last executing test programs: 22.32675752s ago: executing program 0 (id=411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$incfs(0xffffffffffffffff, 0x0, 0x8101, 0x100) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 22.301097372s ago: executing program 1 (id=412): socket$netlink(0x10, 0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x2, 0x1000, 0x1, &(0x7f0000935000/0x1000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pread64(r0, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) 20.945193821s ago: executing program 1 (id=415): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r5 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40480d7, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 20.719319734s ago: executing program 0 (id=417): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r7], 0x54}}, 0x0) 17.03947772s ago: executing program 1 (id=428): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 15.765066345s ago: executing program 0 (id=422): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.174998548s ago: executing program 2 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmget$private(0x0, 0x1000, 0x200, &(0x7f00008f0000/0x1000)=nil) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 14.174725668s ago: executing program 0 (id=425): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000cc0)=ANY=[], 0x4, 0xfbd, &(0x7f0000006d00)="$eJzs3U+MG+XZAPB3vPb+yS5ZL/DBAh8hH3wVgcJuSCI1vQWBeqmEuPQOCgmNWChqaCUiIJseEJUQRUKcKg4gLpRKKVKRQJUq1FPbU6v21F5QL1SqUimohxYpcZXdd7z2rCf2ztpje/37SY/ffecdz/OM19nMjO3XAZhYlY3bY8eWkxDe/vStR19+Kvn42rK7mmsc3LhNYq8eQqi19JPM9j6PC65cfulkpzYJRzZu03547FLzvvMhhPVwMHwW6uHD1bUvP3jnkUMfvTp7yxvnnnllQLvflN0PAADYiy7+fu0v9/39dw8sfXXxwIkw01yeHp/XY38+HvcfjgfK6fFyJbT3k5ZoNZ1ZbypGJbPeVGa9aiZPNSdfLbOdWs56013yTbUs67SfAAAAMI7S89p6SCorbf1KZWVl87z/ms8Xp5OV586snT47pEIBAACAwv51fuNNt2McsyNQg8jGXPoE29n9Pvz2zu+zq6iUnK9acr6JiWLPNyGEEEKI/oXjETEG0Vgs8WIDAAAAQIf5wrZZ7+9MXc2t1XvLf+nhSuf7Qx9knn/bp53o8/P/+vlnt69Qav4OBp+/NuT8193/9y/4iwMAQHF79Wgy3a/0ODqdxyA7j+BU273mp3Z6/lHJbKe6wzrz5hUcl/kG8+qcKrmOovLq3+nvcVjy6s/Ohzmq8urPztM5qvLqnym5jqLy6u9w5SeM4j/rvPrnSq6jqLz695VcR1F59c+XXEdRefUvlFxHUXn131ByHUXl1b+/5DqKyqt/XN5Wm1d/veQ6isqrf2mzGfnDiLz6byy5jqLy6r+p5DqKyqv/5pLrGJY7Y5s+Dgdy1pvvcPA3cgeDAAAAQEf/Gfv5//ZkJF3XqQ69xomPjdfYh5h/agQeg0HHfP+3+fTCCOyXGKW4sPmfYfvy2Q7LxK6iMgI1DCrmOj2HhBBCiJGM88O79AAAAACMiPRzAemn3htROj61bfyv7127TcerreOzWxtIx2tdtj/dZXymyzgAAAAQwq9eO33bm8nWfHfZz/TvdD68dN6oufDx1VBgHqPsfIQ7zb/bec92m7/zhCPjMhsbAAAAe1Xyrc+u3v/ouy8sfXXxwImWs9+r8Xw3nQe0Gq8NfBL76fsCFjL9JD2HPtGep5KzXvb6wA1523t8lzsKAAAAEyw9f6+HpLLSct5dD5XKysrW+fhyqCWnz6ydOhz76fez/HaxNnNt+UMl1w0AAAD0but8v/P5f/o9vsthOll57sza6bOb/YXm8lql9brA4tbypPW6QD2z/EjO8qOxH7+/M3x3cW5j+crJ76091e+dBwAAgAlx9sVzzzy5tnbq+5PzQzWEsKvthFHYCz/4YaA/DPsvEwAA0G9ffPFW7QdHF369+fn/rfnvrsYfDsZ+Pc7t94e4PH2fQPo5gG2f13+iPc9i3nrPt69Xz6w3FWMmU/dsy3bCxnyD7fdbystXb9/OdE6++Uy+hUy+7DwF1cz6SYe5BEOHmQDT9RYzy7PzMFYzOZJM/rs75AIAAIDU6gvPPr969sVzD5559smnTz196rmjR45/8/jxww9946HVjff1r7a+ux8AAAAYR1tv+h12JQAAAAAAAAAAAAAAAAAAADC5yvg6sWHvIwAAAEy6f54PIawLkRPpFwwOu45xj2QEahhcNGaGX8PejuDfoRCiQ/z5jeHXMAJR8fdRiN5iuOd9s+UeyzQajcYIPOYjGI1G9pvmAQAAAAbryuWXTra226wnfc3X3Fp9s7ka86btwoN/WroW6WqXHm6/XrKvr9Uw6cp+/ss/qvlnOo6/f6G/+TcuxNe3+t3//lXaN3Bi47Yae3O95r139WfLzfwhhNurPeZv2/8LITzea8Z2hzL57w295W+8m3n8n2jrVXrNf18m/74e81/K/v6fz8swe93898f8y7F/6J5e87fv4kwmW69PgK9n9v+p0Gv+zP7Xe0yY8UDMDwCTqPm/eeP8cAvps/QoIT2eno/9dH/TA9bsux92evxfyWynuuvK27ebHgfdGvvNo7r19rypndafPi4Lsb2hYJ1Z4/Kukrz6+/V7HLS8+msl11FUXv3TJddRVF79nc/ei6w0WHn1X//scXTk1d/zhYghy6t/XK4r59U/X3IdReXVv1ByHUXl1b/T/8eHJa/+/SXXUVRe/Ysl11FUXv0FL6uVLq/+pZLrKCqv/htLrqOovPpvKrmOovLqv7nkOobljtjmnQ+n55+LcSzt1zP9mQ6PZc8vhgAAAAAD9Y+RnP+v5crB0GsRQghRdtT8/RcFYmoEahBinOPfjU3DrkP0IRqLw69BjGRszIvIxErG6L3iAPTPYGezYNT5/U82v//J5vfP9aSvxCeZfmqqy3i1y3ity/h0ZjzJ3HEmbzy6KbPdRnpdM7q5y/j/xD3IG9+fuf8PM+O3dtn+cpfx27qM395l/I4u4wAAAEyGW2Lr/BAAAAD2rpd//snrv7z3ictLX108cCJMb5t3/nDsz8TX1l+L/ey896lafM3/R7H/Xmx/E9u/Zdb3/hMAAAAYvPR7Yrz+DwAAAHtX+j2lzv8BAABg71qKrfN/AAAA2LtujK3zfwAAANjDktnOi2ObXhe4O7a9zusHAIy+/43tnbE9ENu7Yvt/sU2PA+6J7f+XVB8A0D8//c6Pj7+ZbM33fzQzfiUuT9tt1jevFCSV9pn852K7L7Zf67Ge7PcB9Jo/tb/HPIPKv7jL/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3lHZuD12bDkJ4e1P33r0J9Ov//HasruaaxzcuE1irx5CqDXvl45u9X8RV7xy+aWTre3V2CbhSEhC0lweHrvUzDQfQlgPB8NnoR4+XF378oN3Hjn00auzt7xx7plXBvgQtO0fAAAA7EX/DQAA//8Q4Bqg") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4001, &(0x7f0000000180)={[{@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@auto_da_alloc}, {@debug}]}, 0x2, 0xbcb, &(0x7f0000000c00)="$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") read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) 13.850765517s ago: executing program 3 (id=427): mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xed0}], 0x1}}], 0x8, 0x0, 0x0) 12.709687234s ago: executing program 3 (id=429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 12.60084221s ago: executing program 4 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 11.610656059s ago: executing program 2 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6(0xa, 0x3, 0xff) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32, @ANYBLOB="1010000000"], 0x40c}}, 0x0) 10.867997572s ago: executing program 4 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0xff, 0x0) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008010) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004800)="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", 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x4) 6.609502572s ago: executing program 1 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000ffff0000000007000000000000000001794a85020000000000008ef752cfcad900020000000000000000000000da006b7ccb101f22204b675950d31ecbe956c1e1565646b170c86ad05e2e2066d507d343e285fcba16d2a925f503535c308787eee03cd849bd822af2bfcd1da525979b52f9e70c5fb2ab2abeda7ae7fc064ea2d4db8e833a707d55a0b6319aa8b4b11574b64995fd4336037e231dd6103993f048481f2a48f40eaf66fef9bc402385143b5c"], &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x28) syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x404000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x48040) 6.544217386s ago: executing program 3 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000000c0)=r5, 0x4) 6.274642311s ago: executing program 2 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0xd3c, [0xffff, 0x5d, 0x5, 0x6, 0x2, 0xc1, 0x3, 0x15f, 0x46, 0x400, 0x9, 0x200, 0xf26, 0x4, 0x240, 0x9, 0xf046, 0x0, 0x1, 0xf000, 0xfffb, 0xf, 0x5, 0x0, 0x1, 0x1000, 0x7, 0x8, 0x7f, 0x5, 0x7d, 0x406, 0x2, 0x4, 0x1400, 0x13, 0x7, 0xc, 0xb673, 0x40, 0x10, 0x3, 0x800f, 0x2, 0x733, 0xc, 0x7a82, 0xfffc], 0x1c0}}) 6.274437911s ago: executing program 4 (id=436): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) listen(r3, 0x4000) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 5.423568852s ago: executing program 3 (id=437): add_key(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}}, 0xf0}}, 0x4810) writev(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.303361958s ago: executing program 4 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) open(0x0, 0x300080, 0x4) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x3000, 0x10000, 0xc, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x1}, {0x2000, 0x8080000, 0x9, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x9, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x0, 0xeeee0000, 0xb, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x3f}, {0x100000, 0x0, 0x0, 0x78, 0x2, 0x2, 0x2, 0x80, 0x0, 0xff, 0x1}, {0x0, 0x6000, 0xa, 0x4, 0x3, 0x0, 0xa1, 0x6, 0x0, 0x0, 0x8}, {0xf000, 0x54000, 0xc, 0x0, 0x0, 0x7, 0x1, 0x40, 0x26}, {0x80a0000, 0x8cc}, {0x54000}, 0x40000, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x4]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0xffffffffffffffff, 0x180, 0x2, 0xfffffffffffffffa, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0xb, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) fspick(0xffffffffffffffff, 0x0, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x4, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x8}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x4, 0x40, 0x70}, {0x8080000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0xbf4}, {0x8000000, 0xd}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x8, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.197920915s ago: executing program 0 (id=439): syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 4.331491795s ago: executing program 2 (id=440): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcb, 0x6}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008054}, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) syz_emit_ethernet(0x10e, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xec, 0x0, @wg=@data={0x4, 0x8, 0xb, "fb0452a882dc2d348b1e8bd1ca7724e0397e3489ce58c8408c37e795e5fdbb5e72f668fcbd153a42896dc82a8f0598e5d24118ec01a2a4d059bb4bb03c23b7ea70b89c5ad74a2348fd5c83eff8edab189997a919652b669beecb4ba726c0d12ea820fba2264596b242ccd79437a1a062526bf2fdcc2d831c18c66ce0e00289628485a5f96821b51154ee9b97bf2240f0f483c5ac43aa96a7330b1c44ed98660a1ef9fdff985d6081f8e1a3bdbf2d7d1f240aeef91faeea2d00a2ec87a2ef21736149f582459af2b54390c1d31e901f5838abdf95"}}}}}}, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)) r5 = syz_open_pts(r4, 0x101000) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) close(0x4) 3.684931863s ago: executing program 3 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeaf, &(0x7f00000002c0)=0x2) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 3.649966695s ago: executing program 2 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6(0xa, 0x3, 0xff) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="1010000000"], 0x40c}}, 0x0) 3.094964258s ago: executing program 4 (id=443): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r4, 0x2) 2.871314731s ago: executing program 2 (id=444): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 1.148136902s ago: executing program 4 (id=445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f065580be0ffff0003ba52c44277fb08061402e000030b62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 1.071110527s ago: executing program 1 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6(0xa, 0x3, 0xff) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32, @ANYBLOB="1010000000"], 0x40c}}, 0x0) 157.11789ms ago: executing program 3 (id=447): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x14}}, 0x4040040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c'], 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x48850) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 52.820176ms ago: executing program 0 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x2, 0x7f82e9d5, 0x6, {0x5, 0x1, 0xfff9, 0xfff, 0xd31}, {0xfc, 0x2, 0xe8b2, 0x0, 0x1ff, 0x65bb}, 0x200, 0x0, 0x5}}]}]}}]}, 0x84}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005) 0s ago: executing program 1 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000000c0)=r5, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 66.142562][ T4171] cgroup: Unknown subsys name 'net' [ 66.262369][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.801436][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.321252][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.343414][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.399975][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.462464][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 69.530567][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.538515][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.547208][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.556703][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.587922][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.595271][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.603476][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.663537][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.671029][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.679134][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.688135][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.695967][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.703984][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.721497][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.734044][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.749449][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.756761][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.765372][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.772979][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.780259][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.789425][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.855227][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.864899][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.873244][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.891238][ T4184] team0: Port device team_slave_0 added [ 69.905418][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.915035][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.922504][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.931440][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.940340][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.952995][ T4184] team0: Port device team_slave_1 added [ 69.965946][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.973058][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.981650][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.992112][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.010886][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.027141][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.034581][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.042530][ T4185] device bridge_slave_1 entered promiscuous mode [ 70.091470][ T4186] team0: Port device team_slave_0 added [ 70.105962][ T4194] team0: Port device team_slave_0 added [ 70.122027][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.132231][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.139899][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.166433][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.180087][ T4186] team0: Port device team_slave_1 added [ 70.188201][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.200036][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.211491][ T4194] team0: Port device team_slave_1 added [ 70.219314][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.229397][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.236987][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.263108][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.325244][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.332255][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.359256][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.396549][ T4185] team0: Port device team_slave_0 added [ 70.403050][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.410266][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.436643][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.448902][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.456072][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.486628][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.501300][ T4193] team0: Port device team_slave_0 added [ 70.515091][ T4185] team0: Port device team_slave_1 added [ 70.526292][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.533246][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.544814][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.551987][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.578531][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.591801][ T4193] team0: Port device team_slave_1 added [ 70.637491][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.644905][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.671560][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.690465][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.698901][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.725297][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.749815][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.757250][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.783993][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.800222][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.807373][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.813980][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.821982][ T4186] Cannot create hsr debugfs directory [ 70.848580][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.855857][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.881939][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.936766][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.945049][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.952232][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.960192][ T4194] Cannot create hsr debugfs directory [ 70.988297][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.995348][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.002083][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.010144][ T4185] Cannot create hsr debugfs directory [ 71.025428][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 71.032357][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 71.036050][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 71.050901][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 71.071084][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 71.106962][ T4193] device hsr_slave_0 entered promiscuous mode [ 71.114485][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.121470][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.129861][ T4193] Cannot create hsr debugfs directory [ 71.395647][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.427238][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.437833][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.451395][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.490980][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.502255][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.512109][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.523582][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.599960][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.606930][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.620995][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.635296][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.647824][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.659665][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.711270][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.763211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.773826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.787618][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.808127][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.826277][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.833267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.842866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.852383][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.859679][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.870447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.878913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.890915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.909852][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.921075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.930921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.942849][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.950033][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.981942][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.995989][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.008071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.018325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.029179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.037961][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.045196][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.053373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.062849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.080652][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.090237][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.100532][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.132646][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.141928][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.151799][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.161268][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.168549][ T1555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.178537][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.187657][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.196812][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.206115][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.215267][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.224053][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.233616][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.243681][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.252681][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.274950][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.286986][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.297602][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.307218][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.317761][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.330769][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.349631][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.359790][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.372741][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.407470][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.418450][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.437603][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.452451][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.462648][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.481481][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.490130][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.514522][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.550921][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.576107][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.618818][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.665430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.675359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.684038][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.691371][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.710063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.723690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.738882][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.746168][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.756476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.816958][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.829036][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.839546][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.849250][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.859217][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.869531][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.878497][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.890216][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.900212][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.909260][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.925819][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.939612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.950854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.970877][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.987448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.995775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.006828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.016267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.028512][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.041167][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.057241][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.069434][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.077650][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.086734][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.101693][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.106820][ T4189] Bluetooth: hci1: command 0x041b tx timeout [ 73.112859][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.123560][ T4189] Bluetooth: hci2: command 0x041b tx timeout [ 73.141675][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.171177][ T4189] Bluetooth: hci4: command 0x041b tx timeout [ 73.179841][ T4189] Bluetooth: hci0: command 0x041b tx timeout [ 73.191176][ T4189] Bluetooth: hci3: command 0x041b tx timeout [ 73.224999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.234061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.243095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.252289][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.260902][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.268076][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.277500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.286613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.295700][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.303137][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.314157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.323407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.343372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.351950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.361524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.370838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.380634][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.387815][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.395590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.405471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.421887][ T4185] device veth0_vlan entered promiscuous mode [ 73.461769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.470694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.480611][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.491325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.500949][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.508386][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.517788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.533641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.543125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.558566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.572221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.580328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.588989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.597737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.613392][ T4184] device veth0_vlan entered promiscuous mode [ 73.631408][ T4184] device veth1_vlan entered promiscuous mode [ 73.642939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.655411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.664419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.672672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.686112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.696520][ T4185] device veth1_vlan entered promiscuous mode [ 73.709112][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.720734][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.754617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.762891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.776542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.785088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.793905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.805472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.813046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.820944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.831615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.843273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.853516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.868236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.882411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.911927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.921256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.935403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.943908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.972087][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.988715][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.044991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.061162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.097908][ T4185] device veth0_macvtap entered promiscuous mode [ 74.106269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.116050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.126910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.136444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.156911][ T4184] device veth0_macvtap entered promiscuous mode [ 74.173328][ T4184] device veth1_macvtap entered promiscuous mode [ 74.190686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.200640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.214798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.249174][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.261382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.270281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.284493][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.297886][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.312924][ T4185] device veth1_macvtap entered promiscuous mode [ 74.333647][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.356275][ T4186] device veth0_vlan entered promiscuous mode [ 74.363151][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.372158][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.380352][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.390927][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.399315][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.408242][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.417675][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.437680][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.456369][ T4186] device veth1_vlan entered promiscuous mode [ 74.466349][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.476201][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.486807][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.498068][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.508160][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.521816][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.533230][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.547805][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.556990][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.567828][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.577973][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.587587][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.617981][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.628588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.645721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.665322][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.676971][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.689075][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.721336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.732229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.743850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.753550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.764830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.773564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.791479][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.804064][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.816728][ T4194] device veth0_vlan entered promiscuous mode [ 74.840203][ T4186] device veth0_macvtap entered promiscuous mode [ 74.857955][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.868350][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.878545][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.888451][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.920029][ T4186] device veth1_macvtap entered promiscuous mode [ 74.941280][ T4194] device veth1_vlan entered promiscuous mode [ 74.981846][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.999107][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.009171][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.019939][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.034808][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.083997][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.106169][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.121124][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.130372][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.139988][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.149876][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.163502][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.175381][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.185360][ T1334] Bluetooth: hci4: command 0x040f tx timeout [ 75.188357][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.194748][ T1334] Bluetooth: hci2: command 0x040f tx timeout [ 75.203606][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.222411][ T1334] Bluetooth: hci1: command 0x040f tx timeout [ 75.222709][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.265966][ T1334] Bluetooth: hci3: command 0x040f tx timeout [ 75.272653][ T1334] Bluetooth: hci0: command 0x040f tx timeout [ 75.280853][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.300158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.312044][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.322594][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.332514][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342250][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.401055][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.410652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.433973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.447034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.461483][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.470147][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.496912][ T4194] device veth0_macvtap entered promiscuous mode [ 75.514161][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.528567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.536512][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.561054][ T4194] device veth1_macvtap entered promiscuous mode [ 75.574731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.628364][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.638672][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.649553][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.658336][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.676006][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.677278][ T4193] device veth0_vlan entered promiscuous mode [ 75.696121][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.729050][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.739781][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.739837][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.759438][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.773102][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.785046][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.798586][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.809512][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.821520][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.844989][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.856828][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.865991][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.876158][ T1555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.892540][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.904131][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.917177][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.928397][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.939219][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.950607][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.968362][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.981229][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.991826][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.000791][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.010118][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.028239][ T1555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.053349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.063040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.075514][ T1555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.088428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.106904][ T4193] device veth1_vlan entered promiscuous mode [ 76.156159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.167616][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.221392][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.260960][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.283924][ T4301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.296150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.321880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.334969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.355626][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.374760][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.397140][ T4193] device veth0_macvtap entered promiscuous mode [ 76.429989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.444925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.545631][ T4193] device veth1_macvtap entered promiscuous mode [ 76.558090][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.580660][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.607514][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.717491][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.801849][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.813218][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.823297][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.987014][ T4310] ax25_connect(): syz.1.6 uses autobind, please contact jreuter@yaina.de [ 77.032501][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.289449][ T4313] ======================================================= [ 77.289449][ T4313] WARNING: The mand mount option has been deprecated and [ 77.289449][ T4313] and is ignored by this kernel. Remove the mand [ 77.289449][ T4313] option from the mount to silence this warning. [ 77.289449][ T4313] ======================================================= [ 77.474442][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 77.512174][ T4316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.514863][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 77.536210][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.563415][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 77.573708][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 77.583786][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.605456][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.628176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.675361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.694745][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 77.761029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.784180][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.817591][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.833427][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.844754][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.860274][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.872036][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.909683][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.942892][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.993445][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.005241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.016147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.038172][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.053291][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.104131][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.120093][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.265371][ T4340] device syzkaller0 entered promiscuous mode [ 81.010995][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.063126][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.251459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.333780][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.375335][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.390792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.582697][ T26] audit: type=1107 audit(1770038989.059:2): pid=4373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 81.792046][ T4380] loop0: detected capacity change from 0 to 764 [ 82.512356][ T4380] rock: directory entry would overflow storage [ 82.540355][ T4380] rock: sig=0x4654, size=5, remaining=4 [ 83.231639][ T4396] ipt_CLUSTERIP: Please specify destination IP [ 86.950166][ T7] cfg80211: failed to load regulatory.db [ 86.984426][ T4250] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.064319][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.036698][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 88.154622][ T4250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.197034][ T4250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.236219][ T4468] loop3: detected capacity change from 0 to 512 [ 88.274486][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 88.424575][ T13] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 88.603425][ T13] usb 1-1: config 0 has no interface number 0 [ 88.637294][ T4250] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.840346][ T13] usb 1-1: config 0 interface 196 has no altsetting 0 [ 89.085541][ T4250] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.346537][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.524256][ C1] sched: RT throttling activated [ 89.534493][ T13] usb 1-1: string descriptor 0 read error: -71 [ 89.657343][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 89.758769][ T4250] usb 2-1: config 0 descriptor?? [ 89.804904][ T4250] usb 2-1: can't set config #0, error -71 [ 89.893759][ T4250] usb 2-1: USB disconnect, device number 2 [ 89.929482][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.347176][ T13] usb 1-1: config 0 descriptor?? [ 90.374832][ T13] usb 1-1: can't set config #0, error -71 [ 90.390316][ T4468] EXT4-fs (loop3): Unrecognized mount option "rootcontext=system_u" or missing value [ 90.530010][ T13] usb 1-1: USB disconnect, device number 2 [ 93.272225][ T4508] device syzkaller0 entered promiscuous mode [ 93.328852][ T4508] 0: reclassify loop, rule prio 0, protocol 800 [ 93.395926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 93.704479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 93.806609][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 93.914720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 94.932289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 94.941814][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 94.954282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 94.963551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 94.972489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 94.981723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.063800][ T4526] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 96.345004][ T4526] loop1: detected capacity change from 0 to 1024 [ 96.635607][ T4526] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 96.678493][ T4526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.743218][ T4526] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 96.789800][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.834769][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.902065][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.937750][ T4526] loop1: detected capacity change from 0 to 8 [ 96.962628][ T4552] process 'syz.4.64' launched './file1' with NULL argv: empty string added [ 96.964947][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.063209][ T4526] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.107990][ T4526] SQUASHFS error: Failed to read block 0x9b: -5 [ 97.135688][ T4526] SQUASHFS error: Unable to read metadata cache entry [99] [ 97.163618][ T4526] SQUASHFS error: Unable to read inode 0x127 [ 97.411653][ T4561] loop1: detected capacity change from 0 to 64 [ 98.786432][ T4574] Trying to free block not in datazone [ 99.723652][ T4583] loop4: detected capacity change from 0 to 2048 [ 100.653834][ T4583] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.848440][ T4606] ODEBUG: Out of memory. ODEBUG disabled [ 102.609098][ T4608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 103.691635][ T4594] sctp: failed to load transform for md5: -2 [ 103.794707][ T4624] device syzkaller0 entered promiscuous mode [ 103.975923][ T4631] device syzkaller0 entered promiscuous mode [ 104.005874][ T4637] binder: 4636:4637 unknown command 0 [ 104.021768][ T4637] binder: 4636:4637 ioctl c0306201 200000000140 returned -22 [ 105.899896][ T4657] device syzkaller0 entered promiscuous mode [ 109.877449][ T4688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 110.499056][ T4688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 110.538829][ T4688] device erspan0 entered promiscuous mode [ 110.555685][ T4688] device bridge0 entered promiscuous mode [ 110.719027][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 110.769168][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.799675][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.985038][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.172166][ T4712] loop0: detected capacity change from 0 to 64 [ 111.455599][ T4699] device bridge_slave_0 left promiscuous mode [ 111.508363][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.638481][ T4699] device bridge_slave_1 left promiscuous mode [ 111.674820][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.755240][ T4699] bond0: (slave bond_slave_0): Releasing backup interface [ 111.839815][ T4699] bond0: (slave bond_slave_1): Releasing backup interface [ 111.923812][ T4699] team0: Port device team_slave_0 removed [ 111.951247][ T4699] team0: Port device team_slave_1 removed [ 111.961788][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.969968][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.979597][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.996449][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.028834][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 112.283834][ T4723] loop1: detected capacity change from 0 to 32768 [ 112.342853][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 112.359822][ T4723] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.106 (4723) [ 112.614210][ T4723] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 112.827126][ T4723] BTRFS info (device loop1): using free space tree [ 112.982054][ T4723] BTRFS info (device loop1): has skinny extents [ 113.055194][ T4699] syz.4.99 (4699) used greatest stack depth: 20560 bytes left [ 113.141321][ T4731] input: syz0 as /devices/virtual/input/input5 [ 113.390351][ T4723] BTRFS info (device loop1): enabling ssd optimizations [ 113.544485][ T4241] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.737775][ T26] audit: type=1804 audit(1770039021.219:3): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.106" name="/newroot/19/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 113.794471][ T4242] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.814336][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 113.949129][ T4241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.971317][ T4241] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 113.986222][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.994958][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.013956][ T4241] usb 4-1: config 0 descriptor?? [ 114.074815][ T4241] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 114.184565][ T4242] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.214516][ T4242] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.234462][ T4242] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.365757][ T23] usb 3-1: config 0 has no interfaces? [ 114.410751][ T4242] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 114.420380][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 114.429220][ T4242] usb 1-1: Product: syz [ 114.433587][ T4242] usb 1-1: Manufacturer: syz [ 114.438496][ T4242] usb 1-1: SerialNumber: syz [ 114.534995][ T3545] bcm5974 4-1:0.0: could not read from device [ 114.541729][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.554411][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.573069][ T23] usb 3-1: Product: syz [ 114.577345][ T23] usb 3-1: Manufacturer: syz [ 114.593367][ T23] usb 3-1: SerialNumber: syz [ 114.601365][ T23] usb 3-1: config 0 descriptor?? [ 114.646242][ T4241] usb 4-1: USB disconnect, device number 2 [ 114.714088][ T4242] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.276787][ T4189] usb 3-1: USB disconnect, device number 2 [ 115.966362][ T4784] binder: 4783:4784 ioctl 89f2 0 returned -22 [ 119.229095][ T4803] binder: BINDER_SET_CONTEXT_MGR already set [ 119.266039][ T4803] binder: 4802:4803 ioctl 4018620d 200000004a80 returned -16 [ 121.978094][ T4799] usb 1-1: USB disconnect, device number 3 [ 122.034581][ T4472] usblp0: removed [ 122.741563][ T4746] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.755568][ T4746] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.767992][ T4746] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.779798][ T4746] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.939263][ T4746] syz.4.110 (4746) used greatest stack depth: 20432 bytes left [ 123.289411][ T4851] loop0: detected capacity change from 0 to 256 [ 123.334973][ T4851] exfat: Bad value for 'uid' [ 124.393091][ T4867] loop0: detected capacity change from 0 to 1024 [ 124.586506][ T4867] EXT4-fs (loop0): Ignoring removed orlov option [ 126.100259][ T4867] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 129.003464][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.294319][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 130.793375][ T4900] loop0: detected capacity change from 0 to 256 [ 131.201030][ T4900] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 132.324424][ T23] usb 3-1: device descriptor read/all, error -71 [ 132.490194][ T4917] loop3: detected capacity change from 0 to 256 [ 132.549993][ T4917] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.590431][ T4919] device syzkaller0 entered promiscuous mode [ 132.731166][ T4917] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 133.029700][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036571][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.934202][ T4930] loop0: detected capacity change from 0 to 512 [ 138.685340][ T4472] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.700795][ T4964] loop1: detected capacity change from 0 to 1024 [ 138.750771][ T4966] loop4: detected capacity change from 0 to 1024 [ 138.771627][ T4472] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.797321][ T4966] hfsplus: unable to parse mount options [ 138.805679][ T4964] hfsplus: unable to parse mount options [ 139.626696][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 139.633690][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 139.788240][ T4966] input: syz0 as /devices/virtual/input/input7 [ 139.849414][ T4979] netlink: 'syz.4.160': attribute type 4 has an invalid length. [ 139.900410][ T4979] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.160'. [ 139.911282][ T4978] loop3: detected capacity change from 0 to 512 [ 139.931414][ T4981] Zero length message leads to an empty skb [ 139.960808][ T4978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.962241][ T4974] fido_id[4974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.044900][ T4978] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.074708][ T4978] EXT4-fs (loop3): 1 truncate cleaned up [ 140.082089][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 140.467942][ T4472] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.521977][ T5000] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 140.744500][ T4472] usb 5-1: Using ep0 maxpacket: 16 [ 140.924715][ T4472] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.017324][ T4472] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.315337][ T4472] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.402000][ T4472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.412142][ T4472] usb 5-1: Product: syz [ 141.422261][ T4472] usb 5-1: Manufacturer: syz [ 141.430858][ T4472] usb 5-1: SerialNumber: syz [ 141.606391][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 141.679096][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 141.685569][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 141.736034][ T5017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.766822][ T5018] bond1: (slave ip6gretap1): making interface the new active one [ 141.777984][ T5018] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 141.787882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 141.797898][ T4472] usb 5-1: 0:2 : does not exist [ 142.457333][ T4472] usb 5-1: USB disconnect, device number 2 [ 142.641465][ T5029] loop3: detected capacity change from 0 to 1024 [ 144.400219][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 144.440185][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.481018][ T5038] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 144.492945][ T5029] EXT4-fs (loop3): Ignoring removed orlov option [ 144.519772][ T5029] EXT4-fs (loop3): Ignoring removed bh option [ 144.660472][ T5029] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 144.683321][ T5038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.730524][ T5038] bond1: (slave vlan2): making interface the new active one [ 144.742357][ T5038] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 144.753518][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 144.782436][ T5038] syz.1.179 (5038) used greatest stack depth: 20368 bytes left [ 145.533997][ T5047] loop2: detected capacity change from 0 to 512 [ 145.625958][ T5052] loop4: detected capacity change from 0 to 512 [ 145.673129][ T5050] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 145.683427][ T5050] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 145.789970][ T5057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 145.841990][ T5047] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.181: inode has both inline data and extents flags [ 146.305150][ T5047] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.181: couldn't read orphan inode 15 (err -117) [ 146.400459][ T5052] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 146.447642][ T5047] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.516600][ T5052] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.599882][ T5063] binder_alloc: 5062: pid 5062 spamming oneway? 2 buffers allocated for a total size of 5120 [ 146.665134][ T5063] binder_alloc: 5062: pid 5062 spamming oneway? 3 buffers allocated for a total size of 5128 [ 147.008438][ T5074] IPVS: length: 218 != 24 [ 149.927376][ T5101] loop1: detected capacity change from 0 to 65536 [ 151.860547][ T5101] XFS (loop1): Mounting V5 Filesystem [ 152.236352][ T5135] loop3: detected capacity change from 0 to 164 [ 153.047628][ T5101] XFS (loop1): Ending clean mount [ 153.066355][ T5101] XFS (loop1): Quotacheck needed: Please wait. [ 153.223506][ T5140] loop2: detected capacity change from 0 to 2048 [ 153.362819][ T5140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.019283][ T5101] XFS (loop1): Quotacheck: Done. [ 154.092479][ T4185] XFS (loop1): Unmounting Filesystem [ 155.683194][ T5137] loop0: detected capacity change from 0 to 128 [ 157.518696][ T5172] device syzkaller0 entered promiscuous mode [ 159.493914][ T5189] device syzkaller0 entered promiscuous mode [ 160.994183][ T5200] loop4: detected capacity change from 0 to 4096 [ 161.056850][ T5200] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 161.084624][ T5208] device syzkaller0 entered promiscuous mode [ 161.153376][ T5200] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 162.041548][ T5218] loop1: detected capacity change from 0 to 32768 [ 162.239160][ T5218] JBD2: Ignoring recovery information on journal [ 162.248090][ T5218] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 162.257469][ T5218] JBD2: bad block at offset 32 [ 162.330595][ T5218] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 162.425768][ T5218] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 162.447809][ T5218] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 162.457798][ T5218] OCFS2: File system is now read-only. [ 162.463457][ T5218] (syz.1.224,5218,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 162.472026][ T5218] (syz.1.224,5218,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 162.480316][ T5218] (syz.1.224,5218,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 162.488758][ T5218] (syz.1.224,5218,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 162.497648][ T5218] (syz.1.224,5218,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 162.506393][ T5218] (syz.1.224,5218,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 162.516138][ T5218] (syz.1.224,5218,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 162.525842][ T5218] (syz.1.224,5218,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 162.534756][ T5218] (syz.1.224,5218,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 162.544009][ T5218] (syz.1.224,5218,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 162.553290][ T5218] (syz.1.224,5218,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 162.562576][ T5218] (syz.1.224,5218,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 162.570835][ T5218] (syz.1.224,5218,0):ocfs2_write_begin_nolock:1745 ERROR: status = -30 [ 162.579280][ T5218] (syz.1.224,5218,0):ocfs2_write_begin:1908 ERROR: status = -30 [ 162.615322][ T5229] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 162.659071][ T5228] device syzkaller0 entered promiscuous mode [ 162.682615][ T5229] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 162.754927][ T5229] (syz.1.224,5229,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 162.784475][ T5229] (syz.1.224,5229,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 162.969600][ T5229] (syz.1.224,5229,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 163.034489][ T5229] (syz.1.224,5229,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 163.335137][ T5238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 164.462397][ T5229] (syz.1.224,5229,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 164.532170][ T5229] (syz.1.224,5229,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 164.627921][ T5229] (syz.1.224,5229,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 164.679544][ T5229] (syz.1.224,5229,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 164.752055][ T5229] (syz.1.224,5229,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 164.789101][ T5242] device syzkaller0 entered promiscuous mode [ 164.790810][ T5229] (syz.1.224,5229,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 164.834425][ T5229] (syz.1.224,5229,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 164.861960][ T5229] (syz.1.224,5229,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 164.881251][ T5229] (syz.1.224,5229,1):ocfs2_write_begin_nolock:1745 ERROR: status = -30 [ 166.282679][ T5229] (syz.1.224,5229,0):ocfs2_write_begin:1908 ERROR: status = -30 [ 166.913577][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 168.130011][ T5274] loop2: detected capacity change from 0 to 1024 [ 168.249855][ T5276] 0: reclassify loop, rule prio 0, protocol 700 [ 168.297698][ T5274] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 168.349404][ T5274] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.369349][ T5274] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 168.379765][ T5274] System zones: 0-1, 3-36 [ 168.430550][ T5274] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 169.532499][ T5303] syz.4.246 uses obsolete (PF_INET,SOCK_PACKET) [ 169.669727][ T5304] device syzkaller0 entered promiscuous mode [ 175.264904][ T5359] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.259'. [ 177.907371][ T5379] device syzkaller0 entered promiscuous mode [ 178.137179][ T5385] loop1: detected capacity change from 0 to 128 [ 178.263640][ T5387] device syzkaller0 entered promiscuous mode [ 178.365211][ T5389] device syzkaller0 entered promiscuous mode [ 178.412935][ T5389] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.030029][ T5395] loop3: detected capacity change from 0 to 1024 [ 179.103383][ T5395] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 179.155898][ T5395] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.596217][ T5395] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 180.606921][ T5395] System zones: 0-1, 3-36 [ 180.612032][ T5402] device syzkaller0 entered promiscuous mode [ 180.665530][ T5395] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 180.805621][ T5406] binder: BINDER_SET_CONTEXT_MGR already set [ 180.811684][ T5406] binder: 5405:5406 ioctl 4018620d 200000004a80 returned -16 [ 180.863559][ T5409] fscrypt (loop3, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 180.906379][ T5411] tipc: Started in network mode [ 180.912032][ T5411] tipc: Node identity 080211000001, cluster identity 4711 [ 180.945249][ T5411] tipc: Enabled bearer , priority 0 [ 181.012270][ T5411] tipc: Resetting bearer [ 181.022157][ T5414] device syzkaller0 entered promiscuous mode [ 182.029798][ T4241] tipc: Node number set to 134418688 [ 183.751814][ T5429] device syzkaller0 entered promiscuous mode [ 184.777273][ T5461] loop0: detected capacity change from 0 to 256 [ 184.899036][ T5467] tipc: Started in network mode [ 184.904093][ T5467] tipc: Node identity 265080e55a1b, cluster identity 4711 [ 184.942204][ T5467] tipc: Enabled bearer , priority 0 [ 184.967990][ T5469] device syzkaller0 entered promiscuous mode [ 185.007374][ T5461] FAT-fs (loop0): Directory bread(block 64) failed [ 185.052899][ T5461] FAT-fs (loop0): Directory bread(block 65) failed [ 185.065864][ T5461] FAT-fs (loop0): Directory bread(block 66) failed [ 185.072532][ T5461] FAT-fs (loop0): Directory bread(block 67) failed [ 185.072647][ T5467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 185.114410][ T5461] FAT-fs (loop0): Directory bread(block 68) failed [ 185.124648][ T5461] FAT-fs (loop0): Directory bread(block 69) failed [ 185.146718][ T5461] FAT-fs (loop0): Directory bread(block 70) failed [ 185.197820][ T5467] tipc: Resetting bearer [ 185.205428][ T5461] FAT-fs (loop0): Directory bread(block 71) failed [ 185.218007][ T5461] FAT-fs (loop0): Directory bread(block 72) failed [ 185.233224][ T5466] tipc: Resetting bearer [ 185.249299][ T5461] FAT-fs (loop0): Directory bread(block 73) failed [ 185.335537][ T5466] tipc: Disabling bearer [ 187.173532][ T5485] program syz.2.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.332274][ T5491] loop0: detected capacity change from 0 to 1024 [ 188.306705][ T5491] EXT4-fs (loop0): Ignoring removed orlov option [ 188.327020][ T5491] EXT4-fs (loop0): Ignoring removed bh option [ 188.416307][ T5496] tipc: Enabled bearer , priority 10 [ 188.425258][ T5496] device syzkaller0 entered promiscuous mode [ 188.456451][ T5496] tipc: Resetting bearer [ 188.468090][ T5495] tipc: Resetting bearer [ 188.493281][ T5495] tipc: Disabling bearer [ 188.505358][ T5491] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 192.234032][ T4799] Bluetooth: hci1: command 0x0406 tx timeout [ 193.395450][ T4799] Bluetooth: hci0: command 0x0406 tx timeout [ 193.401670][ T4799] Bluetooth: hci3: command 0x0406 tx timeout [ 193.409794][ T4799] Bluetooth: hci4: command 0x0406 tx timeout [ 193.416076][ T4799] Bluetooth: hci2: command 0x0406 tx timeout [ 193.469253][ T5532] device syzkaller0 entered promiscuous mode [ 193.507793][ T5538] tipc: Enabling of bearer rejected, already enabled [ 194.111315][ T5542] device team0 entered promiscuous mode [ 194.182054][ T5542] device team_slave_0 entered promiscuous mode [ 194.292784][ T5542] device team_slave_1 entered promiscuous mode [ 194.402244][ T5542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.412769][ T5542] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 194.470783][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477299][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.529542][ T5551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 194.539319][ T5543] bridge0: port 3(vlan2) entered blocking state [ 194.551744][ T5543] bridge0: port 3(vlan2) entered disabled state [ 194.565782][ T5543] device vlan2 entered promiscuous mode [ 194.572087][ T5543] device bond0 entered promiscuous mode [ 194.582852][ T5543] device bond_slave_0 entered promiscuous mode [ 194.589606][ T5543] device bond_slave_1 entered promiscuous mode [ 194.612688][ T5543] device macvlan2 entered promiscuous mode [ 199.186770][ T5596] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.322'. [ 199.388886][ T5606] program syz.4.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.658845][ T5613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.327'. [ 201.355708][ T5623] loop2: detected capacity change from 0 to 64 [ 202.077069][ T5623] attempt to access beyond end of device [ 202.077069][ T5623] loop2: rw=2049, want=162, limit=64 [ 202.089162][ T5623] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 202.098435][ T5623] attempt to access beyond end of device [ 202.098435][ T5623] loop2: rw=2049, want=163, limit=64 [ 202.109737][ T5623] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 202.118820][ T5623] attempt to access beyond end of device [ 202.118820][ T5623] loop2: rw=2049, want=164, limit=64 [ 202.130215][ T5623] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 202.139452][ T5623] attempt to access beyond end of device [ 202.139452][ T5623] loop2: rw=2049, want=168, limit=64 [ 202.156434][ T5623] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 202.166519][ T5623] attempt to access beyond end of device [ 202.166519][ T5623] loop2: rw=2049, want=170, limit=64 [ 202.178426][ T5623] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 202.187595][ T5623] attempt to access beyond end of device [ 202.187595][ T5623] loop2: rw=2049, want=172, limit=64 [ 202.462083][ T5623] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 202.673149][ T5623] attempt to access beyond end of device [ 202.673149][ T5623] loop2: rw=2049, want=173, limit=64 [ 204.287562][ T5623] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 206.865560][ T5662] tipc: Started in network mode [ 206.870647][ T5662] tipc: Node identity 0e91001b7422, cluster identity 4711 [ 206.904431][ T5662] tipc: Enabled bearer , priority 0 [ 206.924744][ T5662] device syzkaller0 entered promiscuous mode [ 207.049638][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 207.090475][ T5662] tipc: Resetting bearer [ 207.358330][ T5661] tipc: Resetting bearer [ 207.622390][ T5661] tipc: Disabling bearer [ 209.029203][ T5675] device syzkaller0 entered promiscuous mode [ 209.091820][ T5694] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 209.392255][ T5692] loop1: detected capacity change from 0 to 64 [ 209.897501][ T5692] attempt to access beyond end of device [ 209.897501][ T5692] loop1: rw=2049, want=162, limit=64 [ 209.910930][ T5692] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 209.921412][ T5692] attempt to access beyond end of device [ 209.921412][ T5692] loop1: rw=2049, want=163, limit=64 [ 209.934284][ T5692] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 209.943743][ T5692] attempt to access beyond end of device [ 209.943743][ T5692] loop1: rw=2049, want=164, limit=64 [ 209.955528][ T5692] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 209.964754][ T5692] attempt to access beyond end of device [ 209.964754][ T5692] loop1: rw=2049, want=168, limit=64 [ 209.976176][ T5692] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 209.985538][ T5692] attempt to access beyond end of device [ 209.985538][ T5692] loop1: rw=2049, want=170, limit=64 [ 209.997348][ T5692] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 210.006530][ T5692] attempt to access beyond end of device [ 210.006530][ T5692] loop1: rw=2049, want=172, limit=64 [ 210.017871][ T5692] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 210.027147][ T5692] attempt to access beyond end of device [ 210.027147][ T5692] loop1: rw=2049, want=173, limit=64 [ 210.038927][ T5692] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 210.758576][ T5703] tipc: Started in network mode [ 210.763826][ T5703] tipc: Node identity 12f43692428d, cluster identity 4711 [ 210.771473][ T5703] tipc: Enabled bearer , priority 0 [ 210.780851][ T5703] device syzkaller0 entered promiscuous mode [ 210.827233][ T5703] tipc: Resetting bearer [ 210.842755][ T5702] tipc: Resetting bearer [ 210.901304][ T5702] tipc: Disabling bearer [ 211.215755][ T5712] device syzkaller0 entered promiscuous mode [ 211.274340][ T4774] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.103629][ T5731] "syz.1.367" (5731) uses obsolete ecb(arc4) skcipher [ 216.659746][ T5761] loop4: detected capacity change from 0 to 64 [ 218.154094][ T5761] attempt to access beyond end of device [ 218.154094][ T5761] loop4: rw=2049, want=162, limit=64 [ 218.165422][ T5761] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 218.174948][ T5761] attempt to access beyond end of device [ 218.174948][ T5761] loop4: rw=2049, want=163, limit=64 [ 218.186295][ T5761] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 218.195610][ T5761] attempt to access beyond end of device [ 218.195610][ T5761] loop4: rw=2049, want=164, limit=64 [ 218.206754][ T5761] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 218.215936][ T5761] attempt to access beyond end of device [ 218.215936][ T5761] loop4: rw=2049, want=168, limit=64 [ 218.227349][ T5761] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 218.236607][ T5761] attempt to access beyond end of device [ 218.236607][ T5761] loop4: rw=2049, want=170, limit=64 [ 218.247834][ T5761] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 218.257178][ T5761] attempt to access beyond end of device [ 218.257178][ T5761] loop4: rw=2049, want=172, limit=64 [ 218.268494][ T5761] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 218.532897][ T5761] attempt to access beyond end of device [ 218.532897][ T5761] loop4: rw=2049, want=173, limit=64 [ 218.651440][ T5761] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 219.033587][ T4774] usb 1-1: unable to read config index 0 descriptor/start: -110 [ 219.042922][ T4774] usb 1-1: can't read configurations, error -110 [ 219.054945][ T5764] device syzkaller0 entered promiscuous mode [ 219.224422][ T4774] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.418554][ T4774] usb 1-1: device descriptor read/64, error -32 [ 220.233355][ T4774] usb usb1-port1: attempt power cycle [ 220.313506][ T5770] device syzkaller0 entered promiscuous mode [ 222.164274][ T4774] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.519678][ T5794] tipc: Enabled bearer , priority 0 [ 222.554394][ T4774] usb 1-1: device descriptor read/8, error -32 [ 222.593319][ T5791] device syzkaller0 entered promiscuous mode [ 222.698662][ T5796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.773696][ T5791] tipc: Resetting bearer [ 222.822128][ T5790] tipc: Resetting bearer [ 222.906599][ T5790] tipc: Disabling bearer [ 223.190825][ T5805] device syzkaller0 entered promiscuous mode [ 226.190585][ T5828] tipc: Enabling of bearer rejected, already enabled [ 226.484454][ T5838] device syzkaller0 entered promiscuous mode [ 227.147076][ T5853] loop0: detected capacity change from 0 to 4096 [ 227.316384][ T5859] loop3: detected capacity change from 0 to 256 [ 227.338043][ T5861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.352821][ T5859] exfat: Bad value for 'uid' [ 229.547598][ T26] audit: type=1800 audit(1770039137.029:4): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.390" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 229.937203][ T5883] device syzkaller0 entered promiscuous mode [ 230.045369][ T5883] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 230.182724][ T5892] loop4: detected capacity change from 0 to 256 [ 230.285078][ T5895] tipc: Enabled bearer , priority 0 [ 230.295154][ T5892] exfat: Deprecated parameter 'namecase' [ 230.301143][ T5892] exfat: Deprecated parameter 'utf8' [ 230.312183][ T5895] device syzkaller0 entered promiscuous mode [ 230.327741][ T5892] exfat: Unknown parameter 'sys_tz' [ 230.525256][ T5895] tipc: Resetting bearer [ 231.130706][ T5893] tipc: Resetting bearer [ 231.177794][ T5893] tipc: Disabling bearer [ 231.266859][ T5910] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 231.356784][ T5912] device syzkaller0 entered promiscuous mode [ 236.176529][ T5937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.571846][ T5939] bond1: (slave ip6gretap1): making interface the new active one [ 236.725398][ T5939] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 236.921640][ T5947] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.416'. [ 236.951663][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 239.366296][ T5959] tipc: Enabled bearer , priority 0 [ 239.416544][ T5959] device syzkaller0 entered promiscuous mode [ 239.507307][ T5959] tipc: Resetting bearer [ 239.607873][ T5955] tipc: Resetting bearer [ 239.719571][ T5955] tipc: Disabling bearer [ 239.815263][ T5973] loop0: detected capacity change from 0 to 4096 [ 241.057974][ T5985] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.166280][ T5987] loop3: detected capacity change from 0 to 8 [ 241.194509][ T26] audit: type=1800 audit(1770039148.649:5): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.425" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 242.123799][ T5987] SQUASHFS error: Failed to read block 0x62: -5 [ 242.837935][ T5987] squashfs image failed sanity check [ 246.975470][ T5999] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.431'. [ 249.912559][ T6032] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.095775][ T6038] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.442'. [ 252.773563][ T6050] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.446'. [ 253.786854][ T6056] ================================================================== [ 253.796011][ T6056] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 253.805190][ T6056] Read of size 2 at addr ffff88805f02e1fb by task syz.0.448/6056 [ 253.813049][ T6056] [ 253.815420][ T6056] CPU: 0 PID: 6056 Comm: syz.0.448 Not tainted syzkaller #0 [ 253.822755][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.832873][ T6056] Call Trace: [ 253.836211][ T6056] [ 253.839259][ T6056] dump_stack_lvl+0x188/0x250 [ 253.843979][ T6056] ? show_regs_print_info+0x20/0x20 [ 253.849224][ T6056] ? load_image+0x400/0x400 [ 253.853761][ T6056] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 253.859267][ T6056] ? ieee80211_tx+0x460/0x460 [ 253.864332][ T6056] print_address_description+0x60/0x2d0 [ 253.869932][ T6056] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 253.876404][ T6056] kasan_report+0xdf/0x130 [ 253.880872][ T6056] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 253.887168][ T6056] ieee80211_monitor_select_queue+0x23a/0x240 [ 253.893303][ T6056] ? ieee80211_recalc_smps_work+0x20/0x20 [ 253.899108][ T6056] netdev_core_pick_tx+0x118/0x2e0 [ 253.904345][ T6056] __dev_queue_xmit+0x756/0x2fd0 [ 253.909422][ T6056] ? __might_fault+0xb7/0x110 [ 253.914349][ T6056] ? dev_queue_xmit+0x20/0x20 [ 253.919068][ T6056] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 253.924854][ T6056] ? packet_cached_dev_get+0x270/0x270 [ 253.930528][ T6056] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 253.936577][ T6056] packet_sendmsg+0x3dba/0x5060 [ 253.941604][ T6056] ? __might_sleep+0xf0/0xf0 [ 253.946255][ T6056] ? aa_sk_perm+0x7dc/0x910 [ 253.950816][ T6056] ? packet_getsockopt+0x9a0/0x9a0 [ 253.956175][ T6056] ? aa_sock_msg_perm+0x94/0x150 [ 253.961247][ T6056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.966576][ T6056] ? security_socket_sendmsg+0x7c/0xa0 [ 253.972182][ T6056] ? packet_getsockopt+0x9a0/0x9a0 [ 253.977363][ T6056] ____sys_sendmsg+0x5b7/0x8f0 [ 253.982457][ T6056] ? __sys_sendmsg_sock+0x30/0x30 [ 253.987625][ T6056] ? import_iovec+0x6f/0xa0 [ 253.992205][ T6056] ___sys_sendmsg+0x236/0x2e0 [ 253.996953][ T6056] ? __sys_sendmsg+0x2a0/0x2a0 [ 254.001805][ T6056] __se_sys_sendmsg+0x1af/0x290 [ 254.006712][ T6056] ? __x64_sys_sendmsg+0x80/0x80 [ 254.011694][ T6056] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.017949][ T6056] ? lockdep_hardirqs_on+0x94/0x140 [ 254.023219][ T6056] do_syscall_64+0x4c/0xa0 [ 254.027686][ T6056] ? clear_bhb_loop+0x30/0x80 [ 254.032609][ T6056] ? clear_bhb_loop+0x30/0x80 [ 254.037443][ T6056] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.043396][ T6056] RIP: 0033:0x7f796f65aeb9 [ 254.047959][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.067639][ T6056] RSP: 002b:00007f796d8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.076195][ T6056] RAX: ffffffffffffffda RBX: 00007f796f8d5fa0 RCX: 00007f796f65aeb9 [ 254.084330][ T6056] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000005 [ 254.092346][ T6056] RBP: 00007f796f6c8c1f R08: 0000000000000000 R09: 0000000000000000 [ 254.100359][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.108467][ T6056] R13: 00007f796f8d6038 R14: 00007f796f8d5fa0 R15: 00007ffcdf757018 [ 254.116510][ T6056] [ 254.119566][ T6056] [ 254.121922][ T6056] Allocated by task 4242: [ 254.126272][ T6056] __kasan_kmalloc+0xb5/0xf0 [ 254.130911][ T6056] __ipv6_dev_mc_inc+0x3fa/0xa90 [ 254.135943][ T6056] addrconf_dad_work+0x3d1/0x1540 [ 254.141030][ T6056] process_one_work+0x85f/0x1010 [ 254.146035][ T6056] worker_thread+0xaa6/0x1290 [ 254.151035][ T6056] kthread+0x436/0x520 [ 254.155169][ T6056] ret_from_fork+0x1f/0x30 [ 254.159643][ T6056] [ 254.161995][ T6056] The buggy address belongs to the object at ffff88805f02e000 [ 254.161995][ T6056] which belongs to the cache kmalloc-512 of size 512 [ 254.176265][ T6056] The buggy address is located 507 bytes inside of [ 254.176265][ T6056] 512-byte region [ffff88805f02e000, ffff88805f02e200) [ 254.190195][ T6056] The buggy address belongs to the page: [ 254.195881][ T6056] page:ffffea00017c0b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f02c [ 254.206372][ T6056] head:ffffea00017c0b00 order:2 compound_mapcount:0 compound_pincount:0 [ 254.214743][ T6056] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 254.222900][ T6056] raw: 00fff00000010200 ffffea00017cb800 0000000400000004 ffff888016c41c80 [ 254.231534][ T6056] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 254.240537][ T6056] page dumped because: kasan: bad access detected [ 254.247344][ T6056] page_owner tracks the page as allocated [ 254.253207][ T6056] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 73958823824, free_ts 24385963559 [ 254.273794][ T6056] get_page_from_freelist+0x1bbd/0x1ca0 [ 254.279586][ T6056] __alloc_pages+0x1ee/0x480 [ 254.284219][ T6056] new_slab+0xc0/0x4b0 [ 254.288333][ T6056] ___slab_alloc+0x80a/0xdd0 [ 254.292993][ T6056] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 254.298917][ T6056] pskb_expand_head+0x127/0x10f0 [ 254.303890][ T6056] netlink_trim+0x180/0x220 [ 254.308426][ T6056] netlink_broadcast_filtered+0x7c/0x1170 [ 254.314180][ T6056] nlmsg_notify+0xec/0x1a0 [ 254.318626][ T6056] fib_table_insert+0xd36/0x1bb0 [ 254.323639][ T6056] fib_magic+0x2e1/0x3c0 [ 254.328009][ T6056] fib_add_ifaddr+0x140/0x5e0 [ 254.332710][ T6056] fib_inetaddr_event+0x13c/0x1c0 [ 254.337774][ T6056] blocking_notifier_call_chain+0x103/0x1b0 [ 254.343703][ T6056] __inet_insert_ifa+0x9f7/0xbe0 [ 254.348676][ T6056] inet_rtm_newaddr+0x99a/0x1890 [ 254.353651][ T6056] page last free stack trace: [ 254.358342][ T6056] free_unref_page_prepare+0x637/0x6c0 [ 254.363943][ T6056] free_unref_page+0x8f/0x2a0 [ 254.368649][ T6056] free_contig_range+0x96/0xf0 [ 254.373453][ T6056] destroy_args+0xf0/0xa00 [ 254.377902][ T6056] debug_vm_pgtable+0x321/0x380 [ 254.383047][ T6056] do_one_initcall+0x272/0x730 [ 254.387850][ T6056] do_initcall_level+0x137/0x1f0 [ 254.393006][ T6056] do_initcalls+0x4b/0x90 [ 254.397373][ T6056] kernel_init_freeable+0x3e9/0x570 [ 254.402597][ T6056] kernel_init+0x19/0x1b0 [ 254.406989][ T6056] ret_from_fork+0x1f/0x30 [ 254.411528][ T6056] [ 254.413864][ T6056] Memory state around the buggy address: [ 254.419768][ T6056] ffff88805f02e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.428291][ T6056] ffff88805f02e100: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 254.436375][ T6056] >ffff88805f02e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.444456][ T6056] ^ [ 254.452622][ T6056] ffff88805f02e200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.460799][ T6056] ffff88805f02e280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.469084][ T6056] ================================================================== [ 254.477168][ T6056] Disabling lock debugging due to kernel taint [ 254.483634][ T6056] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.490955][ T6056] CPU: 0 PID: 6056 Comm: syz.0.448 Tainted: G B syzkaller #0 [ 254.500038][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.510321][ T6056] Call Trace: [ 254.513744][ T6056] [ 254.516847][ T6056] dump_stack_lvl+0x188/0x250 [ 254.521777][ T6056] ? show_regs_print_info+0x20/0x20 [ 254.527141][ T6056] ? load_image+0x400/0x400 [ 254.532446][ T6056] panic+0x2e5/0x810 [ 254.536401][ T6056] ? bpf_jit_dump+0xd0/0xd0 [ 254.541081][ T6056] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 254.547118][ T6056] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 254.553323][ T6056] ? _raw_spin_unlock+0x40/0x40 [ 254.558304][ T6056] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 254.564597][ T6056] check_panic_on_warn+0x80/0xa0 [ 254.569577][ T6056] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 254.575866][ T6056] end_report+0x6d/0xf0 [ 254.580074][ T6056] kasan_report+0x102/0x130 [ 254.584709][ T6056] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 254.591080][ T6056] ieee80211_monitor_select_queue+0x23a/0x240 [ 254.597197][ T6056] ? ieee80211_recalc_smps_work+0x20/0x20 [ 254.602969][ T6056] netdev_core_pick_tx+0x118/0x2e0 [ 254.608320][ T6056] __dev_queue_xmit+0x756/0x2fd0 [ 254.613734][ T6056] ? __might_fault+0xb7/0x110 [ 254.618555][ T6056] ? dev_queue_xmit+0x20/0x20 [ 254.623272][ T6056] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 254.628886][ T6056] ? packet_cached_dev_get+0x270/0x270 [ 254.634432][ T6056] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 254.640550][ T6056] packet_sendmsg+0x3dba/0x5060 [ 254.645680][ T6056] ? __might_sleep+0xf0/0xf0 [ 254.650339][ T6056] ? aa_sk_perm+0x7dc/0x910 [ 254.654902][ T6056] ? packet_getsockopt+0x9a0/0x9a0 [ 254.660071][ T6056] ? aa_sock_msg_perm+0x94/0x150 [ 254.665644][ T6056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 254.671172][ T6056] ? security_socket_sendmsg+0x7c/0xa0 [ 254.676891][ T6056] ? packet_getsockopt+0x9a0/0x9a0 [ 254.682324][ T6056] ____sys_sendmsg+0x5b7/0x8f0 [ 254.687145][ T6056] ? __sys_sendmsg_sock+0x30/0x30 [ 254.692493][ T6056] ? import_iovec+0x6f/0xa0 [ 254.697225][ T6056] ___sys_sendmsg+0x236/0x2e0 [ 254.701949][ T6056] ? __sys_sendmsg+0x2a0/0x2a0 [ 254.707158][ T6056] __se_sys_sendmsg+0x1af/0x290 [ 254.712082][ T6056] ? __x64_sys_sendmsg+0x80/0x80 [ 254.717327][ T6056] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.723372][ T6056] ? lockdep_hardirqs_on+0x94/0x140 [ 254.728612][ T6056] do_syscall_64+0x4c/0xa0 [ 254.733154][ T6056] ? clear_bhb_loop+0x30/0x80 [ 254.737959][ T6056] ? clear_bhb_loop+0x30/0x80 [ 254.742777][ T6056] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.748827][ T6056] RIP: 0033:0x7f796f65aeb9 [ 254.753297][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.773326][ T6056] RSP: 002b:00007f796d8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.781890][ T6056] RAX: ffffffffffffffda RBX: 00007f796f8d5fa0 RCX: 00007f796f65aeb9 [ 254.790078][ T6056] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000005 [ 254.798089][ T6056] RBP: 00007f796f6c8c1f R08: 0000000000000000 R09: 0000000000000000 [ 254.806191][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.814467][ T6056] R13: 00007f796f8d6038 R14: 00007f796f8d5fa0 R15: 00007ffcdf757018 [ 254.822505][ T6056] [ 254.825923][ T6056] Kernel Offset: disabled [ 254.830402][ T6056] Rebooting in 86400 seconds..