last executing test programs: 1m44.879398847s ago: executing program 1 (id=23): r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) getpgid(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffefffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x1e) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 1m37.983301128s ago: executing program 1 (id=28): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 1m31.372473633s ago: executing program 1 (id=33): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[], 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x6e6bb0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 1m29.934613541s ago: executing program 1 (id=38): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1m27.391675468s ago: executing program 1 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0xffffffff, 0x20}, 0xc) 1m23.716706606s ago: executing program 1 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) 1m7.700555631s ago: executing program 32 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) 8.622269738s ago: executing program 0 (id=206): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x8}, {0xb4, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfdfffffc, 0x0, 0x1, 0x0, 0x6}, {{@in6=@private2, 0x4, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xa747, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.938831005s ago: executing program 4 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xc, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6.753935924s ago: executing program 2 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6.194596899s ago: executing program 3 (id=213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9, 0x4c}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "bed40c8022674b0ecf0153d786cfc67c1aa8a9"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 5.227895841s ago: executing program 4 (id=214): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @netrom={'nr', 0x0}, 0x5, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 5.026408883s ago: executing program 0 (id=215): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x8, 0x8, 0x52}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0x0, 0xe3, 0x3ff, 0x200000000000002}}]}}}]}, 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x48c0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.781270826s ago: executing program 2 (id=216): syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xb, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)=r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r5, 0x58, &(0x7f0000000440)}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d6163767461", @ANYRES32=r7, @ANYBLOB="08601f00", @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000220000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900481005864fc74ff9000014000396e60000800c00018006000100000000001400000011000100000000000000000001f6000ad882ed52a8793aa2f270448b525f69f044a345f50e92354b5cbb804720767c0874dc79a8729f084528e7dbee9b"], 0x68}, 0x1, 0x0, 0x0, 0x4008811}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r11 = socket(0x10, 0x803, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f00000004c0)=0x2, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0401000000020101000000000000000007000004080005400000000208000b0073697000540002801400018008000100ffffffff08000200ac1414aa2c000180140003000000000000000000000000000000000114000400ff010000000000000000000000000001060003400004000006000340000000007c000a80680002800c000280050001008400070006000340000200000c000280050001003a0000002c00018014000300fab4000000000000000000000000000114000400fe8000000000000000000000000000bb0c00028005000100060000000c0002800500010021000000080001400000000008000140000000010600074000040000080004400000ffffba19d97dcbe1338874238a50016b19ad02ea3579a0dfd03b411351887e2b54a1bcc1117570d391326d"], 0x104}, 0x1, 0x0, 0x0, 0x20044000}, 0x41) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x20000000) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000000000000007111b2000000000085100000020000008500000024f6dc00000033000000489500a50500000000efc51f032361a07a172cb345e708c9f1b5685b3e5446ec78b25b9eb43ec796c297d95fceabdfa55efcaea77b9c639f6915880c6b5f00aa3c6f621a8e9efc8d34fc264aa4398f73b7b6365256ea0a032e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}], 0xffffffffffffffc7}, 0x40000163) 4.370578973s ago: executing program 3 (id=217): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) sendto(r0, 0x0, 0x2a0, 0x20000004, 0x0, 0x0) 4.01517206s ago: executing program 4 (id=218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, 0x0, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 3.861367656s ago: executing program 0 (id=219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 3.427133133s ago: executing program 3 (id=220): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000", 0x3f}, {&(0x7f0000000e80)="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", 0x10c}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f531217", 0x96}, {&(0x7f0000000640)="893549e41fee68cbb96eef8e21174c97fd72242772f8035d895bf11396b1a6baaafebc787ecff2023c23052e44ca3ef1449b7ab19fb8f25a0893176dd529ad11e04d91478cf66473074a3a55b09ac86a355a3d38933efd090e4477ae5353c3fe7fb4898d72cbe9d5e0bbf78ce5d09e40060ffb9ecf8b493bf9403587a4", 0x7d}, {&(0x7f0000000440)="d8bdcd17a6ea0e7391703d054d", 0xd}, {&(0x7f0000000700)="40778e5ab5227cf39454ed4d07d690f66f8c38ea1988e876da1766e1fd7c39ff31251a5889f089819c5c65e0dda5ceab6c1dca302b564e6e6231e0924cf3bdd2afaadd0883dcbc956b3beaddd25c11adcf625bd07bc7fe2cff82a72fe49c", 0x5e}], 0x7}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487", 0xa9}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.064511808s ago: executing program 4 (id=221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) 2.697484905s ago: executing program 2 (id=222): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.359870231s ago: executing program 3 (id=223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb00"/54], 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x6e6bb0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 1.992426312s ago: executing program 0 (id=224): socket$pptp(0x18, 0x1, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="b3fa63cc40fc0d7456048cb133c5f558eec98ebd426a5a1af3", 0x19}, {0x0}], 0x2) 1.914627469s ago: executing program 4 (id=225): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000091401000da87000ffdbdf250800810000000000080001000100000008"], 0x28}, 0x1, 0x0, 0x0, 0x2000014}, 0x48000) 1.44412622s ago: executing program 2 (id=226): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x832, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 1.216131214s ago: executing program 3 (id=227): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 1.085051339s ago: executing program 4 (id=228): r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 821.400332ms ago: executing program 0 (id=229): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd25, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 602.098792ms ago: executing program 2 (id=230): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, 0x0, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 255.702019ms ago: executing program 3 (id=231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) 93.460216ms ago: executing program 0 (id=232): r0 = socket$igmp6(0xa, 0x3, 0x2) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 2 (id=233): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 190.347066][ T5753] cgroup: Unknown subsys name 'net' [ 190.479988][ T5753] cgroup: Unknown subsys name 'cpuset' [ 190.495200][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 197.375301][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.362475][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.379065][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.389335][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.397594][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.407248][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.423008][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.435192][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.438899][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.445074][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.457669][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.464329][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.467012][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.485227][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.500639][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.526877][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.584198][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.593504][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.603839][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.621882][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.633772][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.635230][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.655621][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.667998][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.707728][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.719791][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.158104][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.165212][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.417441][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 204.447275][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 204.524474][ T5778] Bluetooth: hci0: command tx timeout [ 204.604298][ T5778] Bluetooth: hci1: command tx timeout [ 204.604373][ T5774] Bluetooth: hci2: command tx timeout [ 204.676331][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 204.764574][ T5778] Bluetooth: hci4: command tx timeout [ 204.768628][ T5774] Bluetooth: hci3: command tx timeout [ 205.107935][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 205.186186][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 205.932723][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.942642][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.953714][ T5772] bridge_slave_0: entered allmulticast mode [ 205.965838][ T5772] bridge_slave_0: entered promiscuous mode [ 205.984587][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.992170][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.001699][ T5772] bridge_slave_1: entered allmulticast mode [ 206.012843][ T5772] bridge_slave_1: entered promiscuous mode [ 206.183536][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.198333][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.209150][ T5776] bridge_slave_0: entered allmulticast mode [ 206.218353][ T5776] bridge_slave_0: entered promiscuous mode [ 206.270138][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.278301][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.287690][ T5782] bridge_slave_0: entered allmulticast mode [ 206.299529][ T5782] bridge_slave_0: entered promiscuous mode [ 206.318834][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.326651][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.336281][ T5782] bridge_slave_1: entered allmulticast mode [ 206.347285][ T5782] bridge_slave_1: entered promiscuous mode [ 206.363030][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.371546][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.383771][ T5776] bridge_slave_1: entered allmulticast mode [ 206.392682][ T5776] bridge_slave_1: entered promiscuous mode [ 206.591983][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.604440][ T5774] Bluetooth: hci0: command tx timeout [ 206.684365][ T5774] Bluetooth: hci2: command tx timeout [ 206.691397][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.698797][ T5774] Bluetooth: hci1: command tx timeout [ 206.699531][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.712088][ T5784] bridge_slave_0: entered allmulticast mode [ 206.721156][ T5784] bridge_slave_0: entered promiscuous mode [ 206.741098][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.750889][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.759128][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.766909][ T5771] bridge_slave_0: entered allmulticast mode [ 206.776218][ T5771] bridge_slave_0: entered promiscuous mode [ 206.798370][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.819093][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.829334][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.837813][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.844772][ T5774] Bluetooth: hci3: command tx timeout [ 206.845566][ T5778] Bluetooth: hci4: command tx timeout [ 206.856684][ T5784] bridge_slave_1: entered allmulticast mode [ 206.866048][ T5784] bridge_slave_1: entered promiscuous mode [ 206.906233][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.914460][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.921968][ T5771] bridge_slave_1: entered allmulticast mode [ 206.931624][ T5771] bridge_slave_1: entered promiscuous mode [ 206.949621][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.968395][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.167845][ T5772] team0: Port device team_slave_0 added [ 207.271148][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.289460][ T5772] team0: Port device team_slave_1 added [ 207.307587][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.326599][ T5782] team0: Port device team_slave_0 added [ 207.340831][ T5776] team0: Port device team_slave_0 added [ 207.355909][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.403615][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.438915][ T5782] team0: Port device team_slave_1 added [ 207.451270][ T5776] team0: Port device team_slave_1 added [ 207.657481][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.664928][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.691835][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.764638][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.771802][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.798275][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.819391][ T5784] team0: Port device team_slave_0 added [ 207.828159][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.835964][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.862684][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.882614][ T5771] team0: Port device team_slave_0 added [ 207.892235][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.900698][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.927831][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.942303][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.949605][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.977033][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.997271][ T5784] team0: Port device team_slave_1 added [ 208.028684][ T5771] team0: Port device team_slave_1 added [ 208.037491][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.045564][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.072325][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.230394][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.237735][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.264585][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.282257][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.289722][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.316746][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.362369][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.371563][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.398309][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.469409][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.477137][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.503601][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.684318][ T5778] Bluetooth: hci0: command tx timeout [ 208.706069][ T5772] hsr_slave_0: entered promiscuous mode [ 208.715697][ T5772] hsr_slave_1: entered promiscuous mode [ 208.748510][ T5782] hsr_slave_0: entered promiscuous mode [ 208.757726][ T5782] hsr_slave_1: entered promiscuous mode [ 208.764373][ T5778] Bluetooth: hci1: command tx timeout [ 208.764545][ T5774] Bluetooth: hci2: command tx timeout [ 208.772573][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 208.781910][ T5782] Cannot create hsr debugfs directory [ 208.802460][ T5776] hsr_slave_0: entered promiscuous mode [ 208.811418][ T5776] hsr_slave_1: entered promiscuous mode [ 208.820239][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 208.826228][ T5776] Cannot create hsr debugfs directory [ 208.924468][ T5774] Bluetooth: hci3: command tx timeout [ 208.934330][ T5774] Bluetooth: hci4: command tx timeout [ 209.000981][ T5771] hsr_slave_0: entered promiscuous mode [ 209.010882][ T5771] hsr_slave_1: entered promiscuous mode [ 209.019578][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 209.025559][ T5771] Cannot create hsr debugfs directory [ 209.160819][ T5784] hsr_slave_0: entered promiscuous mode [ 209.170094][ T5784] hsr_slave_1: entered promiscuous mode [ 209.178639][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 209.184560][ T5784] Cannot create hsr debugfs directory [ 210.588938][ T5776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.616710][ T5776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.636536][ T5776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.675250][ T5776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.767403][ T5774] Bluetooth: hci0: command tx timeout [ 210.809062][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.844610][ T5774] Bluetooth: hci2: command tx timeout [ 210.844658][ T5778] Bluetooth: hci1: command tx timeout [ 210.876649][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.898220][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.925491][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.010624][ T5774] Bluetooth: hci4: command tx timeout [ 211.010679][ T5778] Bluetooth: hci3: command tx timeout [ 211.166395][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.190250][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.212084][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.270686][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.518498][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.575457][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.647732][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.704998][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.971397][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.069409][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.080930][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.132829][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.190746][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.353884][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.471586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.479450][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.624065][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.631580][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.952782][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.021751][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.210874][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.264794][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.293810][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.370840][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.378510][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.411585][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.419244][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.469785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.477459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.700309][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.739000][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.746650][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.828006][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.011156][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.018618][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.095633][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.147544][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.155136][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.263286][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.270816][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.361786][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.369332][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.560963][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.081607][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.209186][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.795970][ T5772] veth0_vlan: entered promiscuous mode [ 216.933299][ T5772] veth1_vlan: entered promiscuous mode [ 217.044888][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.074973][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.103722][ T5771] veth0_vlan: entered promiscuous mode [ 217.217628][ T5771] veth1_vlan: entered promiscuous mode [ 217.273718][ T5776] veth0_vlan: entered promiscuous mode [ 217.442269][ T5776] veth1_vlan: entered promiscuous mode [ 217.458891][ T5772] veth0_macvtap: entered promiscuous mode [ 217.526953][ T5772] veth1_macvtap: entered promiscuous mode [ 217.737715][ T5771] veth0_macvtap: entered promiscuous mode [ 217.752036][ T5782] veth0_vlan: entered promiscuous mode [ 217.802115][ T5784] veth0_vlan: entered promiscuous mode [ 217.817054][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.860812][ T5771] veth1_macvtap: entered promiscuous mode [ 217.916967][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.960093][ T5782] veth1_vlan: entered promiscuous mode [ 217.971956][ T5776] veth0_macvtap: entered promiscuous mode [ 218.043849][ T5784] veth1_vlan: entered promiscuous mode [ 218.060163][ T5776] veth1_macvtap: entered promiscuous mode [ 218.076737][ T997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.086581][ T997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.128313][ T997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.137904][ T997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.163748][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.300206][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.427782][ T421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.440262][ T421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.499505][ T421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.511202][ T421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.546136][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.708627][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.751651][ T5782] veth0_macvtap: entered promiscuous mode [ 218.862500][ T72] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.902040][ T5782] veth1_macvtap: entered promiscuous mode [ 218.940544][ T72] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.965873][ T72] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.007232][ T5784] veth0_macvtap: entered promiscuous mode [ 219.059242][ T72] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.169689][ T5784] veth1_macvtap: entered promiscuous mode [ 219.366275][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.526178][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.542756][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.722608][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.781878][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.900642][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.944359][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.963841][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.980165][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.060283][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.096422][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.149053][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.513354][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.577399][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.912379][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.957177][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.488171][ T5772] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 225.582243][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.614563][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.087223][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.112576][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.673425][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.714452][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.054935][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.063084][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.245179][ T421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.253245][ T421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.645437][ T5965] loop1: detected capacity change from 0 to 512 [ 228.774322][ T5965] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 228.983435][ T5965] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.6: iget: bad i_size value: 360287970189639680 [ 228.997639][ T5965] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.004702][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 229.020654][ C1] EXT4-fs (loop1): initial error at time 1774987868: ext4_orphan_get:1397: inode 15 [ 229.030491][ C1] EXT4-fs (loop1): last error at time 1774987868: ext4_orphan_get:1397: inode 15 [ 229.075512][ T5965] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6: couldn't read orphan inode 15 (err -117) [ 229.094445][ T5965] loop1: lost filesystem error report for type 5 error -117 [ 229.246409][ T5965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.342869][ T5965] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.6: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 229.897971][ T421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.949503][ T421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.354158][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.362318][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.464921][ T5965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.549806][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.615956][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.441500][ T5978] loop0: detected capacity change from 0 to 512 [ 232.580516][ T5978] EXT4-fs: Ignoring removed nobh option [ 233.788258][ T5978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.880059][ T5978] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.176381][ T5989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.234739][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'. [ 234.523651][ T29] audit: type=1800 audit(1774987874.238:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 235.358194][ T5994] Zero length message leads to an empty skb [ 235.575962][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.950781][ T5997] loop1: detected capacity change from 0 to 512 [ 235.995133][ T5998] loop2: detected capacity change from 0 to 128 [ 236.046893][ T5997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 236.062492][ T5998] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.105252][ T5997] System zones: 1-12 [ 236.146261][ T5998] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.186698][ T5997] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.12: corrupted in-inode xattr: e_value size too large [ 236.255074][ T5997] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 236.264157][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 236.280418][ C1] EXT4-fs (loop1): initial error at time 1774987875: ext4_iget_extra_inode:5040: inode 15 [ 236.290915][ C1] EXT4-fs (loop1): last error at time 1774987875: ext4_iget_extra_inode:5040: inode 15 [ 236.347545][ T5997] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.12: couldn't read orphan inode 15 (err -117) [ 236.376759][ T6002] loop0: detected capacity change from 0 to 128 [ 236.429842][ T5997] loop1: lost filesystem error report for type 5 error -117 [ 236.453752][ T5997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.179557][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.977795][ T6017] loop2: detected capacity change from 0 to 512 [ 243.045602][ T6017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.193324][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.446934][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.560148][ T6028] vivid-004: ================= START STATUS ================= [ 244.568224][ T6028] vivid-004: Radio HW Seek Mode: Bounded [ 244.574439][ T6028] vivid-004: Radio Programmable HW Seek: false [ 244.580935][ T6028] vivid-004: RDS Rx I/O Mode: Block I/O [ 244.586919][ T6028] vivid-004: Generate RBDS Instead of RDS: false [ 244.593572][ T6028] vivid-004: RDS Reception: true [ 244.598949][ T6028] vivid-004: RDS Program Type: 0 inactive [ 244.605225][ T6028] vivid-004: RDS PS Name: inactive [ 244.618247][ T6028] vivid-004: RDS Radio Text: inactive [ 244.624321][ T6028] vivid-004: RDS Traffic Announcement: false inactive [ 244.631564][ T6028] vivid-004: RDS Traffic Program: false inactive [ 244.638565][ T6028] vivid-004: RDS Music: false inactive [ 244.644689][ T6028] vivid-004: ================== END STATUS ================== [ 247.021718][ T6031] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 247.292705][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 251.336606][ T6037] loop4: detected capacity change from 0 to 128 [ 251.562065][ T6037] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.636653][ T6037] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.049432][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 254.254973][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 255.801539][ T5776] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.454110][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 258.805342][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.813209][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.830022][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.932427][ T6069] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.338168][ T6069] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.511598][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.540990][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.018830][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.049067][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.077356][ T6069] virt_wifi0 speed is unknown, defaulting to 1000 [ 262.795668][ T6072] process 'syz.1.28' launched '/dev/fd/6' with NULL argv: empty string added [ 265.585812][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.592780][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.035046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 267.835358][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 271.746521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 271.848959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 272.054810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 272.157429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.817654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 275.124801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 276.464373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 276.764471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 276.864870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 277.036060][ T5827] IPVS: starting estimator thread 0... [ 277.186317][ T6201] IPVS: using max 192 ests per chain, 9600 per kthread [ 282.813047][ T6242] loop4: detected capacity change from 0 to 1024 [ 283.052667][ T6242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.001171][ T6254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 284.102883][ T6255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 286.993206][ T5776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.906035][ T6275] Bluetooth: MGMT ver 1.23 [ 291.484733][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.531853][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.542406][ T5778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.571578][ T5778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.592201][ T5778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.589232][ T6278] virt_wifi0 speed is unknown, defaulting to 1000 [ 293.929199][ T5778] Bluetooth: hci5: command tx timeout [ 294.161669][ T6290] fuse: Bad value for 'fd' [ 296.127043][ T5778] Bluetooth: hci5: command tx timeout [ 298.207669][ T5778] Bluetooth: hci5: command tx timeout [ 300.049561][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 300.288364][ T5778] Bluetooth: hci5: command tx timeout [ 300.815147][ T6314] virt_wifi0 speed is unknown, defaulting to 1000 [ 301.171482][ T6208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.266214][ T6325] fuse: Bad value for 'fd' [ 302.892896][ T6208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.112556][ T6340] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 304.256024][ T6208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.871284][ T6208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.516529][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.531595][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.571234][ T6278] bridge_slave_0: entered allmulticast mode [ 305.583566][ T6278] bridge_slave_0: entered promiscuous mode [ 305.659867][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.671805][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.675739][ T6350] netlink: 256 bytes leftover after parsing attributes in process `syz.0.85'. [ 305.713873][ T6278] bridge_slave_1: entered allmulticast mode [ 305.756392][ T6350] netlink: 256 bytes leftover after parsing attributes in process `syz.0.85'. [ 305.869404][ T6278] bridge_slave_1: entered promiscuous mode [ 306.688571][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.789696][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.805199][ T6208] bridge_slave_1: left allmulticast mode [ 306.832957][ T6208] bridge_slave_1: left promiscuous mode [ 306.859347][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.018824][ T6208] bridge_slave_0: left allmulticast mode [ 307.055915][ T6208] bridge_slave_0: left promiscuous mode [ 307.114625][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.577727][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.600122][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.628652][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.634956][ T6208] bond0 (unregistering): Released all slaves [ 309.279344][ T6383] fuse: Unknown parameter '0x0000000000000003' [ 309.449145][ T6278] team0: Port device team_slave_0 added [ 309.471548][ T6278] team0: Port device team_slave_1 added [ 309.965688][ T6393] netlink: 27 bytes leftover after parsing attributes in process `syz.4.100'. [ 309.977911][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.009938][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.119932][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.761910][ T6394] syzkaller0: entered promiscuous mode [ 310.792291][ T6394] syzkaller0: entered allmulticast mode [ 310.967693][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.992811][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.079385][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.534774][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.828312][ T6208] hsr_slave_0: left promiscuous mode [ 312.889011][ T6208] hsr_slave_1: left promiscuous mode [ 312.920801][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.963079][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.056117][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.125044][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.363817][ T6208] veth1_macvtap: left promiscuous mode [ 313.425756][ T6208] veth0_macvtap: left promiscuous mode [ 313.431741][ T6208] veth1_vlan: left promiscuous mode [ 313.508770][ T6208] veth0_vlan: left promiscuous mode [ 314.562444][ T6417] netlink: 96 bytes leftover after parsing attributes in process `syz.2.105'. [ 315.605506][ T6208] team0 (unregistering): Port device team_slave_1 removed [ 315.644883][ T6208] team0 (unregistering): Port device team_slave_0 removed [ 316.300879][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.103'. [ 316.646650][ T6278] hsr_slave_0: entered promiscuous mode [ 316.718543][ T6278] hsr_slave_1: entered promiscuous mode [ 317.798059][ T6208] IPVS: stop unused estimator thread 0... [ 319.703074][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 320.044775][ T6278] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.169521][ T6278] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.320656][ T6278] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.540217][ T6278] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.467419][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.856633][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.960563][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.968325][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.158011][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.127'. [ 323.308978][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.316726][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.428847][ T6526] syzkaller0: entered promiscuous mode [ 324.446522][ T6526] syzkaller0: entered allmulticast mode [ 324.681684][ T6531] fuse: Bad value for 'group_id' [ 324.745136][ T6531] fuse: Bad value for 'group_id' [ 326.160296][ T6551] sctp: [Deprecated]: syz.3.141 (pid 6551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.160296][ T6551] Use struct sctp_sack_info instead [ 326.246597][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.141'. [ 326.323863][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.141'. [ 327.050509][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.057558][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.546518][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.330304][ T6584] fuse: Bad value for 'group_id' [ 328.344720][ T6584] fuse: Bad value for 'group_id' [ 328.584630][ T6591] warning: `syz.3.148' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 329.106143][ T5072] Bluetooth: hci0: command 0x0406 tx timeout [ 329.113317][ T5072] Bluetooth: hci2: command 0x0406 tx timeout [ 329.115296][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 329.121416][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 330.029737][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 331.466814][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.160'. [ 331.684515][ T6633] fuse: Bad value for 'group_id' [ 331.689743][ T6633] fuse: Bad value for 'group_id' [ 331.835576][ T6278] veth0_vlan: entered promiscuous mode [ 332.010674][ T6278] veth1_vlan: entered promiscuous mode [ 332.180604][ T6638] syz.2.163 uses obsolete (PF_INET,SOCK_PACKET) [ 332.247367][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.164'. [ 333.355496][ T6278] veth0_macvtap: entered promiscuous mode [ 333.567248][ T6278] veth1_macvtap: entered promiscuous mode [ 333.957423][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.134850][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.361452][ T6188] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.418035][ T6188] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.486969][ T6188] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.536147][ T6139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.217839][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 341.605535][ T6721] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 342.491867][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.597015][ T6731] netlink: 27 bytes leftover after parsing attributes in process `syz.2.190'. [ 342.669801][ T6733] netlink: 27 bytes leftover after parsing attributes in process `syz.4.191'. [ 342.736625][ T6724] bond1: (slave veth3): Enslaving as an active interface with a down link [ 342.813636][ T6725] vlan0: entered allmulticast mode [ 342.819481][ T6725] veth0_to_bond: entered allmulticast mode [ 342.829713][ T6725] veth0_to_bond: entered promiscuous mode [ 342.838800][ T6725] veth0_to_bond: left promiscuous mode [ 342.855634][ T6725] bond1: (slave vlan0): making interface the new active one [ 342.867658][ T6725] veth0_to_bond: entered promiscuous mode [ 342.877593][ T6725] vlan0: entered promiscuous mode [ 342.887813][ T6725] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 344.935472][ T6763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.198'. [ 345.025449][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.036151][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.705756][ T6785] netlink: 76 bytes leftover after parsing attributes in process `syz.3.200'. [ 346.752991][ T6798] netlink: 27 bytes leftover after parsing attributes in process `syz.4.202'. [ 347.392672][ T6806] netlink: 'syz.3.204': attribute type 51 has an invalid length. [ 347.458264][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.574666][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.658447][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.706637][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.046542][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.084406][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.900061][ T6831] syzkaller0: entered promiscuous mode [ 349.912298][ T6831] syzkaller0: entered allmulticast mode [ 351.406011][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.426042][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.435805][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.457196][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.470098][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.536128][ T6850] netlink: 27 bytes leftover after parsing attributes in process `syz.4.214'. [ 351.785578][ T6849] virt_wifi0 speed is unknown, defaulting to 1000 [ 351.967611][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 352.054153][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 353.564449][ T5775] Bluetooth: hci1: command tx timeout [ 354.243779][ T6849] chnl_net:caif_netlink_parms(): no params data found [ 355.297806][ T6188] vlan0: left promiscuous mode [ 355.644780][ T5775] Bluetooth: hci1: command tx timeout [ 356.052686][ T6893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.240618][ T6899] ===================================================== [ 356.248088][ T6899] BUG: KMSAN: uninit-value in netif_skb_features+0x70d/0x1b80 [ 356.256019][ T6899] netif_skb_features+0x70d/0x1b80 [ 356.261340][ T6899] validate_xmit_skb+0xb6/0x2400 [ 356.266660][ T6899] validate_xmit_skb_list+0xd4/0x320 [ 356.272164][ T6899] sch_direct_xmit+0xd4/0xcf0 [ 356.277267][ T6899] __dev_queue_xmit+0x301d/0x5980 [ 356.282509][ T6899] packet_xmit+0x8f/0x710 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.287292][ T6899] packet_sendmsg+0x91d9/0xa320 [ 356.292318][ T6899] ____sys_sendmsg+0xf37/0xfd0 [ 356.297551][ T6899] ___sys_sendmsg+0x271/0x3b0 [ 356.302455][ T6899] __x64_sys_sendmsg+0x211/0x3e0 [ 356.307846][ T6899] x64_sys_call+0x1e20/0x3ea0 [ 356.312784][ T6899] do_syscall_64+0x134/0xf80 [ 356.317751][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.323852][ T6899] [ 356.326499][ T6899] Uninit was created at: [ 356.331025][ T6899] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 356.337397][ T6899] __alloc_skb+0x855/0x1190 [ 356.342114][ T6899] alloc_skb_with_frags+0xc5/0xa60 [ 356.347603][ T6899] sock_alloc_send_pskb+0xacb/0xc60 [ 356.353038][ T6899] packet_sendmsg+0x7477/0xa320 [ 356.358320][ T6899] ____sys_sendmsg+0xf37/0xfd0 [ 356.363343][ T6899] ___sys_sendmsg+0x271/0x3b0 [ 356.368479][ T6899] __x64_sys_sendmsg+0x211/0x3e0 [ 356.373656][ T6899] x64_sys_call+0x1e20/0x3ea0 [ 356.378786][ T6899] do_syscall_64+0x134/0xf80 [ 356.383611][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.389968][ T6899] [ 356.392442][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.3.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.403602][ T6899] Tainted: [L]=SOFTLOCKUP [ 356.408249][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.418607][ T6899] ===================================================== [ 356.425824][ T6899] Disabling lock debugging due to kernel taint [ 356.432102][ T6899] Kernel panic - not syncing: kmsan.panic set ... [ 356.438688][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.3.231 Tainted: G B L syzkaller #0 PREEMPT(full) [ 356.449802][ T6899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 356.455482][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.465703][ T6899] Call Trace: [ 356.469106][ T6899] [ 356.472173][ T6899] __dump_stack+0x26/0x30 [ 356.476740][ T6899] dump_stack_lvl+0x50/0x1c0 [ 356.481558][ T6899] ? dump_stack+0x12/0x25 [ 356.486109][ T6899] dump_stack+0x1e/0x25 [ 356.490495][ T6899] vpanic+0x7b4/0x1430 [ 356.494870][ T6899] panic+0x15d/0x160 [ 356.499058][ T6899] kmsan_report+0x31a/0x320 [ 356.503821][ T6899] ? __msan_warning+0x1b/0x30 [ 356.508762][ T6899] ? netif_skb_features+0x70d/0x1b80 [ 356.514266][ T6899] ? validate_xmit_skb+0xb6/0x2400 [ 356.519595][ T6899] ? validate_xmit_skb_list+0xd4/0x320 [ 356.525285][ T6899] ? sch_direct_xmit+0xd4/0xcf0 [ 356.530344][ T6899] ? __dev_queue_xmit+0x301d/0x5980 [ 356.535769][ T6899] ? packet_xmit+0x8f/0x710 [ 356.540501][ T6899] ? packet_sendmsg+0x91d9/0xa320 [ 356.545779][ T6899] ? ____sys_sendmsg+0xf37/0xfd0 [ 356.550947][ T6899] ? ___sys_sendmsg+0x271/0x3b0 [ 356.556036][ T6899] ? __x64_sys_sendmsg+0x211/0x3e0 [ 356.561393][ T6899] ? x64_sys_call+0x1e20/0x3ea0 [ 356.566496][ T6899] ? do_syscall_64+0x134/0xf80 [ 356.571502][ T6899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.577807][ T6899] ? __skb_flow_dissect+0x941a/0xa1f0 [ 356.583503][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.588818][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.594155][ T6899] __msan_warning+0x1b/0x30 [ 356.598910][ T6899] netif_skb_features+0x70d/0x1b80 [ 356.604326][ T6899] validate_xmit_skb+0xb6/0x2400 [ 356.609494][ T6899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.615589][ T6899] ? sch_direct_xmit+0x41/0xcf0 [ 356.620638][ T6899] ? filter_irq_stacks+0x49/0x190 [ 356.625932][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.631446][ T6899] validate_xmit_skb_list+0xd4/0x320 [ 356.637081][ T6899] sch_direct_xmit+0xd4/0xcf0 [ 356.642052][ T6899] ? kmsan_get_metadata+0x146/0x160 [ 356.647451][ T6899] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 356.654083][ T6899] __dev_queue_xmit+0x301d/0x5980 [ 356.659348][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.664656][ T6899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.670752][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.676061][ T6899] ? __dev_queue_xmit+0x27a/0x5980 [ 356.681453][ T6899] packet_xmit+0x8f/0x710 [ 356.685994][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.691323][ T6899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.697446][ T6899] packet_sendmsg+0x91d9/0xa320 [ 356.702527][ T6899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.708639][ T6899] ? aa_label_sk_perm+0x759/0x810 [ 356.713881][ T6899] ? tomoyo_socket_bind_permission+0x311/0x370 [ 356.720300][ T6899] ? stack_trace_save_user+0x120/0x170 [ 356.726040][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.731465][ T6899] ? __pfx_packet_sendmsg+0x10/0x10 [ 356.737048][ T6899] ____sys_sendmsg+0xf37/0xfd0 [ 356.742109][ T6899] ___sys_sendmsg+0x271/0x3b0 [ 356.747044][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.752383][ T6899] ? __rcu_read_unlock+0x6c/0xd0 [ 356.757581][ T6899] ? __fget_files+0x3b4/0x4a0 [ 356.762466][ T6899] ? __fget_files+0x3b9/0x4a0 [ 356.767365][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.772677][ T6899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.778774][ T6899] __x64_sys_sendmsg+0x211/0x3e0 [ 356.783998][ T6899] ? kmsan_get_metadata+0xf1/0x160 [ 356.789332][ T6899] x64_sys_call+0x1e20/0x3ea0 [ 356.794248][ T6899] do_syscall_64+0x134/0xf80 [ 356.799063][ T6899] ? clear_bhb_loop+0x50/0xa0 [ 356.804033][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.810117][ T6899] RIP: 0033:0x7fe19a99c819 [ 356.814673][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.834476][ T6899] RSP: 002b:00007fe198bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.843093][ T6899] RAX: ffffffffffffffda RBX: 00007fe19ac15fa0 RCX: 00007fe19a99c819 [ 356.851223][ T6899] RDX: 00000000200400d1 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 356.859345][ T6899] RBP: 00007fe19aa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 356.867462][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.875581][ T6899] R13: 00007fe19ac16038 R14: 00007fe19ac15fa0 R15: 00007ffeaae28108 [ 356.883751][ T6899] [ 356.887381][ T6899] Kernel Offset: disabled [ 356.891769][ T6899] Rebooting in 86400 seconds..