last executing test programs: 19.804735126s ago: executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f00000056c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) unlink(&(0x7f0000000300)='./file0\x00') 15.822540372s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32], 0x0}, 0x90) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000d06000), 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 14.452510981s ago: executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file3\x00', 0x0, 0x80) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_auto}], [], 0x2c}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) fcntl$setflags(r5, 0x2, 0x0) setsockopt$packet_fanout(r5, 0x107, 0xc, 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x6, 0x12, 0x0, 0x2000e881) 14.359419474s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011d0000080040ef0ed07200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022050000"], 0x0}, 0x0) 11.51750332s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000800), 0xc, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 10.515593174s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) socket$inet_icmp(0x2, 0x2, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x0, 0x2c, &(0x7f0000000600), 0x0, 0x0, 0x0, &(0x7f0000000680), 0x8, 0x33, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xe}}, 0x0}, 0x90) 10.468754315s ago: executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10.277052604s ago: executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000c40)="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", 0x4fc}, {&(0x7f0000000c00)="d5c96f0d0f677bd6b0db9dfe", 0xc}, {&(0x7f0000000b40)="73fd180798d2e36a7c066c2341c8e27025df1a68be45dbb35330f1d4ea0a03eeb26f1c6309f8f04f54e9ff9bfd1a8d5ee63cdf250d4dceb68ef61c30bc90f4266b6e39bdc339b98f097a94b68162f432b89575ceaff2c29be18f9a29fab3b3ee2b8f2973babb680f7144cd92db177bf4594ff6903b961624eea237a7897a7688d3583a67a5f8a63f3fe4262f4f81b59c4bd3346aeb8cbf90d32ae0d2d0d485fe9dc2d201b31a7c6abf9fae983d1dc0d46b9dbea7bcffb570cd5fa4", 0xbb}], 0x3}}], 0x2, 0x0) 9.199077848s ago: executing program 3: socket(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 8.568425616s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, &(0x7f00000001c0)) 8.212482042s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x406340, 0x0) flistxattr(r1, &(0x7f00000002c0)=""/160, 0xa0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = open(0x0, 0x400141042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendfile(r2, r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) userfaultfd(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="005e86"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 7.68301089s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3, {0x8}}}, 0x24}}, 0x0) 7.244907486s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011d0000080040ef0ed07200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022050000"], 0x0}, 0x0) 6.588870468s ago: executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235000800000f300fe095a6520000b8010000000f01d9c402d53b9e0700000026f047ff4d14f30fc775ddb9c5090000b86c000000ba000000000f300f08450f01cb4a0fc72b", 0x4c}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) 6.210080635s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 5.852347357s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getgid() 4.907685791s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYPQX7VOf+lLoH1Ao+RNKIdC+l1JaQpukD31oqyL5KnFdyZaJbSXW5wPH9557r/z9Hgkd6dxz0Q2gY52JiLGI6IqI8xHRn27PpCXW1kv1uEcP70xWSxKVyo0vkkjSbfX/laTLY+nDeiPiH3+L+Hfy47illdW5iUIhv5TWc+X5xVxpZfXC7PzETH4mvzA2Mnx59MropdGhXWvr1b98+sr/3vrr1fd+f+vj8c/P/aeaVl+6b2M7WrHW4nHrTe+pPRd13RGxtJNgz7GutD097U4EAICWVL/j/zQifh0Rj19vdzYAAADAXqj8qS++SSIqAAAAwIGVqV0Dm2Sy6bUAfZHJZLPr1/D+PI5mCsVS+XfTxeWFqfVrZQeiJzM9W8gPpdcKD0RPUq0P19af1i9uqo9ExImIeKn/SK2enSwWptp98gMAAAA6xLFN4/+v+tfH/wAAAMABM9DuBAAAAIA9Z/wPAAAAB1/T8X/Svb+JAAAAAHvh79euVUulfv/rqZsry3PFmxem8qW57PzyZHayuLSYnSkWZ2q/2Te/3f8rFIuLf4iF5du5cr5UzpVWVsfni8sL5fHafb3H8+4TDQAAAPvvxK/ufZRExNofj9RK1aF0Xwtj9bG9zQ7YS5mdHZ7sVR7A/utqdwJA27jAFzqX+Xhgm4H9y5vqOzxtAAAAPA8Gf/FM8//mA+EFZiAPncv8P3Qu8//Qucz/Q4c7vP0hvc12vL/LuQAAAHumr1aSTDadC+yLTCabjTheuy1ATzI9W8gPRcRPIuLD/p7D1fpwu5MGAAAAAAAAAAAAAAAAAAAAAAAAgBdMpZJEBQAAADjQIjKfJemN/Af7z/ZtPj9wKPm6v7aMiFtv3Hj19kS5vDRc3f7lk+3l19LtF9txBgMAAADYrD5Or4/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3PXp4Z7Je9jPugz9HxECj+N3RW1v2Rk9EHH2cRPeGxyUR0bUL8dfuRsTJRvGTaloxkGaxOX4mIo60Of6xXYgPnexetf8Za/T+y8SZ2rLx+687Lc/qwZlm/V/mSf/X1aT/O95ijFP338k1jX834lR34/6nHj95xv73X/9cXW22r/JmxGDDz5/kB7Fy5fnFXGll9cLs/MRMfia/MDIyfHn0yuil0aHc9Gwhn/5tGOP/v3z3u63af7RJ/IFt2n+2xfZ/e//2w59tEf/cbxq//ie3iF997n+bfg5U9w/W19fW1zc6/fYHp7dq/1ST9m/3+p9rsf3nr//3kxYPBQD2QWlldW6iUMgvWbFi5eCtXE/f6Dt+eJs7JgAAYNc9/dLf7kwAAAAAAAAAAAAAAAAAAACgc+3Hj5BtjNfbvqYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzp+wAAAP//hqfSmw==") rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) 4.871695863s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000c3d90000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 4.771929165s ago: executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000c40)="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", 0x4fc}, {&(0x7f0000000c00)="d5c96f0d0f677bd6b0db9dfe", 0xc}, {&(0x7f0000000b40)="73fd180798d2e36a7c066c2341c8e27025df1a68be45dbb35330f1d4ea0a03eeb26f1c6309f8f04f54e9ff9bfd1a8d5ee63cdf250d4dceb68ef61c30bc90f4266b6e39bdc339b98f097a94b68162f432b89575ceaff2c29be18f9a29fab3b3ee2b8f2973babb680f7144cd92db177bf4594ff6903b961624eea237a7897a7688d3583a67a5f8a63f3fe4262f4f81b59c4bd3346aeb8cbf90d32ae0d2d0d485fe9dc2d201b31a7c6abf9fae983d1dc0d46b9dbea7bcffb570cd5fa40c", 0xbc}], 0x3}}], 0x2, 0x0) 4.377147498s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400"], 0x0) 4.329788176s ago: executing program 0: sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e000"], 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.927506135s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, &(0x7f00000001c0)) 2.8399768s ago: executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.656184463s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3, {0x8}}}, 0x24}}, 0x0) 1.36798783s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380), 0x12) close(r0) 1.087069316s ago: executing program 2: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235000800000f300fe095a6520000b8010000000f01d9c402d53b9e0700000026f047ff4d14f30fc775ddb9c5090000b86c000000ba000000000f300f08450f01cb4a0fc72b", 0x4c}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) 431.541046ms ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980)="000000c8320100"/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="8999215850ccc7503f2c42969f37272fac", 0x11}, {&(0x7f00000003c0)="ac", 0x1}], 0x2}], 0x1, 0x0) 130.750478ms ago: executing program 3: bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.686087ms ago: executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) syz_io_uring_complete(0x0) dup(0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100), 0x9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") listxattr(&(0x7f00000001c0)='./file1\x00', 0x0, 0x1e) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}, {@init_itable}, {@sb={'sb', 0x3d, 0x7}}, {@test_dummy_encryption}, {@nojournal_checksum}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xae8}}, {@discard}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") pipe2$watch_queue(&(0x7f0000000040), 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000055c647379cb0114c1475272b8a3ffdc2b6b3302a13f419d051ec5f29408c358576dacfcbf9c5a1da4c46c400003a4e2158a601a715c500"/72, @ANYRES16=r0, @ANYBLOB="010000000000000000001c000000"], 0x18}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xc, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 0s ago: executing program 0: syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. 2024/06/10 00:47:27 fuzzer started 2024/06/10 00:47:28 dialing manager at 10.128.0.169:30026 [ 184.599786][ T5038] cgroup: Unknown subsys name 'net' [ 184.872569][ T5038] cgroup: Unknown subsys name 'rlimit' [ 224.199929][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.206918][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/10 00:48:24 starting 5 executor processes [ 239.144854][ T5041] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 242.927305][ T5064] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.937082][ T5064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.946879][ T5064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.960913][ T5064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.973072][ T5064] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.029890][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.111337][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.131938][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.144461][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.170986][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.247504][ T5069] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 243.269589][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.339376][ T4431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.349296][ T4431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.360564][ T4431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.374853][ T4431] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.411506][ T4431] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 243.424368][ T4431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.555358][ T5064] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.565493][ T5064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.578167][ T5064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.593382][ T5064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.605868][ T5064] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 243.643037][ T5064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.820551][ T5064] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.830338][ T5064] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.840137][ T5064] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.854312][ T5064] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.912797][ T5064] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 243.923239][ T5064] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.389581][ T5063] chnl_net:caif_netlink_parms(): no params data found [ 245.143212][ T5064] Bluetooth: hci0: command tx timeout [ 245.455956][ T5064] Bluetooth: hci1: command tx timeout [ 245.493268][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.501168][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.509145][ T5063] bridge_slave_0: entered allmulticast mode [ 245.518179][ T5063] bridge_slave_0: entered promiscuous mode [ 245.536312][ T5064] Bluetooth: hci2: command tx timeout [ 245.549452][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.557507][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.565342][ T5063] bridge_slave_1: entered allmulticast mode [ 245.574918][ T5063] bridge_slave_1: entered promiscuous mode [ 245.638896][ T5066] chnl_net:caif_netlink_parms(): no params data found [ 245.789768][ T5064] Bluetooth: hci3: command tx timeout [ 245.851179][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 245.950877][ T5063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.004394][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 246.015997][ T5064] Bluetooth: hci4: command tx timeout [ 246.030931][ T5075] chnl_net:caif_netlink_parms(): no params data found [ 246.104975][ T5063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.354264][ T5063] team0: Port device team_slave_0 added [ 246.453149][ T5063] team0: Port device team_slave_1 added [ 246.713921][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.722901][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.750055][ T5063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.854081][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.862849][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.889552][ T5063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.010885][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.018893][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.027066][ T5066] bridge_slave_0: entered allmulticast mode [ 247.036793][ T5066] bridge_slave_0: entered promiscuous mode [ 247.209351][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.220054][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.228127][ T5066] bridge_slave_1: entered allmulticast mode [ 247.233833][ T5064] Bluetooth: hci0: command tx timeout [ 247.237966][ T5066] bridge_slave_1: entered promiscuous mode [ 247.539113][ T5063] hsr_slave_0: entered promiscuous mode [ 247.543424][ T5064] Bluetooth: hci1: command tx timeout [ 247.554254][ T5063] hsr_slave_1: entered promiscuous mode [ 247.565620][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.575998][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.583852][ T5075] bridge_slave_0: entered allmulticast mode [ 247.592949][ T5075] bridge_slave_0: entered promiscuous mode [ 247.632711][ T5064] Bluetooth: hci2: command tx timeout [ 247.679956][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.688184][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.696148][ T5078] bridge_slave_0: entered allmulticast mode [ 247.705591][ T5078] bridge_slave_0: entered promiscuous mode [ 247.765417][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.773842][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.781944][ T5075] bridge_slave_1: entered allmulticast mode [ 247.791409][ T5075] bridge_slave_1: entered promiscuous mode [ 247.813128][ T5066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.856128][ T5064] Bluetooth: hci3: command tx timeout [ 247.862690][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.871026][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.879479][ T5078] bridge_slave_1: entered allmulticast mode [ 247.888940][ T5078] bridge_slave_1: entered promiscuous mode [ 247.999762][ T5066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.053828][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.062069][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.070194][ T5072] bridge_slave_0: entered allmulticast mode [ 248.079582][ T5072] bridge_slave_0: entered promiscuous mode [ 248.105978][ T5064] Bluetooth: hci4: command tx timeout [ 248.252521][ T5066] team0: Port device team_slave_0 added [ 248.260985][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.271116][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.279089][ T5072] bridge_slave_1: entered allmulticast mode [ 248.288453][ T5072] bridge_slave_1: entered promiscuous mode [ 248.348360][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.372489][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.394351][ T5075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.447844][ T5066] team0: Port device team_slave_1 added [ 248.553238][ T5075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.642407][ T5078] team0: Port device team_slave_0 added [ 248.789650][ T5078] team0: Port device team_slave_1 added [ 248.805474][ T5075] team0: Port device team_slave_0 added [ 248.817820][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.825026][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.851493][ T5066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.891621][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.939246][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.947027][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.975013][ T5066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.996534][ T5075] team0: Port device team_slave_1 added [ 249.048806][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.214140][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.221759][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.248318][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.315135][ T5064] Bluetooth: hci0: command tx timeout [ 249.408942][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.416414][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.443338][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.531045][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.538493][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.565027][ T5075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.602304][ T5072] team0: Port device team_slave_0 added [ 249.624972][ T5064] Bluetooth: hci1: command tx timeout [ 249.698155][ T5064] Bluetooth: hci2: command tx timeout [ 249.700771][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.711145][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.737691][ T5075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.791320][ T5072] team0: Port device team_slave_1 added [ 249.825870][ T5066] hsr_slave_0: entered promiscuous mode [ 249.844798][ T5066] hsr_slave_1: entered promiscuous mode [ 249.853463][ T5066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.861682][ T5066] Cannot create hsr debugfs directory [ 249.882909][ T5078] hsr_slave_0: entered promiscuous mode [ 249.893496][ T5078] hsr_slave_1: entered promiscuous mode [ 249.902431][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.910555][ T5078] Cannot create hsr debugfs directory [ 249.935986][ T5064] Bluetooth: hci3: command tx timeout [ 250.117579][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.124796][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.153141][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.185345][ T5064] Bluetooth: hci4: command tx timeout [ 250.239318][ T5075] hsr_slave_0: entered promiscuous mode [ 250.253133][ T5075] hsr_slave_1: entered promiscuous mode [ 250.261959][ T5075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.269879][ T5075] Cannot create hsr debugfs directory [ 250.350752][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.358171][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.384965][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.824868][ T5063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.860640][ T5072] hsr_slave_0: entered promiscuous mode [ 250.871263][ T5072] hsr_slave_1: entered promiscuous mode [ 250.881275][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.889497][ T5072] Cannot create hsr debugfs directory [ 250.945512][ T5063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.969960][ T5063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.100841][ T5063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.382325][ T5064] Bluetooth: hci0: command tx timeout [ 251.700837][ T5064] Bluetooth: hci1: command tx timeout [ 251.776000][ T5064] Bluetooth: hci2: command tx timeout [ 251.943470][ T5078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.975579][ T5078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.016567][ T5064] Bluetooth: hci3: command tx timeout [ 252.062716][ T5078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.102536][ T5078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.301245][ T5064] Bluetooth: hci4: command tx timeout [ 252.303450][ T5066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.377129][ T5066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.413033][ T5066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.452038][ T5066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.522963][ T5075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.718499][ T5075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.745274][ T5072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.822891][ T5075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.849580][ T5072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.892023][ T5072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.921193][ T5072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.947517][ T5075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.344873][ T5063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.612105][ T5063] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.720053][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.728073][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.810083][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.818052][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.074152][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.321811][ T5066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.351627][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.456210][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.463962][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.570908][ T5066] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.598425][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.606336][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.773908][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.781899][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.801053][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.809282][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.929336][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.239835][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.271826][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.523948][ T5078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.561763][ T5075] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.582017][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.590112][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.624091][ T1792] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.631984][ T1792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.815400][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.823341][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.081612][ T1792] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.089501][ T1792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.297327][ T5072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.188681][ T5063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.985096][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.332147][ T5066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.662972][ T5078] veth0_vlan: entered promiscuous mode [ 258.714445][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.837270][ T5078] veth1_vlan: entered promiscuous mode [ 259.057261][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.128235][ T5066] veth0_vlan: entered promiscuous mode [ 259.394080][ T5078] veth0_macvtap: entered promiscuous mode [ 259.431506][ T5066] veth1_vlan: entered promiscuous mode [ 259.512906][ T5078] veth1_macvtap: entered promiscuous mode [ 259.582438][ T5072] veth0_vlan: entered promiscuous mode [ 259.855175][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.871476][ T5072] veth1_vlan: entered promiscuous mode [ 259.896964][ T5066] veth0_macvtap: entered promiscuous mode [ 260.021235][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.043455][ T5066] veth1_macvtap: entered promiscuous mode [ 260.106830][ T5075] veth0_vlan: entered promiscuous mode [ 260.182762][ T5078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.192756][ T5078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.202058][ T5078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.211359][ T5078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.303191][ T5075] veth1_vlan: entered promiscuous mode [ 260.451631][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.463198][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.479411][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.541270][ T5072] veth0_macvtap: entered promiscuous mode [ 260.670141][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.681227][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.697167][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.770068][ T5072] veth1_macvtap: entered promiscuous mode [ 260.892284][ T5066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.904823][ T5066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.915922][ T5066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.925041][ T5066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.055364][ T5075] veth0_macvtap: entered promiscuous mode [ 261.191239][ T5075] veth1_macvtap: entered promiscuous mode [ 261.212116][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.232261][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.248156][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.260299][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.276852][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.354736][ T5063] veth0_vlan: entered promiscuous mode [ 261.429803][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.443633][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.454446][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.467693][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.478642][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.489785][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.507736][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.564384][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.575808][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.586052][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.596935][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.612935][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.668436][ T5063] veth1_vlan: entered promiscuous mode [ 261.736905][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.749832][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.760873][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.771966][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.782237][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.793277][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.809564][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.913660][ T5072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.923101][ T5072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.932451][ T5072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.944743][ T5072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.077716][ T5075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.088278][ T5075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.098116][ T5075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.107829][ T5075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.301217][ T5063] veth0_macvtap: entered promiscuous mode [ 262.410010][ T5063] veth1_macvtap: entered promiscuous mode [ 262.753144][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.766040][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.779428][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.790543][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.800981][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.811995][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.822370][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.833178][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.849543][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.036863][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.047785][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.061377][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.073622][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.084088][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.094961][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.105216][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.116289][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.132392][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.412200][ T5063] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.422161][ T5063] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.432399][ T5063] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.441868][ T5063] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.186353][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.194509][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.441701][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.451586][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.887861][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.897681][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.108439][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.116817][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.217219][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.225462][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.465201][ T5244] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 270.487745][ T4173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.496190][ T4173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.596321][ T5116] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 270.681912][ T4173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.690945][ T4173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.736238][ T5113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.744489][ T5113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.024889][ T5116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.036368][ T5116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.047708][ T5116] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 271.057312][ T5116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.109576][ T5116] usb 3-1: config 0 descriptor?? [ 271.478090][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.487196][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.747036][ T5116] usbhid 3-1:0.0: can't add hid device: -71 [ 271.753828][ T5116] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 271.887794][ T5256] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 271.926211][ T5116] usb 3-1: USB disconnect, device number 2 [ 271.988906][ T3200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.997326][ T3200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.447449][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.306439][ T5276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.684249][ T5116] IPVS: starting estimator thread 0... [ 275.789470][ T5291] IPVS: using max 240 ests per chain, 12000 per kthread [ 276.048628][ T5297] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 276.300127][ T5116] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 276.716956][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.728929][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.739279][ T5116] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 276.751629][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.819525][ T5116] usb 1-1: config 0 descriptor?? [ 277.379818][ T5116] usbhid 1-1:0.0: can't add hid device: -71 [ 277.386726][ T5116] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 277.488908][ T5306] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 277.525988][ T5116] usb 1-1: USB disconnect, device number 2 [ 277.530215][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.843832][ T5309] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.853748][ T5309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.868823][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.889228][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.897344][ T5309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.283975][ T5324] pimreg12: entered allmulticast mode [ 279.347375][ T5325] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.470221][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.586252][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 282.079539][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.091033][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.101518][ T8] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 282.111004][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.166657][ T8] usb 4-1: config 0 descriptor?? [ 282.806291][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 282.813080][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.886189][ T8] usb 4-1: USB disconnect, device number 2 [ 284.353218][ T5361] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.639242][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.646285][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.189277][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.775915][ C1] hrtimer: interrupt took 278706 ns [ 287.496184][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 287.897207][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.908742][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.928003][ T25] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 287.939487][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.003913][ T25] usb 2-1: config 0 descriptor?? [ 288.365438][ T5395] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.587000][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 288.594039][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 288.702542][ T25] usb 2-1: USB disconnect, device number 2 [ 290.118514][ T5410] ptrace attach of "/root/syz-executor.1 exec"[5072] was attempted by "/root/syz-executor.1 exec"[5410] [ 291.162554][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.172940][ T5421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.658730][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 292.097659][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.112156][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.123326][ T8] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 292.132831][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.165802][ T8] usb 4-1: config 0 descriptor?? [ 293.810752][ T8] usb 4-1: string descriptor 0 read error: -71 [ 293.868699][ T8] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 293.878449][ T8] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 293.886989][ T8] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 293.895556][ T8] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 293.903982][ T8] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 294.138310][ T8] usb 4-1: USB disconnect, device number 3 [ 294.666286][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 295.116466][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.128548][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.139169][ T8] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 295.148649][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.257721][ T8] usb 5-1: config 0 descriptor?? [ 295.835637][ T8] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x0 [ 295.844260][ T8] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x0 [ 295.853242][ T8] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x0 [ 295.864277][ T8] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x0 [ 295.873456][ T8] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x0 [ 295.966648][ T8] hid-multitouch 0003:0EEF:72D0.0002: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0 [ 296.068981][ T5444] loop0: detected capacity change from 0 to 1024 [ 296.157198][ T8] usb 5-1: USB disconnect, device number 2 [ 297.150977][ T5444] EXT4-fs: Ignoring removed orlov option [ 297.187696][ T5444] EXT4-fs (loop0): Test dummy encryption mode enabled [ 297.205001][ T5444] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 297.507515][ T5444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.523230][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.618418][ T5457] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 297.792321][ T5457] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 298.326395][ T5137] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 298.653952][ T5444] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 298.736837][ T5137] usb 2-1: config 0 has no interfaces? [ 298.742733][ T5137] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 298.752336][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.821132][ T5137] usb 2-1: config 0 descriptor?? [ 299.162316][ T5078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.166215][ T780] usb 2-1: USB disconnect, device number 3 [ 301.056843][ T29] audit: type=1800 audit(1717980566.545:2): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 301.386062][ T5137] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 301.796342][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.808191][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.818596][ T5137] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 301.828192][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.903988][ T5137] usb 5-1: config 0 descriptor?? [ 302.228494][ T5489] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.380987][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.507489][ T5137] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0 [ 302.516053][ T5137] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0 [ 302.524052][ T5137] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0 [ 302.532296][ T5137] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0 [ 302.540673][ T5137] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0 [ 302.798786][ T5137] hid-multitouch 0003:0EEF:72D0.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0 [ 302.973103][ T5137] usb 5-1: USB disconnect, device number 3 [ 304.478279][ T5499] loop1: detected capacity change from 0 to 512 [ 304.600899][ T5499] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz-executor.1: corrupted xattr block 255: invalid header [ 304.623212][ T5499] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 304.633329][ T5499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.654755][ T5499] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz-executor.1: corrupted xattr block 255: invalid header [ 304.867522][ T5072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.109549][ T5505] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 305.347041][ T5507] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 305.839963][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 306.226883][ T25] usb 1-1: config 0 has no interfaces? [ 306.232736][ T25] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.248806][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.321292][ T25] usb 1-1: config 0 descriptor?? [ 306.728049][ T5113] usb 1-1: USB disconnect, device number 3 [ 307.517081][ T5113] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 307.660768][ T5521] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.906582][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.916538][ T5113] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 307.928578][ T5113] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 307.940561][ T5113] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 307.950067][ T5113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.037653][ T5519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.461512][ T5116] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 308.876627][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.888099][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.898621][ T5116] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 308.910949][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.994133][ T5116] usb 1-1: config 0 descriptor?? [ 309.116499][ T5113] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 309.183265][ T5113] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input5 [ 309.316353][ T5113] usb 3-1: USB disconnect, device number 3 [ 309.584013][ T5116] hid-multitouch 0003:0EEF:72D0.0004: unknown main item tag 0x0 [ 309.592359][ T5116] hid-multitouch 0003:0EEF:72D0.0004: unknown main item tag 0x0 [ 309.600857][ T5116] hid-multitouch 0003:0EEF:72D0.0004: unknown main item tag 0x0 [ 309.609233][ T5116] hid-multitouch 0003:0EEF:72D0.0004: unknown main item tag 0x0 [ 309.618081][ T5116] hid-multitouch 0003:0EEF:72D0.0004: unknown main item tag 0x0 [ 309.701011][ T5116] hid-multitouch 0003:0EEF:72D0.0004: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0 [ 309.946025][ T5116] usb 1-1: USB disconnect, device number 4 [ 310.689001][ T5535] loop4: detected capacity change from 0 to 512 [ 310.822937][ T5535] ======================================================= [ 310.822937][ T5535] WARNING: The mand mount option has been deprecated and [ 310.822937][ T5535] and is ignored by this kernel. Remove the mand [ 310.822937][ T5535] option from the mount to silence this warning. [ 310.822937][ T5535] ======================================================= [ 310.992911][ T5535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 311.149864][ T5535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.166611][ T5535] ext4 filesystem being mounted at /root/syzkaller-testdir1886050655/syzkaller.sWYd74/23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.240639][ T5542] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 311.806915][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 312.111016][ T5063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.246444][ T25] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 312.257454][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 312.268092][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.416328][ T25] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 312.690945][ T5116] usb 4-1: USB disconnect, device number 4 [ 312.958536][ T5554] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.223661][ T5559] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 313.239675][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.338550][ T5558] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 313.936573][ T5116] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 314.356681][ T5116] usb 5-1: config 0 has no interfaces? [ 314.362560][ T5116] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.372220][ T5116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.479181][ T5116] usb 5-1: config 0 descriptor?? [ 315.018153][ T780] usb 5-1: USB disconnect, device number 4 [ 315.288845][ T5571] ===================================================== [ 315.296468][ T5571] BUG: KMSAN: uninit-value in __bpf_strtoull+0x245/0x5b0 [ 315.303770][ T5571] __bpf_strtoull+0x245/0x5b0 [ 315.308956][ T5571] bpf_strtol+0x7c/0x270 [ 315.313578][ T5571] ___bpf_prog_run+0x13fe/0xe0f0 [ 315.318970][ T5571] __bpf_prog_run96+0xb5/0xe0 [ 315.323903][ T5571] bpf_test_run+0x43e/0xc30 [ 315.328912][ T5571] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 315.334586][ T5571] bpf_prog_test_run+0x6b7/0xad0 [ 315.340035][ T5571] __sys_bpf+0x6aa/0xd90 [ 315.344529][ T5571] __ia32_sys_bpf+0xa0/0xe0 [ 315.349391][ T5571] ia32_sys_call+0xf7e/0x40a0 [ 315.354480][ T5571] __do_fast_syscall_32+0xb4/0x120 [ 315.359983][ T5571] do_fast_syscall_32+0x38/0x80 [ 315.365099][ T5571] do_SYSENTER_32+0x1f/0x30 [ 315.370003][ T5571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.376758][ T5571] [ 315.379211][ T5571] Local variable stack created at: [ 315.384708][ T5571] __bpf_prog_run96+0x45/0xe0 2024/06/10 00:49:40 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 315.389759][ T5571] bpf_test_run+0x43e/0xc30 [ 315.394517][ T5571] [ 315.397100][ T5571] CPU: 0 PID: 5571 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 315.407451][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 315.417815][ T5571] ===================================================== [ 315.424900][ T5571] Disabling lock debugging due to kernel taint [ 315.431426][ T5571] Kernel panic - not syncing: kmsan.panic set ... [ 315.438046][ T5571] CPU: 0 PID: 5571 Comm: syz-executor.3 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 315.449929][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 315.460186][ T5571] Call Trace: [ 315.463613][ T5571] [ 315.466694][ T5571] dump_stack_lvl+0x216/0x2d0 [ 315.471662][ T5571] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 315.477757][ T5571] dump_stack+0x1e/0x30 [ 315.482181][ T5571] panic+0x4e2/0xcd0 [ 315.486339][ T5571] ? kmsan_get_metadata+0xf1/0x1d0 [ 315.491724][ T5571] kmsan_report+0x2d5/0x2e0 [ 315.496480][ T5571] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 315.502553][ T5571] ? __msan_warning+0x95/0x120 [ 315.507569][ T5571] ? __bpf_strtoull+0x245/0x5b0 [ 315.512807][ T5571] ? bpf_strtol+0x7c/0x270 [ 315.517485][ T5571] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 315.522847][ T5571] ? __bpf_prog_run96+0xb5/0xe0 [ 315.527970][ T5571] ? bpf_test_run+0x43e/0xc30 [ 315.532929][ T5571] ? bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 315.538796][ T5571] ? bpf_prog_test_run+0x6b7/0xad0 [ 315.544190][ T5571] ? __sys_bpf+0x6aa/0xd90 [ 315.548849][ T5571] ? __ia32_sys_bpf+0xa0/0xe0 [ 315.553886][ T5571] ? ia32_sys_call+0xf7e/0x40a0 [ 315.559063][ T5571] ? __do_fast_syscall_32+0xb4/0x120 [ 315.564654][ T5571] ? do_fast_syscall_32+0x38/0x80 [ 315.569965][ T5571] ? do_SYSENTER_32+0x1f/0x30 [ 315.574957][ T5571] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.581793][ T5571] ? kmsan_get_metadata+0x146/0x1d0 [ 315.587326][ T5571] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 315.594171][ T5571] ? kmsan_get_metadata+0x146/0x1d0 [ 315.599616][ T5571] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 315.605702][ T5571] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 315.611771][ T5571] ? stack_depot_save_flags+0x66d/0x6e0 [ 315.617575][ T5571] ? kmsan_get_metadata+0x146/0x1d0 [ 315.623028][ T5571] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 315.629608][ T5571] ? kmsan_get_metadata+0x146/0x1d0 [ 315.635074][ T5571] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 315.641173][ T5571] __msan_warning+0x95/0x120 [ 315.645995][ T5571] __bpf_strtoull+0x245/0x5b0 [ 315.650947][ T5571] ? bpf_strtol+0x5c/0x270 [ 315.655623][ T5571] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 315.660983][ T5571] bpf_strtol+0x7c/0x270 [ 315.665524][ T5571] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 315.671580][ T5571] ___bpf_prog_run+0x13fe/0xe0f0 [ 315.676781][ T5571] ? kmsan_get_metadata+0x146/0x1d0 [ 315.682343][ T5571] __bpf_prog_run96+0xb5/0xe0 [ 315.687465][ T5571] ? ktime_get+0x4c7/0x530 [ 315.692181][ T5571] ? __pfx___bpf_prog_run96+0x10/0x10 [ 315.697827][ T5571] bpf_test_run+0x43e/0xc30 [ 315.702621][ T5571] ? bpf_test_run+0x388/0xc30 [ 315.707684][ T5571] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 315.714042][ T5571] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 315.719813][ T5571] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 315.725946][ T5571] bpf_prog_test_run+0x6b7/0xad0 [ 315.731185][ T5571] __sys_bpf+0x6aa/0xd90 [ 315.735709][ T5571] __ia32_sys_bpf+0xa0/0xe0 [ 315.740464][ T5571] ia32_sys_call+0xf7e/0x40a0 [ 315.745447][ T5571] __do_fast_syscall_32+0xb4/0x120 [ 315.750853][ T5571] ? irqentry_exit+0x16/0x60 [ 315.755722][ T5571] do_fast_syscall_32+0x38/0x80 [ 315.760854][ T5571] do_SYSENTER_32+0x1f/0x30 [ 315.765741][ T5571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.772582][ T5571] RIP: 0023:0xf73ca579 [ 315.777154][ T5571] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 315.797230][ T5571] RSP: 002b:00000000f5e535ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 315.805882][ T5571] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 315.814087][ T5571] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.822259][ T5571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.830426][ T5571] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.838590][ T5571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.847125][ T5571] [ 315.850566][ T5571] Kernel Offset: disabled [ 315.854981][ T5571] Rebooting in 86400 seconds..