last executing test programs: 32.118810698s ago: executing program 3 (id=118): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f0000000040)=0x8) 31.62502048s ago: executing program 3 (id=123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 30.411264301s ago: executing program 3 (id=128): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 29.942007907s ago: executing program 3 (id=131): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@acl}, {@norecovery}, {@dioread_nolock}, {@nodioread_nolock}, {@stripe={'stripe', 0x3d, 0x1000}}]}, 0x1, 0x450, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa000, 0x0) getdents64(r0, &(0x7f00000009c0)=""/4096, 0x1000) 28.742067705s ago: executing program 3 (id=137): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) 25.009264919s ago: executing program 3 (id=154): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x9b08, 0x0, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x5167, 0x0, 0x2, 0x0, 0x0) 23.005631102s ago: executing program 32 (id=154): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x9b08, 0x0, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x5167, 0x0, 0x2, 0x0, 0x0) 9.163826482s ago: executing program 1 (id=216): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) 8.451301462s ago: executing program 1 (id=220): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0x15, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0x2, 0xe5c, @loopback=0xac14140a, @remote, {[@timestamp={0x44, 0xc, 0x37, 0x0, 0x2, [0x7ff, 0x7]}, @timestamp_addr={0x44, 0x34, 0x87, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6.79134763s ago: executing program 1 (id=228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x8, 0x101}, 0x8) 5.954685624s ago: executing program 1 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000007001000040000002500000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) 4.622675261s ago: executing program 2 (id=236): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.978693508s ago: executing program 0 (id=237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x117, 0x1}], 0x10}, 0x20000001) 3.866924796s ago: executing program 2 (id=238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 3.689582677s ago: executing program 4 (id=239): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 3.349152854s ago: executing program 0 (id=240): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c) 3.100034484s ago: executing program 2 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.991586892s ago: executing program 4 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4, 0x300}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 2.828874825s ago: executing program 0 (id=243): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$eJzs3D1v00Acx/Gf40BIQTyKBzFVQkIsJNBWqrLRhY03gMRQtaGqcKE0LI2QoG+CnZWJl8A7YWVoBzYmDp19AcdJ8cUhcYS/H6mNY9/P/3Pbs32NEgGorEfx90Bn3HNjzLtlSU+fSKqV2jUAM2bc408DoHpChj5QUScbYXz9/xJIX7+/3Tp2X+c87x9ONpJJgp0/HKfyzdMCzzL5oyB+vF0fzi9JOj8Sro/ev3xM8ncz9S/49t/VX8rkG9755Pjv3RnOX5R0SdJlSVckXZV0TYp3e11uQ6r+dqb+rWTzkWc3AAAAAAD4Kzv7bA2e+E76s/mWT8sHY9fa2fPz3ag7fquHWpJ/6NV49ADPuvorBcsP8quZPuVyL7g2XL619SraLtgHoKhaevznGxlA/uNfY/+dFU45/utx/kPBNFBtvcP+i80o6h7MbUGaNGUvlcWLNgcL33Ibf7IL+pG8MjL7n8bgZGrXLPukAtd4br8v5bd5n9OmqYOe8djP3BdeP07u3mZQwl6U0mv60+4wyI7T+tAg+pz6Q4oiE/b2/8Fx2R2a8PeJIizj7ARgltpv9vbbvcP+/d29zZ3uTvfl2nqns762utJpx7fl7akm5wAW2Z+Lftk9AQAAAAAAAAAAAAAARd2QdHPy2Kkf7wEAAABgcU3+xqDGxG8nKvsYAQAAAAAAAAAAAAD43/0KAAD//3hpPUA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x1, 0x0, 0x1, 0x2}, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 2.468734086s ago: executing program 2 (id=244): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x4) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 2.331442593s ago: executing program 1 (id=245): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) 2.265914609s ago: executing program 4 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.11909541s ago: executing program 0 (id=247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0x40, @empty, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) 1.567774897s ago: executing program 1 (id=248): r0 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3a1}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r0, 0x6487, 0x8cdf, 0x28, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.497954466s ago: executing program 0 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1.416568181s ago: executing program 2 (id=250): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) creat(&(0x7f0000000000)='./file0\x00', 0xb1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1.378019903s ago: executing program 4 (id=251): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) close(r0) 641.551558ms ago: executing program 4 (id=252): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) shmget(0x1, 0x4000, 0x208, &(0x7f0000003000/0x4000)=nil) shmget(0x1, 0x2000, 0x110, &(0x7f0000ffc000/0x2000)=nil) 464.406101ms ago: executing program 2 (id=253): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r1, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 316.816679ms ago: executing program 0 (id=254): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x101041, 0x0) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$TCSETSW2(r0, 0x5425, 0x0) 0s ago: executing program 4 (id=255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040050}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 158.428106][ T5792] cgroup: Unknown subsys name 'net' [ 158.555969][ T5792] cgroup: Unknown subsys name 'cpuset' [ 158.569967][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 163.027733][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.034316][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.039133][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 167.795626][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.805087][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.813832][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.822342][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.830363][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.835460][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.838791][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.853962][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.854948][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.877331][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.887268][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.891171][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.895560][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.903495][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.919460][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.920946][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.929113][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.941898][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.953939][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.958476][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.972677][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.985456][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.997538][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.016245][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.116188][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.138446][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 169.475236][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 169.728240][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 169.980995][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 170.056921][ T5814] Bluetooth: hci2: command tx timeout [ 170.062479][ T5814] Bluetooth: hci3: command tx timeout [ 170.069162][ T5826] Bluetooth: hci0: command tx timeout [ 170.074705][ T5826] Bluetooth: hci1: command tx timeout [ 170.125284][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 170.208761][ T5826] Bluetooth: hci4: command tx timeout [ 170.382885][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.392071][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.399737][ T5812] bridge_slave_0: entered allmulticast mode [ 170.409001][ T5812] bridge_slave_0: entered promiscuous mode [ 170.499749][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.508792][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.516266][ T5812] bridge_slave_1: entered allmulticast mode [ 170.525301][ T5812] bridge_slave_1: entered promiscuous mode [ 170.720398][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.742071][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.076248][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.086411][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.094008][ T5811] bridge_slave_0: entered allmulticast mode [ 171.103019][ T5811] bridge_slave_0: entered promiscuous mode [ 171.152316][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.159920][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.167511][ T5817] bridge_slave_0: entered allmulticast mode [ 171.176418][ T5817] bridge_slave_0: entered promiscuous mode [ 171.188195][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.195633][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.203682][ T5813] bridge_slave_0: entered allmulticast mode [ 171.212220][ T5813] bridge_slave_0: entered promiscuous mode [ 171.230796][ T5812] team0: Port device team_slave_0 added [ 171.242268][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.250148][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.257782][ T5811] bridge_slave_1: entered allmulticast mode [ 171.266856][ T5811] bridge_slave_1: entered promiscuous mode [ 171.277099][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.284529][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.292236][ T5817] bridge_slave_1: entered allmulticast mode [ 171.301449][ T5817] bridge_slave_1: entered promiscuous mode [ 171.309752][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.317587][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.324954][ T5813] bridge_slave_1: entered allmulticast mode [ 171.333567][ T5813] bridge_slave_1: entered promiscuous mode [ 171.348921][ T5812] team0: Port device team_slave_1 added [ 171.557765][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.578054][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.751160][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.761252][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.768965][ T5825] bridge_slave_0: entered allmulticast mode [ 171.777704][ T5825] bridge_slave_0: entered promiscuous mode [ 171.831529][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.852792][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.874055][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.920255][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.927413][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.953978][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.966339][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.973954][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.981931][ T5825] bridge_slave_1: entered allmulticast mode [ 171.990602][ T5825] bridge_slave_1: entered promiscuous mode [ 172.034726][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.075824][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.082985][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.109441][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.134658][ T5826] Bluetooth: hci3: command tx timeout [ 172.141777][ T5826] Bluetooth: hci0: command tx timeout [ 172.147450][ T5826] Bluetooth: hci2: command tx timeout [ 172.152976][ T5826] Bluetooth: hci1: command tx timeout [ 172.175927][ T5811] team0: Port device team_slave_0 added [ 172.219805][ T5817] team0: Port device team_slave_0 added [ 172.270594][ T5811] team0: Port device team_slave_1 added [ 172.287943][ T49] Bluetooth: hci4: command tx timeout [ 172.331044][ T5813] team0: Port device team_slave_0 added [ 172.344485][ T5817] team0: Port device team_slave_1 added [ 172.361115][ T5813] team0: Port device team_slave_1 added [ 172.378901][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.513313][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.672027][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.679168][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.705264][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.718812][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.725882][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.752221][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.778288][ T5812] hsr_slave_0: entered promiscuous mode [ 172.787890][ T5812] hsr_slave_1: entered promiscuous mode [ 172.798462][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.805527][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.831853][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.917973][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.925056][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.951449][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.966103][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.973639][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.999924][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.014166][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.022077][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.049147][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.097871][ T5825] team0: Port device team_slave_0 added [ 173.217566][ T5825] team0: Port device team_slave_1 added [ 173.315017][ T5813] hsr_slave_0: entered promiscuous mode [ 173.324860][ T5813] hsr_slave_1: entered promiscuous mode [ 173.333458][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 173.339393][ T5813] Cannot create hsr debugfs directory [ 173.575698][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.582942][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.609205][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.626878][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.633951][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.660246][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.699536][ T5817] hsr_slave_0: entered promiscuous mode [ 173.709069][ T5817] hsr_slave_1: entered promiscuous mode [ 173.717519][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 173.723366][ T5817] Cannot create hsr debugfs directory [ 173.743492][ T5811] hsr_slave_0: entered promiscuous mode [ 173.752978][ T5811] hsr_slave_1: entered promiscuous mode [ 173.760599][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 173.766437][ T5811] Cannot create hsr debugfs directory [ 174.225141][ T49] Bluetooth: hci1: command tx timeout [ 174.225620][ T5826] Bluetooth: hci2: command tx timeout [ 174.230869][ T49] Bluetooth: hci0: command tx timeout [ 174.238560][ T5826] Bluetooth: hci3: command tx timeout [ 174.301935][ T5825] hsr_slave_0: entered promiscuous mode [ 174.311498][ T5825] hsr_slave_1: entered promiscuous mode [ 174.319875][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 174.325727][ T5825] Cannot create hsr debugfs directory [ 174.375403][ T5826] Bluetooth: hci4: command tx timeout [ 175.065633][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.087384][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.122351][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.142216][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.469170][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.492493][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.527953][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.546138][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.564148][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.588614][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.624562][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.678516][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.887861][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.949612][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.979587][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.005026][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.057297][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.123692][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.210364][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.246280][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.287423][ T5826] Bluetooth: hci3: command tx timeout [ 176.293069][ T5818] Bluetooth: hci0: command tx timeout [ 176.293173][ T49] Bluetooth: hci2: command tx timeout [ 176.298974][ T5818] Bluetooth: hci1: command tx timeout [ 176.447463][ T5818] Bluetooth: hci4: command tx timeout [ 176.484528][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.669487][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.794220][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.801859][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.910921][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.918444][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.975989][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.134131][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.187630][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.322530][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.330037][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.374626][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.431216][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.438732][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.485006][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.587384][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.594913][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.611177][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.641493][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.649022][ T4057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.820768][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.828303][ T4057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.853650][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.861172][ T4057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.927914][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.145683][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.341741][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.349297][ T4057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.370973][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.378650][ T4057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.513859][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.752534][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.419288][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.908811][ T5812] veth0_vlan: entered promiscuous mode [ 180.065684][ T5812] veth1_vlan: entered promiscuous mode [ 180.141269][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.211274][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.454758][ T5812] veth0_macvtap: entered promiscuous mode [ 180.558687][ T5812] veth1_macvtap: entered promiscuous mode [ 180.609563][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.687703][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.747304][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.858707][ T3787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.915411][ T5813] veth0_vlan: entered promiscuous mode [ 180.957120][ T3787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.966283][ T5817] veth0_vlan: entered promiscuous mode [ 181.003408][ T3787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.048190][ T3787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.124891][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.172413][ T5817] veth1_vlan: entered promiscuous mode [ 181.185782][ T5813] veth1_vlan: entered promiscuous mode [ 181.517731][ T5817] veth0_macvtap: entered promiscuous mode [ 181.534839][ T5813] veth0_macvtap: entered promiscuous mode [ 181.604682][ T5817] veth1_macvtap: entered promiscuous mode [ 181.626166][ T5825] veth0_vlan: entered promiscuous mode [ 181.646283][ T5813] veth1_macvtap: entered promiscuous mode [ 181.723024][ T5825] veth1_vlan: entered promiscuous mode [ 181.828422][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.900387][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.939772][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.008757][ T3787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.067469][ T3787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.076438][ T3787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.096715][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.121575][ T4220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.139927][ T5825] veth0_macvtap: entered promiscuous mode [ 182.195193][ T5825] veth1_macvtap: entered promiscuous mode [ 182.218845][ T4220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.270885][ T4220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.300977][ T4220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.376362][ T4220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.397345][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.484004][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.557665][ T4057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.592271][ T4057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.636503][ T4057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.647502][ T3632] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.383024][ T5811] veth0_vlan: entered promiscuous mode [ 183.496654][ T5811] veth1_vlan: entered promiscuous mode [ 183.836185][ T5811] veth0_macvtap: entered promiscuous mode [ 183.915181][ T5811] veth1_macvtap: entered promiscuous mode [ 184.122107][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.237390][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.340382][ T3665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.410071][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.453404][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.510267][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.514913][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.523072][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.680093][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.688866][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.085923][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 188.407125][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.415147][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.587956][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.595919][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.698562][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.707265][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.980965][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.989153][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.055796][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.064717][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.164945][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.173352][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.607830][ T6004] loop3: detected capacity change from 0 to 1024 [ 190.286463][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.296143][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.544916][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.553154][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.309885][ T6025] input: syz1 as /devices/virtual/input/input5 [ 191.341143][ T6027] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 192.504319][ T6044] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 192.714705][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 193.427220][ T30] audit: type=1326 audit(1756063534.129:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.449394][ T30] audit: type=1326 audit(1756063534.139:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.474916][ T30] audit: type=1326 audit(1756063534.149:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.500281][ T30] audit: type=1326 audit(1756063534.199:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.522447][ T30] audit: type=1326 audit(1756063534.199:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.544500][ T30] audit: type=1326 audit(1756063534.199:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.570552][ T30] audit: type=1326 audit(1756063534.219:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.594033][ T30] audit: type=1326 audit(1756063534.219:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.616014][ T30] audit: type=1326 audit(1756063534.219:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 193.638189][ T30] audit: type=1326 audit(1756063534.249:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 194.358194][ T6072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 194.416415][ T6074] loop8: detected capacity change from 0 to 8 [ 194.440583][ T6074] Dev loop8: unable to read RDB block 8 [ 194.446874][ T6074] loop8: unable to read partition table [ 194.489790][ T6074] loop8: partition table beyond EOD, truncated [ 194.496389][ T6074] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 195.944884][ T6098] smc: net device bond0 applied user defined pnetid SYZ2 [ 195.977942][ T6098] smc: net device bond0 erased user defined pnetid SYZ2 [ 196.339848][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 196.497572][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 196.561538][ T42] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 196.571295][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.579755][ T42] usb 5-1: Product: syz [ 196.584084][ T42] usb 5-1: Manufacturer: syz [ 196.589050][ T42] usb 5-1: SerialNumber: syz [ 196.682897][ T42] usb 5-1: config 0 descriptor?? [ 196.925960][ T42] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.027860][ T42] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 197.081505][ T42] usb 5-1: USB disconnect, device number 2 [ 197.121139][ T6115] capability: warning: `syz.2.46' uses deprecated v2 capabilities in a way that may be insecure [ 197.416864][ T1898] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.608922][ T1898] usb 2-1: Using ep0 maxpacket: 16 [ 197.626839][ T1898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.638297][ T1898] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 197.648647][ T1898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.744731][ T1898] usb 2-1: config 0 descriptor?? [ 198.243221][ T1898] kye 0003:0458:5016.0001: control desc unexpectedly large [ 198.335942][ T1898] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input6 [ 198.510961][ T1898] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input7 [ 198.772742][ T1898] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 199.066138][ T5870] usb 2-1: USB disconnect, device number 2 [ 199.532323][ T1898] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 199.706159][ T6133] fido_id[6133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 199.782610][ T1898] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 199.792147][ T1898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.950736][ T1898] usb 3-1: config 0 descriptor?? [ 200.649371][ T6152] Bluetooth: MGMT ver 1.23 [ 201.126466][ T1898] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 201.127580][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 201.216159][ T1898] usb 3-1: USB disconnect, device number 2 [ 202.248254][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 202.262049][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 202.272494][ T6175] netlink: 50 bytes leftover after parsing attributes in process `syz.1.70'. [ 203.783964][ T6202] Trying to write to read-only block-device nullb0 [ 204.130188][ T6207] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 205.633716][ T6228] loop1: detected capacity change from 0 to 256 [ 205.695231][ T6228] ======================================================= [ 205.695231][ T6228] WARNING: The mand mount option has been deprecated and [ 205.695231][ T6228] and is ignored by this kernel. Remove the mand [ 205.695231][ T6228] option from the mount to silence this warning. [ 205.695231][ T6228] ======================================================= [ 205.778952][ T6228] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.790001][ T6228] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 205.895635][ T6228] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 206.115845][ T6228] process 'syz.1.93' launched './file1' with NULL argv: empty string added [ 206.956733][ T6245] loop1: detected capacity change from 0 to 1024 [ 207.095389][ T6247] syzkaller1: entered promiscuous mode [ 207.101415][ T6247] syzkaller1: entered allmulticast mode [ 207.291822][ T6245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.012346][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.270427][ T6265] input: syz1 as /devices/virtual/input/input8 [ 209.967755][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.183302][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.997244][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 210.997319][ T30] audit: type=1326 audit(1756063807.712:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.127" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 211.428317][ T6314] loop3: detected capacity change from 0 to 512 [ 211.479705][ T6314] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 211.493543][ T6314] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.637342][ T6314] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.723266][ T6314] EXT4-fs (loop3): 1 truncate cleaned up [ 211.731616][ T6314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.391358][ T5812] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.430191][ T1898] IPVS: starting estimator thread 0... [ 212.448861][ T5812] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.509005][ T5812] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.532738][ T5812] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.597425][ T6327] IPVS: using max 240 ests per chain, 12000 per kthread [ 212.659435][ T5812] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.812703][ T5812] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.890675][ T5812] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.988206][ T5812] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 213.039101][ T5812] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 213.183847][ T5812] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 215.144044][ T6357] Set syz1 is full, maxelem 6117 reached [ 215.232116][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 215.431666][ T5870] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 215.441067][ T5870] usb 5-1: config 0 has no interface number 0 [ 215.518428][ T5870] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 215.528407][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.537799][ T5870] usb 5-1: Product: syz [ 215.542130][ T5870] usb 5-1: Manufacturer: syz [ 215.547068][ T5870] usb 5-1: SerialNumber: syz [ 215.664869][ T5870] usb 5-1: config 0 descriptor?? [ 215.736966][ T5870] ftdi_sio 5-1:0.117: FTDI USB Serial Device converter detected [ 215.745553][ T6367] loop2: detected capacity change from 0 to 512 [ 215.782527][ T6367] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.787094][ T5870] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 215.866860][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.906941][ T3883] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.949382][ T5870] usb 5-1: USB disconnect, device number 3 [ 215.959516][ T5870] ftdi_sio 5-1:0.117: device disconnected [ 216.171895][ T3883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.209183][ T6363] loop1: detected capacity change from 0 to 4096 [ 216.256362][ T6363] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 216.275062][ T6363] ntfs3(loop1): Failed to load $LogFile (-22). [ 216.382014][ T3883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.430024][ T6369] evm: overlay not supported [ 216.559723][ T3883] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.127628][ T3883] bridge_slave_1: left allmulticast mode [ 217.133455][ T3883] bridge_slave_1: left promiscuous mode [ 217.140188][ T3883] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.218078][ T3883] bridge_slave_0: left allmulticast mode [ 217.223896][ T3883] bridge_slave_0: left promiscuous mode [ 217.230583][ T3883] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.717698][ T3883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.758041][ T3883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.772495][ T3883] bond0 (unregistering): Released all slaves [ 218.279421][ T3883] hsr_slave_0: left promiscuous mode [ 218.296316][ T3883] hsr_slave_1: left promiscuous mode [ 218.306873][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.314410][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.396417][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.404232][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.507663][ T3883] veth1_macvtap: left promiscuous mode [ 218.513352][ T3883] veth0_macvtap: left promiscuous mode [ 218.519501][ T3883] veth1_vlan: left promiscuous mode [ 218.525018][ T3883] veth0_vlan: left promiscuous mode [ 219.710553][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.762882][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.792176][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.826607][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.840096][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.051413][ T6389] sctp: failed to load transform for md5: -2 [ 220.060650][ T3883] team0 (unregistering): Port device team_slave_1 removed [ 220.152930][ T3883] team0 (unregistering): Port device team_slave_0 removed [ 220.452578][ T6387] tipc: Started in network mode [ 220.457852][ T6387] tipc: Node identity c, cluster identity 4711 [ 220.464149][ T6387] tipc: Node number set to 12 [ 221.220097][ T30] audit: type=1326 audit(1756063817.922:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 221.242483][ T30] audit: type=1326 audit(1756063817.922:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 221.267073][ T30] audit: type=1326 audit(1756063817.962:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 221.481371][ T6423] netlink: 51 bytes leftover after parsing attributes in process `syz.0.169'. [ 221.687403][ T30] audit: type=1326 audit(1756063818.102:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28558 code=0x7ffc0000 [ 221.709587][ T30] audit: type=1326 audit(1756063818.102:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28558 code=0x7ffc0000 [ 221.734495][ T30] audit: type=1326 audit(1756063818.102:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 221.757689][ T30] audit: type=1326 audit(1756063818.102:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 221.779866][ T30] audit: type=1326 audit(1756063818.102:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28558 code=0x7ffc0000 [ 221.803727][ T30] audit: type=1326 audit(1756063818.102:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28558 code=0x7ffc0000 [ 221.827625][ T30] audit: type=1326 audit(1756063818.102:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28558 code=0x7ffc0000 [ 221.887794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 221.997931][ T5818] Bluetooth: hci1: command tx timeout [ 222.504082][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 222.658457][ T1898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 222.830016][ T1898] usb 3-1: Using ep0 maxpacket: 16 [ 222.871055][ T1898] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 222.880598][ T1898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.888985][ T1898] usb 3-1: Product: syz [ 222.893313][ T1898] usb 3-1: Manufacturer: syz [ 222.898230][ T1898] usb 3-1: SerialNumber: syz [ 222.929278][ T1898] usb 3-1: config 0 descriptor?? [ 223.412792][ T1898] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 223.468715][ T1898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.528860][ T1898] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 223.538397][ T1898] usb 3-1: media controller created [ 223.621085][ T1898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.047385][ T5818] Bluetooth: hci1: command tx timeout [ 224.088952][ T1898] zl10353_read_register: readreg error (reg=127, ret==0) [ 224.096281][ T1898] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 224.103245][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.104555][ T1898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 224.112630][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.128287][ T6398] bridge_slave_0: entered allmulticast mode [ 224.137675][ T6398] bridge_slave_0: entered promiscuous mode [ 224.244250][ T1898] usb 3-1: USB disconnect, device number 3 [ 224.509885][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.516939][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.643589][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.655789][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.663549][ T6398] bridge_slave_1: entered allmulticast mode [ 224.672865][ T6398] bridge_slave_1: entered promiscuous mode [ 224.757764][ T1898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 225.152006][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 225.259246][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.308844][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.728566][ T6398] team0: Port device team_slave_0 added [ 225.798304][ T6398] team0: Port device team_slave_1 added [ 226.130106][ T5818] Bluetooth: hci1: command tx timeout [ 226.257426][ T6481] loop2: detected capacity change from 0 to 256 [ 226.270008][ T6481] exfat: Deprecated parameter 'utf8' [ 226.275734][ T6481] exfat: Deprecated parameter 'namecase' [ 226.282394][ T6481] exfat: Deprecated parameter 'namecase' [ 226.288495][ T6481] exfat: Deprecated parameter 'utf8' [ 226.486994][ T6481] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 226.625511][ T6481] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 227.187386][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 227.559494][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.566776][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.593228][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.612949][ T6491] loop1: detected capacity change from 0 to 128 [ 227.667935][ T6491] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 227.703697][ T6491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.769788][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.776990][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.803351][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.890572][ T6494] warning: `syz.2.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.987520][ T6497] bridge0: entered allmulticast mode [ 228.207886][ T5818] Bluetooth: hci1: command tx timeout [ 228.294736][ T6398] hsr_slave_0: entered promiscuous mode [ 228.306809][ T6398] hsr_slave_1: entered promiscuous mode [ 228.674497][ T6506] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 230.131801][ T6398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.268157][ T6398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.430450][ T6398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.559564][ T6398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.836053][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.074554][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.185290][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.192898][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.272576][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.280086][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.530506][ T6558] loop4: detected capacity change from 0 to 64 [ 234.785148][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.539318][ T6612] syzkaller1: entered promiscuous mode [ 236.544979][ T6612] syzkaller1: entered allmulticast mode [ 237.558307][ T6398] veth0_vlan: entered promiscuous mode [ 237.686667][ T6398] veth1_vlan: entered promiscuous mode [ 237.987422][ T6398] veth0_macvtap: entered promiscuous mode [ 238.122432][ T6398] veth1_macvtap: entered promiscuous mode [ 238.360126][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.494732][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.654973][ T3632] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.700284][ T3632] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.756290][ T3632] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.849217][ T4167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.983714][ T6658] veth0_to_bond: entered promiscuous mode [ 240.047461][ T6658] veth0_to_bond: left promiscuous mode [ 241.072543][ T6670] cgroup: fork rejected by pids controller in /syz2 [ 241.197942][ T5461] ===================================================== [ 241.205325][ T5461] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 241.212937][ T5461] _copy_to_iter+0xef3/0x33f0 [ 241.217975][ T5461] __skb_datagram_iter+0x196/0x12c0 [ 241.223330][ T5461] skb_copy_datagram_iter+0x5b/0x1e0 [ 241.228927][ T5461] netlink_recvmsg+0x4bb/0xfe0 [ 241.233839][ T5461] sock_recvmsg+0x2dc/0x390 [ 241.238661][ T5461] ____sys_recvmsg+0x193/0x610 [ 241.243577][ T5461] ___sys_recvmsg+0x20b/0x850 [ 241.248536][ T5461] __x64_sys_recvmsg+0x20e/0x3d0 [ 241.254062][ T5461] x64_sys_call+0x35f0/0x3e20 [ 241.258984][ T5461] do_syscall_64+0xd9/0x210 [ 241.263652][ T5461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.269805][ T5461] [ 241.275681][ T5461] Local variable buf created at: [ 241.281932][ T5461] tomoyo_path_number_perm+0xff/0x7d0 [ 241.287506][ T5461] tomoyo_file_ioctl+0x3d/0x50 [ 241.292432][ T5461] [ 241.294809][ T5461] Bytes 60-63 of 64 are uninitialized [ 241.301687][ T5461] Memory access of size 64 starts at ffff88811b69d080 [ 241.308611][ T5461] Data copied to user address 00007fff693ec770 [ 241.314839][ T5461] [ 241.317355][ T5461] CPU: 0 UID: 101 PID: 5461 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 241.326742][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.337231][ T5461] ===================================================== [ 241.344228][ T5461] Disabling lock debugging due to kernel taint [ 241.350569][ T5461] Kernel panic - not syncing: kmsan.panic set ... [ 241.357097][ T5461] CPU: 0 UID: 101 PID: 5461 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 241.367937][ T5461] Tainted: [B]=BAD_PAGE [ 241.372160][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.382317][ T5461] Call Trace: [ 241.385669][ T5461] [ 241.388663][ T5461] __dump_stack+0x26/0x30 [ 241.393136][ T5461] dump_stack_lvl+0x53/0x270 [ 241.397873][ T5461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.403839][ T5461] dump_stack+0x1e/0x25 [ 241.408137][ T5461] vpanic+0x361/0xc50 [ 241.412271][ T5461] panic+0x15d/0x160 [ 241.416346][ T5461] kmsan_report+0x31c/0x320 [ 241.420984][ T5461] ? kmsan_internal_check_memory+0x1e1/0x230 [ 241.427089][ T5461] ? kmsan_copy_to_user+0xf1/0x190 [ 241.432324][ T5461] ? _copy_to_iter+0xef3/0x33f0 [ 241.437331][ T5461] ? __skb_datagram_iter+0x196/0x12c0 [ 241.442842][ T5461] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 241.448443][ T5461] ? netlink_recvmsg+0x4bb/0xfe0 [ 241.453513][ T5461] ? sock_recvmsg+0x2dc/0x390 [ 241.458341][ T5461] ? ____sys_recvmsg+0x193/0x610 [ 241.463413][ T5461] ? ___sys_recvmsg+0x20b/0x850 [ 241.468394][ T5461] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 241.473644][ T5461] ? x64_sys_call+0x35f0/0x3e20 [ 241.478645][ T5461] ? do_syscall_64+0xd9/0x210 [ 241.483479][ T5461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.489680][ T5461] ? _raw_spin_trylock_bh+0xb1/0xc0 [ 241.495001][ T5461] ? filter_irq_stacks+0x49/0x190 [ 241.500203][ T5461] ? stack_depot_save_flags+0x35/0x7b0 [ 241.505821][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.511065][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.516306][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.521547][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.526788][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.532048][ T5461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.538014][ T5461] ? _raw_spin_trylock_bh+0xb1/0xc0 [ 241.543336][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.548579][ T5461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.554541][ T5461] kmsan_internal_check_memory+0x1e1/0x230 [ 241.560501][ T5461] kmsan_copy_to_user+0xf1/0x190 [ 241.565586][ T5461] _copy_to_iter+0xef3/0x33f0 [ 241.570436][ T5461] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 241.576894][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.582140][ T5461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.588096][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.593345][ T5461] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 241.599824][ T5461] __skb_datagram_iter+0x196/0x12c0 [ 241.605167][ T5461] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 241.610971][ T5461] skb_copy_datagram_iter+0x5b/0x1e0 [ 241.616395][ T5461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.622353][ T5461] netlink_recvmsg+0x4bb/0xfe0 [ 241.627259][ T5461] ? aa_sock_msg_perm+0x29c/0x2f0 [ 241.632437][ T5461] ? __pfx_netlink_recvmsg+0x10/0x10 [ 241.637854][ T5461] sock_recvmsg+0x2dc/0x390 [ 241.642526][ T5461] ____sys_recvmsg+0x193/0x610 [ 241.647441][ T5461] ? setup_fault_attr+0x260/0x300 [ 241.652620][ T5461] ? stack_depot_save_flags+0x35/0x7b0 [ 241.658283][ T5461] ___sys_recvmsg+0x20b/0x850 [ 241.663132][ T5461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.669077][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.674321][ T5461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.680269][ T5461] __x64_sys_recvmsg+0x20e/0x3d0 [ 241.685364][ T5461] ? kmsan_get_metadata+0xfb/0x160 [ 241.690630][ T5461] x64_sys_call+0x35f0/0x3e20 [ 241.695477][ T5461] do_syscall_64+0xd9/0x210 [ 241.700132][ T5461] ? irqentry_exit+0x16/0x60 [ 241.704855][ T5461] ? clear_bhb_loop+0x40/0x90 [ 241.709661][ T5461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.715677][ T5461] RIP: 0033:0x7f940c4e7407 [ 241.720184][ T5461] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 241.739917][ T5461] RSP: 002b:00007fff693ec660 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 241.748459][ T5461] RAX: ffffffffffffffda RBX: 00007f940c45d740 RCX: 00007f940c4e7407 [ 241.756523][ T5461] RDX: 0000000000000040 RSI: 00007fff693ec6e0 RDI: 0000000000000009 [ 241.764592][ T5461] RBP: 0000563b13885aa0 R08: 0000000000000000 R09: 0000000000000000 [ 241.772655][ T5461] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 241.780704][ T5461] R13: 00007fff693f0840 R14: 0000000000000000 R15: 00007fff693f0830 [ 241.788799][ T5461] [ 241.792136][ T5461] Kernel Offset: disabled [ 241.796491][ T5461] Rebooting in 86400 seconds..