26d4caa729b8adcb7e04841b50938409ece997969892966dee7864a9e1ba15394cd09fc472635fbd19909e0f36d7b33ded67caad87222b85442747eab550793a7188d4dc453c763abfa2162f917d74e62cd672881d4c23718c5b75b4ad36b6dd94c2830a22c81ca147e9ac63894c9ee263af0412a2c3a14c2429f5ca49ffdbddb45fd8d5cda0d27752124d2dab737184885f6f20a8234a8f7ae5e1178f8d02d6cd213048909b63fbe4a32855e961baaa05e877a46bb7382a28db293b1e22365f87f1ef64537e1e1d363a4d588e4c7d53c98dd445750b004b4eca3e1b90912dad3d785e045246aef9d59a001cf5e2e1551efc06da9d647cc02e8a6f7a1cbb1b04fe69950783fd039656a23f08e6b5ee34a9536c435c3cde292eca6ee58edf302e9ade191e0d476945ec102bf4234903d4ae708a87977775a049551d50aa4a8a6f4283597fa983742e68c77fc69c81ae91bcc7b865fa7723716c3987fd91d5b7d952e9cf0a133450a6bef37fc0040387935c5ad0d1594e889547505629431550ccb3182cc7e5d12b80c74647d650d3c5ef8fd0ab58d9b407cd3b92da8f41bfa445711d0dd81b512c457065110b41b9bff518dc08ef0b7315193ee0729a22ed0fbb74b8b08bfcd23083ee33a3e826eff44070ce4fff68ac3577c4a8c4f85ab09dceffd250b78013f224e847118a0049e166984284b7be08618b7492510187d285e7cbc5ddc41b4c8c791dde77609d49a31de6beb9b51b5515a66afefcda4d845846e1fb2f007f6df84e82a06c0f576d435fb438967bc2c3012e5342e7646ee09078858b93ea555a55fcfb4a67996c3184027061e3fc0dcac47990faaa157f8f0fc576877ee21ea8429175e044e89125dfa4c2ea8057aca9923f2f23ad617a293cd473ec1f5334a90ba225e55f8cf0f6433e248db5a3ea01567fb80f20fd26da0e377854acf0955feec77f51c27c0cb695c11bf3951b144ed2a890f629ce32089744c7abd62ba718246d02db43fbd6c1df635a88cb535fae1e64bdd3fdfde802bdb89059a40d903b13978a11c6707bcc45161e5f02f8eacaa37d0ad95e91071320ae97c88b15532204563e9ce83a63328c8bd0436a398b4366a54447198582c3a93b0fd6131d2329724bd0a8577b26cad821d4b640a40b8fa94708c0cbfca0850a70d8023cf8b271bce6c8635fdd575035bf648c56314ec22a84775ab474448736727c056977f911511b1bc00390db6dc3b928d2cadb2eecc1615be4d5d3b7d1447a82dbf88d9f05ff8e5f4b17c0aa7dfdeb550e73b6caba595507433609d78b6585c18dfd6f276e3fcf3737d5bd8ed57bcb0f30baa777b8d14af0f75f6441c48ff8baeb0db85f74f581ac00b62dc1c99be3af987d3f7a3fad7bbd59049711378e827b8740a1248b3ee5aaf5aa5ec1adf23d894ba28db198085f2a649118201001c6331c372e5a070013d22bd4a05ab708498a90b78688684b3346a1371"}]}, @fragment={0x88, 0x0, 0x7, 0x1, 0x0, 0x9, 0x67}, @routing={0x73, 0x2, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x2f, 0x0, 0xfb, 0x1, 0x0, 0xb, 0x65}], "61b1b413137b005fcd97b99cdd05c3d728335d3db114d8903f53c97fd5608a6f5a16b69066ae1855bb318a9165fa01e8893cba90507b366ed4869519d709638c350c9ab2825a12ee83ecbc84c0edb97a3f0451335713f81a7a5db8c1b007b70d2510e85e49496e3da15ac6769042b49e6b7d935f4bd80936befb2b2992584a39f3047d26f5b6c1c08d1327a5883ed40bde0160d0e09b9d14301921fdeaa59536393869745eee7c0290a1e835ea997ce8666c7197675e80facd3631e7cdb94d98589fba"}}}}}}, 0x0) 3.105717774s ago: executing program 4 (id=282): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r1}) 3.061556735s ago: executing program 2 (id=283): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d3000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.920003139s ago: executing program 0 (id=284): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.845967011s ago: executing program 0 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.814034292s ago: executing program 1 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.711311036s ago: executing program 1 (id=287): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 1.926018111s ago: executing program 4 (id=288): mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) 1.698801378s ago: executing program 0 (id=289): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, &(0x7f00000003c0), 0x0}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) unshare(0x28020480) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000e0010000000"], 0x24}}, 0x0) umount2(0x0, 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0xc) 1.687134808s ago: executing program 1 (id=290): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) 1.416071176s ago: executing program 1 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008890}, 0x24004810) 1.368609937s ago: executing program 4 (id=292): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r1}) 1.30845s ago: executing program 1 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x101, 0x10000, 0x3, 0x4, 0x375fd3e5}, 0x2, 0x0, 0x3, 0x3, 0x5, 0x12, 0x1f, 0x1b, 0x4, 0x5, {0x4, 0x5, 0x5c81, 0xb, 0x52ea5d4d, 0x101}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.30548574s ago: executing program 2 (id=294): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) r6 = dup(r0) write$UHID_INPUT(r6, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x50007a2) 142.015826ms ago: executing program 4 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040800) 133.511756ms ago: executing program 2 (id=296): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) exit(0xffff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=297): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000e000000100000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0x0], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 47.492339][ T4175] cgroup: Unknown subsys name 'net' [ 47.607202][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.813226][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.650256][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.694158][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.741190][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.769146][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 50.837041][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 50.847294][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.854648][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.862615][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.895314][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.902669][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.910263][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.937543][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.944688][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.952742][ T4198] device bridge_slave_0 entered promiscuous mode [ 50.967881][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.975092][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.983459][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.995749][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.003027][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.010648][ T4198] device bridge_slave_1 entered promiscuous mode [ 51.026918][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.044175][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.051248][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.060473][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.077516][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.109635][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.119491][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.127301][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.145353][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.160382][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.167727][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.176052][ T4192] device bridge_slave_1 entered promiscuous mode [ 51.184939][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.201814][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.212762][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.224284][ T4189] team0: Port device team_slave_0 added [ 51.260454][ T4189] team0: Port device team_slave_1 added [ 51.275918][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.283199][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.290889][ T4196] device bridge_slave_0 entered promiscuous mode [ 51.307977][ T4198] team0: Port device team_slave_0 added [ 51.315555][ T4198] team0: Port device team_slave_1 added [ 51.323273][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.334560][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.349066][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.356276][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.364853][ T4196] device bridge_slave_1 entered promiscuous mode [ 51.374381][ T4188] team0: Port device team_slave_0 added [ 51.405058][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.412035][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.438328][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.450972][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.458634][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.484871][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.497505][ T4188] team0: Port device team_slave_1 added [ 51.515470][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.522566][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.548741][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.560272][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.567255][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.593812][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.616246][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.627845][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.639251][ T4192] team0: Port device team_slave_0 added [ 51.670136][ T4192] team0: Port device team_slave_1 added [ 51.689455][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.696775][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.722913][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.755117][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.766879][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.792898][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.804228][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.811209][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.837486][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.850712][ T4196] team0: Port device team_slave_0 added [ 51.873969][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.881147][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.889053][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.896122][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.922253][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.938298][ T4196] team0: Port device team_slave_1 added [ 51.947523][ T4198] device hsr_slave_0 entered promiscuous mode [ 51.954622][ T4198] device hsr_slave_1 entered promiscuous mode [ 51.961152][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.969038][ T4198] Cannot create hsr debugfs directory [ 52.044178][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.050785][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.057547][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.065531][ T4188] Cannot create hsr debugfs directory [ 52.071474][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.078508][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.104796][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.127179][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.133873][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.140633][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.148767][ T4192] Cannot create hsr debugfs directory [ 52.166604][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.173702][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.200516][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.354239][ T4196] device hsr_slave_0 entered promiscuous mode [ 52.361610][ T4196] device hsr_slave_1 entered promiscuous mode [ 52.368667][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.376360][ T4196] Cannot create hsr debugfs directory [ 52.393108][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 52.402238][ T4177] Bluetooth: hci2: command 0x0409 tx timeout [ 52.402845][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 52.408281][ T4177] Bluetooth: hci4: command 0x0409 tx timeout [ 52.441182][ T4177] Bluetooth: hci0: command 0x0409 tx timeout [ 52.553739][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.570698][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.591370][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.603747][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.636091][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.648839][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.663055][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.671901][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.721503][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.731172][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.740518][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.751506][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.814010][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.859466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.869214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.890422][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.899540][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.928096][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.940786][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.959271][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.972341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.983212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.992145][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.999392][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.011142][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.021549][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.034981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.043583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.053825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.062291][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.069343][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.082974][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.093800][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.106246][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.123153][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.154736][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.164155][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.173612][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.183365][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.197903][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.206941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.216244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.225291][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.234418][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.259277][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.273214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.281617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.293244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.303540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.311882][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.318966][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.341275][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.353650][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.364080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.372548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.380312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.388338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.398379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.408265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.417235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.425984][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.433093][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.443160][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.454988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.464174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.473353][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.480387][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.530530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.540567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.556125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.565181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.574627][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.581684][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.589281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.600102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.616269][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.643184][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.656039][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.669232][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.685717][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.696956][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.705680][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.715253][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.723949][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.733571][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.742377][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.750143][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.774564][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.784934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.794567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.803732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.812010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.820534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.829364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.842593][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.875938][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.895242][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.908505][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.917223][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.925407][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.933508][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.940952][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.948782][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.957597][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.966722][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.974605][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.990626][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.004901][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.019027][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.034093][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.047674][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.054826][ T662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.062760][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.071498][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.080934][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.088041][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.123788][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.138334][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.147648][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.164281][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.171758][ T662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.180277][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.188915][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.197744][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.204823][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.213193][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.221686][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.230977][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.240067][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.248979][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.270951][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.288420][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.299120][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.311301][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.319717][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.327375][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.339683][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.349197][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.360697][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.370337][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.405870][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.414868][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.423772][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.432017][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.440719][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.449783][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.458407][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.465978][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.473709][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 54.479809][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 54.481813][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.486144][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 54.499218][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.507472][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 54.528755][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.550089][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.560910][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.561150][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 54.580312][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.593225][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.601737][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.616182][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.625986][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.635683][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.644686][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.654805][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.663628][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.671895][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.680684][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.689390][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.697989][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.705973][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.727144][ T4192] device veth0_vlan entered promiscuous mode [ 54.735174][ T4198] device veth0_vlan entered promiscuous mode [ 54.747765][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.766010][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.808717][ T4198] device veth1_vlan entered promiscuous mode [ 54.830627][ T4192] device veth1_vlan entered promiscuous mode [ 54.849998][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.858990][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.949256][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.973554][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.982654][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.991257][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.008483][ T4192] device veth0_macvtap entered promiscuous mode [ 55.023626][ T4198] device veth0_macvtap entered promiscuous mode [ 55.045051][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.054853][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.063382][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.071347][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.079501][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.089790][ T4192] device veth1_macvtap entered promiscuous mode [ 55.100019][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.108460][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.118018][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.128507][ T4198] device veth1_macvtap entered promiscuous mode [ 55.172035][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.180754][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.189462][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.197210][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.207365][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.216674][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.225482][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.233937][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.242499][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.250999][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.260110][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.268513][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.278856][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.289805][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.301470][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.311636][ T4189] device veth0_vlan entered promiscuous mode [ 55.327457][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.334677][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.344063][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.358185][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.374697][ T4189] device veth1_vlan entered promiscuous mode [ 55.387207][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.397169][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.406260][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.416185][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.427116][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.438479][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.449146][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.458178][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.467119][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.476113][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.491223][ T4196] device veth0_vlan entered promiscuous mode [ 55.513812][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.521855][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.531017][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.541736][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.550290][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.558834][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.568001][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.577024][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.584905][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.600542][ T4196] device veth1_vlan entered promiscuous mode [ 55.619107][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.628458][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.637581][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.647447][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.690271][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.701159][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.709245][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.717752][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.744247][ T4189] device veth0_macvtap entered promiscuous mode [ 55.765288][ T4188] device veth0_vlan entered promiscuous mode [ 55.776536][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.787214][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.795723][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.804395][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.812290][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.829650][ T4189] device veth1_macvtap entered promiscuous mode [ 55.851848][ T4188] device veth1_vlan entered promiscuous mode [ 55.864870][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.874329][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.928463][ T4196] device veth0_macvtap entered promiscuous mode [ 55.956463][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.959065][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.968208][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.980362][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.993679][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.004155][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.015813][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.030958][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.042649][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.052953][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.063652][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.074747][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.095509][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.104160][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.112868][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.121927][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.132986][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.141481][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.157698][ T4188] device veth0_macvtap entered promiscuous mode [ 56.167394][ T4196] device veth1_macvtap entered promiscuous mode [ 56.177036][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.186357][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.195525][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.206101][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.233923][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.241836][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.252328][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.261466][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.278175][ T4188] device veth1_macvtap entered promiscuous mode [ 56.302833][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.307509][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.310815][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.324102][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.340214][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.350837][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.361079][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.371727][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.383799][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.414460][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.422337][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.430166][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.431777][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.448377][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.457324][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.466127][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.479034][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.489711][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.502504][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.514158][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.524261][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.535108][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.546494][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.554654][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 56.560887][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 56.582722][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.595629][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.604359][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 56.611174][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 56.626202][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.638849][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 56.648115][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.660571][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.671650][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.682207][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.693618][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.703691][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.716451][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.728394][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.759952][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.771033][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779806][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.788894][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.801672][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.811262][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.832464][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.848060][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.859060][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.869773][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.880100][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.890737][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.900637][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.911102][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.924353][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.931730][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.946662][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.969550][ T662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.973910][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.988286][ T662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.996350][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.027187][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.037268][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.048124][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057215][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.075517][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.083627][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.136709][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.161556][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.189828][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.331699][ T4278] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 57.348268][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.366856][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.406026][ T662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.423522][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.437934][ T662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.490637][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.527142][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.535538][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.550851][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.586329][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.594835][ T4290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 57.619749][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.631360][ T4291] loop4: detected capacity change from 0 to 512 [ 57.633389][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.668077][ T4290] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.676843][ T4291] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 57.695538][ T4291] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 57.725468][ T4291] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.878331][ T4291] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.8: Allocating blocks 41-42 which overlap fs metadata [ 57.895174][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 57.903963][ T4291] Quota error (device loop4): write_blk: dquota write failed [ 57.911541][ T4291] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 57.931494][ T4291] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.8: Allocating blocks 41-42 which overlap fs metadata [ 57.948661][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.019425][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.032262][ T4291] Quota error (device loop4): write_blk: dquota write failed [ 58.039950][ T4291] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 58.080737][ T4291] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.8: Failed to acquire dquot type 1 [ 58.119283][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.132878][ T4291] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.171422][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.189770][ T4291] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.8: corrupted inode contents [ 58.223240][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.233516][ T4291] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.8: mark_inode_dirty error [ 58.252435][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 58.283033][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.298001][ T4291] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.8: corrupted inode contents [ 58.330475][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.354476][ T4291] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.8: mark_inode_dirty error [ 58.382909][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.389983][ T4291] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.8: corrupted inode contents [ 58.417852][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.420483][ T4320] loop3: detected capacity change from 0 to 512 [ 58.427522][ T4291] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 58.450729][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.461064][ T4291] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.8: corrupted inode contents [ 58.479962][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.498816][ T4320] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.506642][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.515458][ T4291] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.8: mark_inode_dirty error [ 58.539157][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.549952][ T4320] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.14: bad orphan inode 13 [ 58.566438][ T4291] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 58.573341][ T4320] ext4_test_bit(bit=12, block=18) = 1 [ 58.575766][ T1111] usb 1-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 58.590448][ T4320] is_bad_inode(inode)=0 [ 58.591620][ T1111] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.599952][ T4320] NEXT_ORPHAN(inode)=0 [ 58.605005][ T1111] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.609149][ T4190] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.623138][ T4320] max_ino=32 [ 58.629456][ T4291] EXT4-fs (loop4): Remounting filesystem read-only [ 58.635352][ T4320] i_nlink=1 [ 58.643332][ T4320] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.651844][ T4291] EXT4-fs (loop4): 1 truncate cleaned up [ 58.668768][ T4291] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noblock_validity,jqfmt=vfsold,nodelalloc,errors=remount-ro,nomblk_io_submit,nojournal_checksum,mb_optimize_scan=0x0000000000000001,resgid=0x00000000000000002. Quota mode: writeback. [ 58.702312][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 58.731507][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 58.743398][ T4320] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.760728][ T4320] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.14: bg 0: block 248: padding at end of block bitmap is not set [ 58.767994][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 58.786704][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 58.791947][ T4320] Quota error (device loop3): write_blk: dquota write failed [ 58.811937][ T4320] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 58.816400][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 58.832559][ T1111] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 58.841637][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.850125][ T4320] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.14: Failed to acquire dquot type 1 [ 58.862096][ T1111] usb 1-1: Product: syz [ 58.875117][ T1111] usb 1-1: Manufacturer: syz [ 58.880614][ T1111] usb 1-1: SerialNumber: syz [ 58.932605][ T4190] usb 3-1: Using ep0 maxpacket: 8 [ 59.092437][ T4190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.160514][ T4328] loop4: detected capacity change from 0 to 128 [ 59.192733][ T4190] usb 3-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 59.205749][ T4190] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.215835][ T4190] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.231871][ T4328] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.243010][ T4328] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.312860][ T1111] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 59.332785][ T1111] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 59.373399][ T1111] usb 1-1: USB disconnect, device number 2 [ 59.382554][ T4190] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 59.391629][ T4190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.401801][ T4190] usb 3-1: Product: syz [ 59.406095][ T4190] usb 3-1: Manufacturer: syz [ 59.410885][ T4190] usb 3-1: SerialNumber: syz [ 59.519727][ T4286] IPVS: lc: FWM 3 0x00000003 - no destination available [ 59.545906][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.611655][ T4286] loop0: detected capacity change from 0 to 8192 [ 59.869557][ T4334] ODEBUG: Out of memory. ODEBUG disabled [ 60.133409][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 60.187288][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.224767][ T4286] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.329539][ T26] audit: type=1800 audit(1780869025.194:2): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7" name="file1" dev="loop0" ino=1048590 res=0 errno=0 [ 60.412987][ T4190] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 60.467846][ T4190] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 60.503082][ T4312] IPVS: lc: FWM 3 0x00000003 - no destination available [ 60.530713][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.558764][ T4190] usb 3-1: USB disconnect, device number 2 [ 60.736591][ T4312] loop2: detected capacity change from 0 to 8192 [ 60.768847][ T4312] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.826280][ T26] audit: type=1800 audit(1780869025.694:3): pid=4312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 60.898436][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.487707][ T4334] Set syz1 is full, maxelem 65536 reached [ 61.592657][ T4231] usb 4-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 61.603011][ T4231] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 61.623497][ T4231] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.749972][ T4342] loop0: detected capacity change from 0 to 128 [ 61.750499][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 61.828429][ T4231] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 61.844097][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.869530][ T4231] usb 4-1: Product: syz [ 61.884276][ T4231] usb 4-1: Manufacturer: syz [ 61.888949][ T4231] usb 4-1: SerialNumber: syz [ 61.904678][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 61.952115][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.962114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.972096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.982087][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.992097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.002092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.012095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.022092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.042476][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 62.162103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.172114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.372352][ T4231] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 62.416003][ T4231] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 62.461546][ T4231] usb 4-1: USB disconnect, device number 2 [ 63.446968][ T4365] Zero length message leads to an empty skb [ 63.637386][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.817367][ T4389] loop4: detected capacity change from 0 to 256 [ 65.866727][ T4389] ======================================================= [ 65.866727][ T4389] WARNING: The mand mount option has been deprecated and [ 65.866727][ T4389] and is ignored by this kernel. Remove the mand [ 65.866727][ T4389] option from the mount to silence this warning. [ 65.866727][ T4389] ======================================================= [ 66.002740][ T4389] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.288520][ T4406] loop0: detected capacity change from 0 to 1764 [ 71.275980][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.276052][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.604446][ T4440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.53'. [ 72.883995][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 72.957711][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 72.957777][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 73.672263][ T4457] Process accounting resumed [ 75.265210][ T4473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.64'. [ 76.271360][ T4484] loop3: detected capacity change from 0 to 128 [ 76.401214][ T23] cfg80211: failed to load regulatory.db [ 79.861745][ T4499] Process accounting resumed [ 80.635893][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.024965][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.150938][ T4505] Set syz1 is full, maxelem 65536 reached [ 81.238073][ T4517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 81.332807][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.334150][ T4519] loop0: detected capacity change from 0 to 128 [ 81.493384][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.509093][ T4519] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.717923][ T4558] Process accounting resumed [ 86.515754][ T4578] loop3: detected capacity change from 0 to 128 [ 87.191452][ T4568] Set syz1 is full, maxelem 65536 reached [ 87.542198][ T4578] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.563855][ T4578] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.808895][ T4607] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.906995][ T4607] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.229039][ T4621] loop1: detected capacity change from 0 to 1024 [ 90.337724][ T4621] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.105: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.353490][ T4621] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 90.378950][ T4621] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.105: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.455114][ T4621] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 90.476958][ T4621] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.105: Failed to acquire dquot type 0 [ 90.923690][ T4621] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 91.000784][ T4621] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.105: mark_inode_dirty error [ 91.048833][ T4621] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 91.662308][ T4621] EXT4-fs (loop1): 1 orphan inode deleted [ 91.682443][ T4621] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 91.692647][ T4487] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.829114][ T4487] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 91.967131][ T4487] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:14: Failed to release dquot type 0 [ 92.206959][ T4188] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 93.057354][ T4188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 93.102254][ T4188] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 93.529749][ T4650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.547941][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.581798][ T4651] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.689334][ T4655] loop1: detected capacity change from 0 to 256 [ 95.149915][ T4659] chnl_net:caif_netlink_parms(): no params data found [ 96.072246][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 96.181162][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.320915][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.333265][ T4659] device bridge_slave_0 entered promiscuous mode [ 96.348702][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.393125][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.402845][ T4659] device bridge_slave_1 entered promiscuous mode [ 96.491836][ T4659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.533169][ T4659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.621613][ T4690] loop3: detected capacity change from 0 to 1024 [ 96.640700][ T4659] team0: Port device team_slave_0 added [ 96.660039][ T4659] team0: Port device team_slave_1 added [ 96.707552][ T4692] tipc: Started in network mode [ 96.717107][ T4692] tipc: Node identity 1d09, cluster identity 4711 [ 96.732616][ T4690] EXT4-fs (loop3): Invalid want_extra_isize 3678 [ 96.851760][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.866690][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.910383][ T4659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.950514][ T4700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.047233][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.054542][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.090372][ T4659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.162551][ T4659] device hsr_slave_0 entered promiscuous mode [ 97.177347][ T4659] device hsr_slave_1 entered promiscuous mode [ 97.190760][ T4659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.204682][ T4659] Cannot create hsr debugfs directory [ 97.519771][ T4659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.654821][ T4659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.742996][ T4659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.854354][ T4659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.192905][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 99.317823][ T4659] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.331505][ T4659] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.351459][ T4659] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.368955][ T4659] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.499787][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 99.593616][ T4739] loop3: detected capacity change from 0 to 1764 [ 100.518542][ T4659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.549651][ T4659] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.608677][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.617302][ T4750] loop3: detected capacity change from 0 to 4096 [ 100.630594][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.658697][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.698243][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.724823][ T4750] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.770930][ T4764] loop1: detected capacity change from 0 to 128 [ 100.793541][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 100.809909][ T4750] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.152: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 100.810163][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.836450][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.837155][ T4750] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.152: directory missing '..' [ 100.888798][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.942468][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.984523][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.991654][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.081671][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.138995][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.017812][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.033209][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.065905][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.091892][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.139257][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.154206][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.166341][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.188732][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.203517][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.220436][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.245134][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.067691][ T4190] Bluetooth: hci3: command 0x0419 tx timeout [ 103.154569][ T4799] loop4: detected capacity change from 0 to 512 [ 103.206919][ T4799] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.236839][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.261987][ T4799] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.281934][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.346424][ T4659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.356684][ T4799] EXT4-fs (loop4): 1 truncate cleaned up [ 103.387498][ T4799] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 103.441708][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.487443][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.619204][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.659856][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.705385][ T4659] device veth0_vlan entered promiscuous mode [ 103.719247][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.742754][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.576788][ T4659] device veth1_vlan entered promiscuous mode [ 104.723675][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.746778][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.803360][ T4659] device veth0_macvtap entered promiscuous mode [ 104.847434][ T4659] device veth1_macvtap entered promiscuous mode [ 104.946481][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.966396][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.986902][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.009314][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.032548][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.043581][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.054709][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.065564][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.075854][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.086880][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.099032][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.109573][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.118612][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.127875][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.138186][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.154553][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.168184][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.178497][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.189327][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.199582][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.211058][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.216885][ T4358] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 105.221274][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.240008][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.241381][ T4821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.250322][ T4659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.271931][ T4659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.289823][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.297852][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.313547][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.330510][ T4659] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.341760][ T4659] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.360856][ T4659] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.370095][ T4659] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.468815][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.481261][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.500312][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.541039][ T662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.558727][ T662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.579251][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.419195][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.454870][ T4842] netlink: 56 bytes leftover after parsing attributes in process `syz.2.179'. [ 108.616672][ T4846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 108.875836][ T4851] loop2: detected capacity change from 0 to 2048 [ 108.972216][ T4292] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.028643][ T4851] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 109.119844][ T4851] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.192149][ T4292] usb 5-1: device descriptor read/64, error -71 [ 110.082565][ T4851] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.184: bg 0: block 345: padding at end of block bitmap is not set [ 110.173199][ T4851] EXT4-fs (loop2): Remounting filesystem read-only [ 110.435430][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 110.553503][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 111.262657][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.411014][ T4891] loop1: detected capacity change from 0 to 512 [ 111.502750][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 111.682501][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.802817][ T23] usb 3-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 111.897687][ T4891] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 111.939962][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 112.095961][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.116962][ T4891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.185510][ T4891] EXT4-fs (loop1): 1 truncate cleaned up [ 112.191204][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,nomblk_io_submit,debug_want_extra_isize=0x0000000000000006,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 112.402617][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 112.422642][ T4906] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.436015][ T4905] device syzkaller0 entered promiscuous mode [ 112.441937][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.474278][ T23] usb 3-1: Product: syz [ 112.478669][ T23] usb 3-1: Manufacturer: syz [ 112.483384][ T23] usb 3-1: SerialNumber: syz [ 112.510587][ T4906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.544443][ T4909] tipc: Started in network mode [ 112.558806][ T4909] tipc: Node identity 8ee25eeff996, cluster identity 4711 [ 112.590717][ T4909] tipc: Enabled bearer , priority 0 [ 112.608217][ T4905] tipc: Resetting bearer [ 112.644341][ T4903] tipc: Resetting bearer [ 112.687927][ T4903] tipc: Disabling bearer [ 112.701114][ T4913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'. [ 112.852297][ T23] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 112.912895][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 112.944327][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.961436][ T4884] IPVS: lc: FWM 3 0x00000003 - no destination available [ 112.992258][ T23] usb 3-1: USB disconnect, device number 3 [ 113.283431][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.308336][ T4926] netlink: 56 bytes leftover after parsing attributes in process `syz.0.209'. [ 115.419364][ T4941] loop2: detected capacity change from 0 to 512 [ 115.578679][ T4941] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 115.639359][ T4941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.900512][ T4941] EXT4-fs (loop2): 1 truncate cleaned up [ 115.963548][ T4941] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,nomblk_io_submit,debug_want_extra_isize=0x0000000000000006,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 115.987073][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.109801][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 116.736684][ T4962] loop4: detected capacity change from 0 to 512 [ 116.839712][ T4962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.896903][ T4962] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.223: corrupted xattr entries [ 116.949211][ T4962] EXT4-fs (loop4): Remounting filesystem read-only [ 117.011540][ T4962] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.040548][ T4962] EXT4-fs (loop4): 1 truncate cleaned up [ 117.046480][ T4962] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 118.269083][ T4992] device syzkaller0 entered promiscuous mode [ 118.341678][ T4995] tipc: Started in network mode [ 118.357585][ T4995] tipc: Node identity 82e46ed77fe8, cluster identity 4711 [ 118.418142][ T4995] tipc: Enabled bearer , priority 0 [ 118.498111][ T4992] tipc: Resetting bearer [ 118.513348][ T4999] loop0: detected capacity change from 0 to 512 [ 118.550803][ T4999] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 118.560550][ T4991] tipc: Resetting bearer [ 118.599023][ T4991] tipc: Disabling bearer [ 118.608768][ T4999] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.681588][ T4999] EXT4-fs (loop0): 1 truncate cleaned up [ 118.724859][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,nomblk_io_submit,debug_want_extra_isize=0x0000000000000006,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 119.975732][ T5014] netlink: 108 bytes leftover after parsing attributes in process `syz.1.241'. [ 124.451784][ T5060] loop3: detected capacity change from 0 to 164 [ 124.563500][ T5064] capability: warning: `syz.1.261' uses 32-bit capabilities (legacy support in use) [ 126.653421][ T5079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.266'. [ 126.781210][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 129.779832][ T5113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.278'. [ 131.360355][ T5134] loop0: detected capacity change from 0 to 128 [ 131.376440][ T5133] tipc: Enabling of bearer rejected, failed to enable media [ 131.657389][ T5140] attempt to access beyond end of device [ 131.657389][ T5140] loop0: rw=2049, want=393, limit=128 [ 132.338054][ T5134] attempt to access beyond end of device [ 132.338054][ T5134] loop0: rw=524288, want=369, limit=128 [ 132.541627][ T5144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.290'. [ 132.714335][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.720972][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.033270][ T5158] tipc: Enabled bearer , priority 0 [ 134.061809][ T5155] tipc: Disabling bearer [ 134.157056][ T5168] ================================================================== [ 134.165505][ T5168] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.174728][ T5168] Read of size 1 at addr ffff88807900b608 by task syz.4.297/5168 [ 134.182454][ T5168] [ 134.184801][ T5168] CPU: 0 PID: 5168 Comm: syz.4.297 Not tainted syzkaller #0 [ 134.192091][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.202168][ T5168] Call Trace: [ 134.205456][ T5168] [ 134.208388][ T5168] dump_stack_lvl+0x188/0x250 [ 134.213081][ T5168] ? show_regs_print_info+0x20/0x20 [ 134.218297][ T5168] ? load_image+0x400/0x400 [ 134.222807][ T5168] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 134.228286][ T5168] print_address_description+0x60/0x2d0 [ 134.233853][ T5168] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.240378][ T5168] kasan_report+0xdf/0x130 [ 134.244822][ T5168] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.251356][ T5168] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.257727][ T5168] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 134.263904][ T5168] ? xfrm_policy_alloc+0x75/0x2b0 [ 134.268967][ T5168] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 134.275136][ T5168] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 134.281054][ T5168] xfrm_policy_inexact_insert+0xe0/0x1460 [ 134.286794][ T5168] ? do_raw_spin_lock+0x128/0x2f0 [ 134.291845][ T5168] ? __rwlock_init+0x140/0x140 [ 134.296630][ T5168] ? policy_hash_bysel+0x135/0x7b0 [ 134.301765][ T5168] xfrm_policy_insert+0x112/0x930 [ 134.306827][ T5168] xfrm_add_policy+0x4f2/0x880 [ 134.311617][ T5168] ? xfrm_dump_sa_done+0xc0/0xc0 [ 134.316566][ T5168] ? apparmor_capable+0x12c/0x190 [ 134.321614][ T5168] ? __nla_parse+0x3c/0x50 [ 134.326059][ T5168] xfrm_user_rcv_msg+0x5e5/0x910 [ 134.331017][ T5168] ? xfrm_netlink_rcv+0x90/0x90 [ 134.335915][ T5168] ? xfrm_netlink_rcv+0x66/0x90 [ 134.340807][ T5168] ? __mutex_lock_common+0x465/0x2400 [ 134.346208][ T5168] ? __skb_clone+0x480/0x790 [ 134.350833][ T5168] netlink_rcv_skb+0x1f5/0x440 [ 134.355616][ T5168] ? xfrm_netlink_rcv+0x90/0x90 [ 134.360486][ T5168] ? netlink_ack+0xb50/0xb50 [ 134.365091][ T5168] ? __lock_acquire+0x7d10/0x7d10 [ 134.370145][ T5168] xfrm_netlink_rcv+0x75/0x90 [ 134.374837][ T5168] netlink_unicast+0x774/0x920 [ 134.379624][ T5168] netlink_sendmsg+0x8ba/0xbe0 [ 134.384421][ T5168] ? netlink_getsockopt+0x570/0x570 [ 134.389649][ T5168] ? aa_sock_msg_perm+0x94/0x150 [ 134.394606][ T5168] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 134.399910][ T5168] ? security_socket_sendmsg+0x7c/0xa0 [ 134.405662][ T5168] ? netlink_getsockopt+0x570/0x570 [ 134.410880][ T5168] ____sys_sendmsg+0x5b7/0x8f0 [ 134.415678][ T5168] ? __sys_sendmsg_sock+0x30/0x30 [ 134.420736][ T5168] ? import_iovec+0x6f/0xa0 [ 134.425262][ T5168] ___sys_sendmsg+0x236/0x2e0 [ 134.429968][ T5168] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.434768][ T5168] ? percpu_counter_add_batch+0x13b/0x160 [ 134.440537][ T5168] __se_sys_sendmsg+0x1af/0x290 [ 134.445417][ T5168] ? __x64_sys_sendmsg+0x80/0x80 [ 134.450375][ T5168] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 134.456392][ T5168] ? lockdep_hardirqs_on+0x94/0x140 [ 134.461616][ T5168] do_syscall_64+0x4c/0xa0 [ 134.466049][ T5168] ? clear_bhb_loop+0x30/0x80 [ 134.470743][ T5168] ? clear_bhb_loop+0x30/0x80 [ 134.475450][ T5168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.481375][ T5168] RIP: 0033:0x7f730bd19e59 [ 134.485809][ T5168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.505430][ T5168] RSP: 002b:00007f7309f73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.513955][ T5168] RAX: ffffffffffffffda RBX: 00007f730bf92fa0 RCX: 00007f730bd19e59 [ 134.521949][ T5168] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 134.529942][ T5168] RBP: 00007f730bdafd6f R08: 0000000000000000 R09: 0000000000000000 [ 134.537938][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.545928][ T5168] R13: 00007f730bf93038 R14: 00007f730bf92fa0 R15: 00007ffd366a4b08 [ 134.553935][ T5168] [ 134.556966][ T5168] [ 134.559304][ T5168] Allocated by task 5168: [ 134.563644][ T5168] __kasan_kmalloc+0xb5/0xf0 [ 134.568248][ T5168] sk_prot_alloc+0xe7/0x210 [ 134.572761][ T5168] sk_alloc+0x2f/0x310 [ 134.576838][ T5168] pfkey_create+0xd8/0x560 [ 134.581260][ T5168] __sock_create+0x47b/0x900 [ 134.585861][ T5168] __sys_socket+0xe2/0x170 [ 134.590287][ T5168] __x64_sys_socket+0x76/0x80 [ 134.594980][ T5168] do_syscall_64+0x4c/0xa0 [ 134.599406][ T5168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.605314][ T5168] [ 134.607643][ T5168] Last potentially related work creation: [ 134.613351][ T5168] kasan_save_stack+0x35/0x60 [ 134.618042][ T5168] kasan_record_aux_stack+0xb8/0x100 [ 134.623379][ T5168] call_rcu+0x189/0x950 [ 134.627552][ T5168] dev_shutdown+0x19f/0x710 [ 134.632073][ T5168] unregister_netdevice_many+0xa2c/0x19f0 [ 134.637813][ T5168] unregister_netdevice_queue+0x324/0x370 [ 134.643546][ T5168] __tun_detach+0xd4a/0x1500 [ 134.648146][ T5168] tun_chr_close+0x109/0x1b0 [ 134.652748][ T5168] __fput+0x234/0x930 [ 134.656737][ T5168] task_work_run+0x125/0x1a0 [ 134.661340][ T5168] exit_to_user_mode_loop+0x10f/0x130 [ 134.666720][ T5168] exit_to_user_mode_prepare+0xee/0x180 [ 134.672283][ T5168] syscall_exit_to_user_mode+0x16/0x40 [ 134.677759][ T5168] do_syscall_64+0x58/0xa0 [ 134.682189][ T5168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.688096][ T5168] [ 134.690421][ T5168] Second to last potentially related work creation: [ 134.697000][ T5168] kasan_save_stack+0x35/0x60 [ 134.701691][ T5168] kasan_record_aux_stack+0xb8/0x100 [ 134.706984][ T5168] call_rcu+0x189/0x950 [ 134.711146][ T5168] netlink_release+0x1369/0x17b0 [ 134.716089][ T5168] sock_close+0xd5/0x240 [ 134.720342][ T5168] __fput+0x234/0x930 [ 134.724348][ T5168] task_work_run+0x125/0x1a0 [ 134.728975][ T5168] exit_to_user_mode_loop+0x10f/0x130 [ 134.734375][ T5168] exit_to_user_mode_prepare+0xee/0x180 [ 134.739933][ T5168] syscall_exit_to_user_mode+0x16/0x40 [ 134.745408][ T5168] do_syscall_64+0x58/0xa0 [ 134.749840][ T5168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.755750][ T5168] [ 134.758075][ T5168] The buggy address belongs to the object at ffff88807900b000 [ 134.758075][ T5168] which belongs to the cache kmalloc-2k of size 2048 [ 134.772131][ T5168] The buggy address is located 1544 bytes inside of [ 134.772131][ T5168] 2048-byte region [ffff88807900b000, ffff88807900b800) [ 134.785593][ T5168] The buggy address belongs to the page: [ 134.791239][ T5168] page:ffffea0001e40200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79008 [ 134.801401][ T5168] head:ffffea0001e40200 order:3 compound_mapcount:0 compound_pincount:0 [ 134.809734][ T5168] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 134.817750][ T5168] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42000 [ 134.826436][ T5168] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 134.835029][ T5168] page dumped because: kasan: bad access detected [ 134.841459][ T5168] page_owner tracks the page as allocated [ 134.847182][ T5168] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4196, ts 52852389254, free_ts 52708584704 [ 134.866291][ T5168] get_page_from_freelist+0x1bbd/0x1ca0 [ 134.871860][ T5168] __alloc_pages+0x1ee/0x480 [ 134.876460][ T5168] new_slab+0xc0/0x4b0 [ 134.880546][ T5168] ___slab_alloc+0x80a/0xdd0 [ 134.885140][ T5168] __kmalloc+0x1cd/0x330 [ 134.889389][ T5168] devlink_alloc_ns+0x1ac/0x700 [ 134.894250][ T5168] nsim_dev_probe+0xad/0x9c0 [ 134.898851][ T5168] really_probe+0x284/0xc80 [ 134.903359][ T5168] __driver_probe_device+0x1ef/0x390 [ 134.908652][ T5168] driver_probe_device+0x4f/0x420 [ 134.913684][ T5168] __device_attach_driver+0x2b0/0x500 [ 134.919065][ T5168] bus_for_each_drv+0x184/0x210 [ 134.923926][ T5168] __device_attach+0x2a8/0x480 [ 134.928698][ T5168] bus_probe_device+0xbc/0x1e0 [ 134.933477][ T5168] device_add+0xa3a/0x1000 [ 134.937901][ T5168] new_device_store+0x3e8/0x760 [ 134.942761][ T5168] page last free stack trace: [ 134.947430][ T5168] free_unref_page_prepare+0x637/0x6c0 [ 134.952967][ T5168] free_unref_page+0x8f/0x2a0 [ 134.957658][ T5168] __unfreeze_partials+0x1a5/0x200 [ 134.962779][ T5168] put_cpu_partial+0x12d/0x190 [ 134.967552][ T5168] qlist_free_all+0x35/0x90 [ 134.972061][ T5168] kasan_quarantine_reduce+0x150/0x160 [ 134.977534][ T5168] __kasan_slab_alloc+0x2f/0xd0 [ 134.982398][ T5168] slab_post_alloc_hook+0x4c/0x380 [ 134.987513][ T5168] __kmalloc+0x127/0x330 [ 134.991768][ T5168] tomoyo_realpath_from_path+0x118/0x610 [ 134.997406][ T5168] tomoyo_check_open_permission+0x1eb/0x410 [ 135.003313][ T5168] security_file_open+0x5e/0xa0 [ 135.008176][ T5168] do_dentry_open+0x322/0xf80 [ 135.012863][ T5168] path_openat+0x26f5/0x2fa0 [ 135.017556][ T5168] do_filp_open+0x1e2/0x410 [ 135.022065][ T5168] do_sys_openat2+0x150/0x4b0 [ 135.026746][ T5168] [ 135.029076][ T5168] Memory state around the buggy address: [ 135.034705][ T5168] ffff88807900b500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.042771][ T5168] ffff88807900b580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 135.050840][ T5168] >ffff88807900b600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.058907][ T5168] ^ [ 135.063245][ T5168] ffff88807900b680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.071321][ T5168] ffff88807900b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.079392][ T5168] ================================================================== [ 135.079751][ T5172] process 'syz.2.296' launched './file2' with NULL argv: empty string added [ 135.087463][ T5168] Disabling lock debugging due to kernel taint [ 135.087514][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.087663][ T5168] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.115473][ T5168] CPU: 0 PID: 5168 Comm: syz.4.297 Tainted: G B syzkaller #0 [ 135.124305][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.134369][ T5168] Call Trace: [ 135.137658][ T5168] [ 135.140594][ T5168] dump_stack_lvl+0x188/0x250 [ 135.145287][ T5168] ? show_regs_print_info+0x20/0x20 [ 135.150496][ T5168] ? load_image+0x400/0x400 [ 135.155013][ T5168] panic+0x2e5/0x810 [ 135.158920][ T5168] ? bpf_jit_dump+0xd0/0xd0 [ 135.163432][ T5168] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 135.169330][ T5168] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 135.175233][ T5168] ? _raw_spin_unlock+0x40/0x40 [ 135.180089][ T5168] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 135.186597][ T5168] check_panic_on_warn+0x80/0xa0 [ 135.191543][ T5168] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 135.198057][ T5168] end_report+0x6d/0xf0 [ 135.202218][ T5168] kasan_report+0x102/0x130 [ 135.206725][ T5168] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 135.213232][ T5168] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 135.219573][ T5168] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 135.225738][ T5168] ? xfrm_policy_alloc+0x75/0x2b0 [ 135.230772][ T5168] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 135.236935][ T5168] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 135.242842][ T5168] xfrm_policy_inexact_insert+0xe0/0x1460 [ 135.248574][ T5168] ? do_raw_spin_lock+0x128/0x2f0 [ 135.253609][ T5168] ? __rwlock_init+0x140/0x140 [ 135.258383][ T5168] ? policy_hash_bysel+0x135/0x7b0 [ 135.263507][ T5168] xfrm_policy_insert+0x112/0x930 [ 135.268549][ T5168] xfrm_add_policy+0x4f2/0x880 [ 135.273330][ T5168] ? xfrm_dump_sa_done+0xc0/0xc0 [ 135.278284][ T5168] ? apparmor_capable+0x12c/0x190 [ 135.283314][ T5168] ? __nla_parse+0x3c/0x50 [ 135.287739][ T5168] xfrm_user_rcv_msg+0x5e5/0x910 [ 135.292680][ T5168] ? xfrm_netlink_rcv+0x90/0x90 [ 135.297549][ T5168] ? xfrm_netlink_rcv+0x66/0x90 [ 135.302409][ T5168] ? __mutex_lock_common+0x465/0x2400 [ 135.307792][ T5168] ? __skb_clone+0x480/0x790 [ 135.312408][ T5168] netlink_rcv_skb+0x1f5/0x440 [ 135.317185][ T5168] ? xfrm_netlink_rcv+0x90/0x90 [ 135.322046][ T5168] ? netlink_ack+0xb50/0xb50 [ 135.326646][ T5168] ? __lock_acquire+0x7d10/0x7d10 [ 135.331680][ T5168] xfrm_netlink_rcv+0x75/0x90 [ 135.336368][ T5168] netlink_unicast+0x774/0x920 [ 135.341146][ T5168] netlink_sendmsg+0x8ba/0xbe0 [ 135.345924][ T5168] ? netlink_getsockopt+0x570/0x570 [ 135.351131][ T5168] ? aa_sock_msg_perm+0x94/0x150 [ 135.356075][ T5168] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 135.361368][ T5168] ? security_socket_sendmsg+0x7c/0xa0 [ 135.366838][ T5168] ? netlink_getsockopt+0x570/0x570 [ 135.372053][ T5168] ____sys_sendmsg+0x5b7/0x8f0 [ 135.376830][ T5168] ? __sys_sendmsg_sock+0x30/0x30 [ 135.381879][ T5168] ? import_iovec+0x6f/0xa0 [ 135.386403][ T5168] ___sys_sendmsg+0x236/0x2e0 [ 135.391099][ T5168] ? __sys_sendmsg+0x2a0/0x2a0 [ 135.395900][ T5168] ? percpu_counter_add_batch+0x13b/0x160 [ 135.401648][ T5168] __se_sys_sendmsg+0x1af/0x290 [ 135.406512][ T5168] ? __x64_sys_sendmsg+0x80/0x80 [ 135.411463][ T5168] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.417440][ T5168] ? lockdep_hardirqs_on+0x94/0x140 [ 135.422635][ T5168] do_syscall_64+0x4c/0xa0 [ 135.427064][ T5168] ? clear_bhb_loop+0x30/0x80 [ 135.431733][ T5168] ? clear_bhb_loop+0x30/0x80 [ 135.436412][ T5168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.442293][ T5168] RIP: 0033:0x7f730bd19e59 [ 135.446717][ T5168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.466311][ T5168] RSP: 002b:00007f7309f73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.474713][ T5168] RAX: ffffffffffffffda RBX: 00007f730bf92fa0 RCX: 00007f730bd19e59 [ 135.482673][ T5168] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 135.490629][ T5168] RBP: 00007f730bdafd6f R08: 0000000000000000 R09: 0000000000000000 [ 135.498586][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.506546][ T5168] R13: 00007f730bf93038 R14: 00007f730bf92fa0 R15: 00007ffd366a4b08 [ 135.514510][ T5168] [ 135.517748][ T5168] Kernel Offset: disabled [ 135.522062][ T5168] Rebooting in 86400 seconds..