last executing test programs:

14.898308409s ago: executing program 1 (id=7193):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3761bb37}]}]}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

14.460373536s ago: executing program 1 (id=7196):
syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f0000000340), 0x1, 0x55a8, &(0x7f0000005680)="$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")
open(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c080}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f000001d2c0)=""/102400, 0x19000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)=ANY=[])
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)=<r9=>0x0)
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r9, &(0x7f0000000200)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x17, 0x0, 0x0, 0x0)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})

11.202582135s ago: executing program 4 (id=7204):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000240)=@name, 0x10, 0x0}, 0x0)

8.053050841s ago: executing program 4 (id=7213):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0xff2, &(0x7f00000003c0), &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$P9_RSTATu(r0, 0x0, 0x239)

7.618594948s ago: executing program 0 (id=7215):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0)

7.06066682s ago: executing program 4 (id=7218):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x0, "47c3f0362e9c6ee76a81a8d92dbd0c7af5945a0c68f1c2342003e42820bd8d2d"})
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)

6.649925296s ago: executing program 3 (id=7219):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400500, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619, r2}, 0x38)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
syz_open_procfs$userns(0x0, &(0x7f00000027c0))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_MCE_KILL(0x22, 0xfe8679d1aaaa176c, 0x0)
renameat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000280)='./file0\x00')
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
getegid()
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001a40))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100010000000000000000000200000000000c00f43f000000000000000000607a89842f0000"], 0x30}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x31, 0x1, 0x5b, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x80, 0x5, 0x7}})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f00000000c0)=""/8, &(0x7f0000000180)=0x8)
clock_gettime(0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48)

5.833367789s ago: executing program 4 (id=7220):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dummy0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000000340)=""/185, 0x0})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e)
r2 = dup3(r0, 0xffffffffffffffff, 0x80000)
ioctl$TCXONC(0xffffffffffffffff, 0x80045432, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x3)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x4f)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8400000000010300000000000000000001000000680001802c00018014000300fe8000000000000000000100000000bb14000400200100000000000000000000000000012c00018014000300ff01000000000000ebffffffffffff0014000400fe8000000000000000000000000000310c00028005000100000000000600124000020000f63c703dbd8ba6df36ce0c0114b84c32851c294d3e440be7d91f30b5fdc56753f876745541623225c785560a0edf91c245d2d665b394a6cf6855f816bb9efa310745ae21a9126e6d3fb380e9232f40180d71b4addf3cf82ddddf61ce54f86f"], 0x84}}, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x28)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

5.730924173s ago: executing program 0 (id=7221):
r0 = syz_open_dev$loop(&(0x7f0000000940), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

5.638526486s ago: executing program 1 (id=7222):
shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$key(0xf, 0x3, 0x2)
r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
semtimedop(r3, &(0x7f0000000180)=[{0x3, 0xe, 0x1800}, {0x2, 0x2}, {0x1, 0x6, 0x1000}, {0x0, 0x1ff, 0x1000}, {0x0, 0x5, 0x800}, {0x1, 0x0, 0x1000}], 0x6, 0x0)
shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
semctl$IPC_INFO(0xffffffffffffffff, 0x5, 0x3, &(0x7f0000000140)=""/33)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/72)
clock_gettime(0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, &(0x7f00000002c0), &(0x7f0000000300), 0x8)
r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000380)={{0x1, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x28, 0x9}, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x3000)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)

5.506983141s ago: executing program 0 (id=7223):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8921, &(0x7f0000000180)={'vcan0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3a, r4})
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0029, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=35,size=', @ANYRESOCT=r5])
socket$rds(0x15, 0x5, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87031c0000001f00000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

5.408518766s ago: executing program 3 (id=7224):
recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}}], 0x1, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0)

5.210582963s ago: executing program 3 (id=7225):
r0 = fsmount(0xffffffffffffffff, 0x1, 0xf9)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180), 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0xfffb, 0x7fff, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote}}, 0xba7f}}, &(0x7f0000000540)=0xb0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)

4.665575985s ago: executing program 4 (id=7226):
io_setup(0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(r3, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"])
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.53757684s ago: executing program 1 (id=7227):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r1, 0x400448c9, 0x0)

4.205723793s ago: executing program 1 (id=7228):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0xff2, &(0x7f00000003c0), &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$P9_RSTATu(r0, 0x0, 0x239)

3.375439836s ago: executing program 3 (id=7230):
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xfffffffe)
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000fc0)={0x0, 0x38, 0x1800})
r2 = getpid()
prlimit64(r2, 0x0, &(0x7f00000000c0)={0x2}, &(0x7f0000000100))
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
accept4$unix(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f0000000080)="01", 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

2.534435329s ago: executing program 0 (id=7231):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0)

2.419566574s ago: executing program 1 (id=7232):
syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f0000000340), 0x1, 0x55a8, &(0x7f0000005680)="$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")
open(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c080}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f000001d2c0)=""/102400, 0x19000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)=ANY=[])
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)=<r9=>0x0)
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r9, &(0x7f0000000200)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x17, 0x0, 0x0, 0x0)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'})

2.098591667s ago: executing program 2 (id=7233):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x0, "47c3f0362e9c6ee76a81a8d92dbd0c7af5945a0c68f1c2342003e42820bd8d2d"})

1.187013403s ago: executing program 3 (id=7234):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400500, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619, r2}, 0x38)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
syz_open_procfs$userns(0x0, &(0x7f00000027c0))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_MCE_KILL(0x22, 0xfe8679d1aaaa176c, 0x0)
renameat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000280)='./file0\x00')
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
getegid()
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001a40))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100010000000000000000000200000000000c00f43f000000000000000000607a89842f0000"], 0x30}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x31, 0x1, 0x5b, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x80, 0x5, 0x7}})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f00000000c0)=""/8, &(0x7f0000000180)=0x8)
clock_gettime(0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48)

1.094741327s ago: executing program 2 (id=7235):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x0)

1.01512026s ago: executing program 2 (id=7236):
r0 = syz_io_uring_setup(0x6f52, 0x0, &(0x7f0000000000), &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000280)={0x0}, 0x1)

924.755803ms ago: executing program 0 (id=7237):
shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$key(0xf, 0x3, 0x2)
r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
semtimedop(r3, &(0x7f0000000180)=[{0x3, 0xe, 0x1800}, {0x2, 0x2}, {0x1, 0x6, 0x1000}, {0x0, 0x1ff, 0x1000}, {0x0, 0x5, 0x800}, {0x1, 0x0, 0x1000}], 0x6, 0x0)
shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
semctl$IPC_INFO(0xffffffffffffffff, 0x5, 0x3, &(0x7f0000000140)=""/33)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/72)
clock_gettime(0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, &(0x7f00000002c0), &(0x7f0000000300), 0x8)
r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000380)={{0x1, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x28, 0x9}, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x3000)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)

376.819245ms ago: executing program 2 (id=7238):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r1, 0x400448c9, 0x0)

376.622105ms ago: executing program 2 (id=7239):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}})

318.569127ms ago: executing program 0 (id=7240):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'})

80.173917ms ago: executing program 4 (id=7241):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/profiling', 0x22042, 0x0)
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x15)

248.46µs ago: executing program 2 (id=7242):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x1276, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @buffer={0x201, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r5, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=7243):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r6, &(0x7f0000000040), 0x14)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x1, 0x1}}, 0x2e)
ptrace$getregs(0xc, r0, 0x0, &(0x7f0000000000)=""/67)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)

kernel console output (not intermixed with test programs):

] libceph: connect (1)[c::]:6789 error -101
[ 1256.964463][ T3629] libceph: mon0 (1)[c::]:6789 connect error
[ 1257.192908][ T5251] usb 5-1: USB disconnect, device number 65
[ 1257.232656][ T5251] appletouch 5-1:0.0: input: appletouch disconnected
[ 1257.426833][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6128'.
[ 1257.973452][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6128'.
[ 1258.686471][T25741] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6139'.
[ 1260.465783][T25765] binder: 25764:25765 ioctl c0306201 0 returned -14
[ 1260.554604][T25766] binder: 25764:25766 ioctl c0306201 200003c0 returned -22
[ 1261.391999][T25778] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6151'.
[ 1263.113627][   T26] audit: type=1804 audit(1719873410.169:4813): pid=25820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6162" name="/root/syzkaller.h1GWcA/244/file0" dev="sda1" ino=2034 res=1 errno=0
[ 1264.894783][T25844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6167'.
[ 1264.929449][T25844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6167'.
[ 1264.962926][T25844] netlink: 728 bytes leftover after parsing attributes in process `syz.2.6167'.
[ 1265.504059][T25870] binder: 25869:25870 ioctl c0306201 0 returned -14
[ 1265.583407][T25872] binder: 25869:25872 ioctl c0306201 200003c0 returned -22
[ 1267.699386][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6183'.
[ 1268.062877][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6183'.
[ 1268.228677][T25913] netlink: 728 bytes leftover after parsing attributes in process `syz.4.6183'.
[ 1269.290802][T25925] binder: 25924:25925 ioctl c0306201 0 returned -14
[ 1269.483120][T25928] binder: 25924:25928 ioctl c0306201 200003c0 returned -22
[ 1270.180511][   T26] audit: type=1804 audit(1719873417.229:4814): pid=25945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6194" name="/root/syzkaller.h1GWcA/251/file0" dev="sda1" ino=2044 res=1 errno=0
[ 1270.384897][T25947] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6196'.
[ 1271.025404][T25957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6199'.
[ 1271.071409][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6199'.
[ 1271.124091][T25962] netlink: 728 bytes leftover after parsing attributes in process `syz.3.6199'.
[ 1272.183195][T25975] binder: 25974:25975 ioctl c0306201 0 returned -14
[ 1272.298861][T25977] binder: 25974:25977 ioctl c0306201 200003c0 returned -22
[ 1273.148296][   T26] audit: type=1804 audit(1719873420.149:4815): pid=25992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6210" name="/root/syzkaller.deBL6z/205/file0" dev="sda1" ino=2051 res=1 errno=0
[ 1273.679248][T25994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6211'.
[ 1274.713117][T26022] netlink: 'syz.4.6219': attribute type 9 has an invalid length.
[ 1274.989307][T26029] binder: 26027:26029 ioctl c0306201 0 returned -14
[ 1275.116055][T26038] binder: 26027:26038 ioctl c0306201 200003c0 returned -22
[ 1275.375821][T11506] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1275.867102][   T26] audit: type=1804 audit(1719873422.939:4816): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6226" name="/root/syzkaller.fDHY71/309/file0" dev="sda1" ino=2051 res=1 errno=0
[ 1276.340748][T11506] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1276.360263][T11506] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1276.491335][T11506] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1276.510523][T11506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1276.977312][T11506] usb 3-1: SerialNumber: syz
[ 1277.790607][T11506] usb 3-1: 0:2 : does not exist
[ 1277.796145][T11506] usb 3-1: unit 5 not found!
[ 1278.451115][T11506] usb 3-1: USB disconnect, device number 61
[ 1278.476443][T26086] binder: 26084:26086 ioctl c0306201 0 returned -14
[ 1278.544315][T26090] binder: 26084:26090 ioctl c0306201 200003c0 returned -22
[ 1278.770442][T20313] udevd[20313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1281.797986][  T152] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1282.218437][  T152] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1282.267984][  T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1282.384696][  T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1282.437896][  T152] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1282.516965][   T26] audit: type=1326 audit(1719873429.589:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26141 comm="syz.0.6255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7857775b99 code=0x0
[ 1282.573424][  T152] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1282.577307][T26146] can0: slcan on ptm0.
[ 1282.603572][  T152] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1282.633531][  T152] usb 3-1: Manufacturer: syz
[ 1282.662882][  T152] usb 3-1: config 0 descriptor??
[ 1283.022417][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6256'.
[ 1283.855796][  T152] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[ 1283.863583][  T152] appleir 0003:05AC:8243.0005: No inputs registered, leaving
[ 1283.902569][  T152] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1283.970143][T26139] can0 (unregistered): slcan off ptm0.
[ 1284.939273][T26175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6260'.
[ 1285.033879][ T3555] usb 3-1: USB disconnect, device number 62
[ 1285.070791][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'.
[ 1285.121003][T26175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6260'.
[ 1285.379524][   T26] audit: type=1326 audit(1719873432.459:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1285.407319][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6269'.
[ 1285.433938][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6269'.
[ 1285.444313][   T26] audit: type=1326 audit(1719873432.459:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1286.232366][   T26] audit: type=1326 audit(1719873432.459:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1286.510895][   T26] audit: type=1326 audit(1719873432.459:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1286.587193][T26215] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1286.599783][T26215] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1286.611246][T26215] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1286.633699][   T26] audit: type=1326 audit(1719873432.459:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1287.649220][   T26] audit: type=1326 audit(1719873432.459:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1287.685643][   T26] audit: type=1326 audit(1719873432.459:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1287.817900][   T26] audit: type=1326 audit(1719873432.459:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1287.933746][   T26] audit: type=1326 audit(1719873432.459:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1287.958205][   T26] audit: type=1326 audit(1719873432.459:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1287.980989][   T26] audit: type=1326 audit(1719873432.459:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1288.004525][   T26] audit: type=1326 audit(1719873432.459:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dbf3745d0 code=0x7ffc0000
[ 1288.034689][   T26] audit: type=1326 audit(1719873432.459:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dbf3745d0 code=0x7ffc0000
[ 1288.464201][   T26] audit: type=1326 audit(1719873432.459:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1288.607380][T26233] netlink: 'syz.4.6281': attribute type 10 has an invalid length.
[ 1288.652599][   T26] audit: type=1326 audit(1719873432.459:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26192 comm="syz.1.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x7ffc0000
[ 1288.697960][T26233] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6281'.
[ 1288.740235][T26233] device vlan1 entered promiscuous mode
[ 1288.807515][T26233] team0: Port device vlan1 added
[ 1288.836601][T26238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6283'.
[ 1289.043105][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6285'.
[ 1289.909949][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6285'.
[ 1291.537583][T26287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6300'.
[ 1291.560348][T26287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6300'.
[ 1292.896855][T26305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6308'.
[ 1294.270299][T26335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6312'.
[ 1294.331655][T26335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6312'.
[ 1295.753930][T26364] 9pnet: Could not find request transport: xen
[ 1296.528311][T26376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6327'.
[ 1296.596788][T26376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6327'.
[ 1296.671259][T26382] fuse: Bad value for 'fd'
[ 1297.767616][T26404] binder: 26403:26404 ioctl c018620c 20000000 returned -22
[ 1298.959904][T26426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6344'.
[ 1299.025528][T26426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6344'.
[ 1300.168078][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.174501][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.298621][T26448] binder: 26447:26448 ioctl c018620c 20000000 returned -22
[ 1300.380916][T26451] netlink: 'syz.2.6353': attribute type 10 has an invalid length.
[ 1300.705929][T26451] team0: Port device netdevsim0 added
[ 1300.741354][T26453] netlink: 'syz.2.6353': attribute type 10 has an invalid length.
[ 1301.053780][T26458] Invalid ELF header len 9
[ 1301.507526][T26472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6360'.
[ 1301.773760][T26472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6360'.
[ 1303.236306][T26489] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1303.248733][T26489] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1303.259334][T26489] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1304.685488][T26522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6373'.
[ 1304.719172][T26522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6373'.
[ 1305.280976][T26539] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1305.293533][T26539] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1305.306388][T26539] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1306.958297][T26563] binder: 26561:26563 ioctl 4018620d 0 returned -22
[ 1307.109319][T26563] binder: 26561:26563 ioctl c018620c 20000000 returned -22
[ 1307.122461][T26570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6389'.
[ 1307.214482][T26570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6389'.
[ 1307.561380][T26580] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1307.574103][T26580] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1307.585724][T26580] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1309.234685][T26601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1311.168904][T26620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6403'.
[ 1311.220384][T26620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6403'.
[ 1311.460761][T26631] can0: slcan on ptm0.
[ 1311.905828][   T26] kauditd_printk_skb: 25 callbacks suppressed
[ 1311.905846][   T26] audit: type=1326 audit(1719873458.979:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26639 comm="syz.4.6409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9af75b99 code=0x0
[ 1312.017888][  T152] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1312.288135][T26625] can0 (unregistered): slcan off ptm0.
[ 1313.125568][T26655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6415'.
[ 1313.221529][T26655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6415'.
[ 1314.257963][  T152] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1314.275982][  T152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.290529][  T152] usb 4-1: Product: syz
[ 1314.300121][  T152] usb 4-1: Manufacturer: syz
[ 1314.310080][  T152] usb 4-1: SerialNumber: syz
[ 1314.323332][  T152] usb 4-1: config 0 descriptor??
[ 1314.370027][  T152] ch341 4-1:0.0: ch341-uart converter detected
[ 1314.495810][T26666] loop4: detected capacity change from 0 to 32768
[ 1314.517917][T26666] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.6418 (26666)
[ 1314.569469][T26666] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1314.600121][  T152] usb 4-1: failed to receive control message: -71
[ 1314.602834][T26666] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[ 1314.615661][T26666] BTRFS info (device loop4): using free space tree
[ 1314.626605][  T152] ch341-uart: probe of ttyUSB0 failed with error -71
[ 1314.693719][  T152] usb 4-1: USB disconnect, device number 82
[ 1314.845213][  T152] ch341 4-1:0.0: device disconnected
[ 1315.065723][T26666] BTRFS info (device loop4): enabling ssd optimizations
[ 1315.975229][T26666] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6418'.
[ 1317.871440][T26730] binder: BINDER_SET_CONTEXT_MGR already set
[ 1317.877478][T26730] binder: 26729:26730 ioctl 4018620d 20000100 returned -16
[ 1318.628066][T20024] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1319.757990][ T3293] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1320.219282][T26757] program syz.0.6438 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1320.240770][T26757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1320.253316][T26757] ubi0: attaching mtd0
[ 1320.268278][T26757] ubi0: scanning is finished
[ 1320.273025][T26757] ubi0: empty MTD device detected
[ 1320.654651][T26757] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[ 1320.827978][ T3293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1320.863379][ T3293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1320.920277][ T3293] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1320.985900][ T3293] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1321.382284][ T3293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1321.429892][ T3293] usb 4-1: config 0 descriptor??
[ 1322.127834][ T3293] usbhid 4-1:0.0: can't add hid device: -71
[ 1322.139400][ T3293] usbhid: probe of 4-1:0.0 failed with error -71
[ 1322.151148][ T3293] usb 4-1: USB disconnect, device number 83
[ 1323.624991][T26783] loop2: detected capacity change from 0 to 32768
[ 1323.709767][T26783] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.6444 (26783)
[ 1323.772172][T26783] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1323.851117][T26783] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 1323.874815][T26783] BTRFS info (device loop2): using free space tree
[ 1324.002792][T26814] loop0: detected capacity change from 0 to 7
[ 1324.156686][T26814] Dev loop0: unable to read RDB block 7
[ 1324.163422][T26814]  loop0: AHDI p3 p4
[ 1324.167581][T26814] loop0: partition table partially beyond EOD, truncated
[ 1324.177432][T26814] loop0: p3 start 4294967295 is beyond EOD, truncated
[ 1324.871230][T26783] BTRFS info (device loop2): enabling ssd optimizations
[ 1325.065491][T26844] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6444'.
[ 1325.395965][T26855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6458'.
[ 1325.420700][T26855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6458'.
[ 1326.836702][   T26] audit: type=1326 audit(1719873473.909:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26877 comm="syz.3.6468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e86975b99 code=0x0
[ 1327.382658][T26889] xt_limit: Overflow, try lower: 0/0
[ 1327.386016][T26890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6470'.
[ 1327.407821][T26890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6470'.
[ 1328.500546][T26901] program syz.4.6473 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1328.510505][T26901] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1328.523204][T26901] ubi0: attaching mtd0
[ 1328.533713][T26901] ubi0: scanning is finished
[ 1328.931767][T26901] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[ 1330.538030][T26918] binder: 26917:26918 ioctl c0306201 200003c0 returned -22
[ 1330.766031][   T26] audit: type=1326 audit(1719873477.839:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26921 comm="syz.1.6482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x0
[ 1330.865755][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6481'.
[ 1330.913212][T26927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6481'.
[ 1330.949495][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6481'.
[ 1331.046511][T22282] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1333.099543][T26976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6497'.
[ 1333.180230][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6497'.
[ 1333.190995][   T26] audit: type=1326 audit(1719873480.269:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.6500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e86975b99 code=0x0
[ 1333.200669][T26976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6497'.
[ 1333.934839][T26962] loop2: detected capacity change from 0 to 32768
[ 1334.058833][T26962] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.6494 (26962)
[ 1334.126327][T26962] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1334.213127][T26962] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 1334.253463][T26962] BTRFS info (device loop2): using free space tree
[ 1334.454333][T27003] binder: BINDER_SET_CONTEXT_MGR already set
[ 1334.471191][T27003] binder: 27001:27003 ioctl 4018620d 20000100 returned -16
[ 1334.484936][T27003] binder: 27001:27003 ioctl c018620c 20000000 returned -1
[ 1334.712721][T27011] netlink: 'syz.1.6509': attribute type 15 has an invalid length.
[ 1335.218497][T27011] netlink: 723 bytes leftover after parsing attributes in process `syz.1.6509'.
[ 1335.252107][T26962] BTRFS info (device loop2): enabling ssd optimizations
[ 1335.490097][T27031] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6494'.
[ 1336.781792][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6514'.
[ 1336.886345][T27049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6514'.
[ 1337.543235][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6514'.
[ 1341.542276][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'.
[ 1341.577531][T27102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6528'.
[ 1341.611866][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'.
[ 1343.172339][T27118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6534'.
[ 1343.247580][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6534'.
[ 1343.330624][T27118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6534'.
[ 1344.769565][T13212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1344.782363][T13212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1344.797885][T13212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1344.806005][T13212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1344.816089][T13212] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1344.823484][T13212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1345.053157][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6541'.
[ 1345.105858][T27162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6541'.
[ 1345.179179][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6541'.
[ 1345.474241][T26962] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1345.725530][T27176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6549'.
[ 1345.753774][T27176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'.
[ 1345.805669][T27178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6549'.
[ 1345.882783][ T4133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.909849][T27140] chnl_net:caif_netlink_parms(): no params data found
[ 1346.043637][ T4133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.191749][ T4133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.351390][ T4133] team0: Port device netdevsim0 removed
[ 1346.360134][ T4133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.409117][T27140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1346.474671][T27140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1346.485701][T27140] device bridge_slave_0 entered promiscuous mode
[ 1346.526924][T27140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1346.551533][T27140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1346.599079][T27140] device bridge_slave_1 entered promiscuous mode
[ 1346.700365][T27140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1346.749719][T27140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1346.858362][T13212] Bluetooth: hci4: command tx timeout
[ 1346.891288][T27140] team0: Port device team_slave_0 added
[ 1347.017829][T27206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6558'.
[ 1347.070917][T27140] team0: Port device team_slave_1 added
[ 1347.181507][T27140] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1347.194051][T27140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1347.270857][T27140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1347.450910][T27140] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1347.468312][T27140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1347.527739][T27140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1347.966730][T27140] device hsr_slave_0 entered promiscuous mode
[ 1347.984645][T27140] device hsr_slave_1 entered promiscuous mode
[ 1347.992762][T27140] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1348.000954][T27140] Cannot create hsr debugfs directory
[ 1348.263764][T27238] binder: 27237:27238 ioctl c018620c 20000000 returned -22
[ 1348.334779][   T26] audit: type=1326 audit(1719873495.409:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.1.6571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf375b99 code=0x0
[ 1348.674023][T27248] __nla_validate_parse: 3 callbacks suppressed
[ 1348.674040][T27248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6572'.
[ 1348.853548][T27255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6573'.
[ 1348.918151][T27255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'.
[ 1348.941225][T13212] Bluetooth: hci4: command tx timeout
[ 1349.397252][ T4133] device hsr_slave_0 left promiscuous mode
[ 1349.430854][ T4133] device hsr_slave_1 left promiscuous mode
[ 1349.451269][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1349.469154][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1349.508426][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1349.526091][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1349.548443][ T4133] device bridge_slave_1 left promiscuous mode
[ 1349.556958][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.567563][T27270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6574'.
[ 1349.619745][ T4133] device bridge_slave_0 left promiscuous mode
[ 1349.646137][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.800942][ T4133] device veth1_macvtap left promiscuous mode
[ 1349.807294][ T4133] device veth0_macvtap left promiscuous mode
[ 1349.820690][ T4133] device veth1_vlan left promiscuous mode
[ 1349.827185][ T4133] device veth0_vlan left promiscuous mode
[ 1351.068675][T13212] Bluetooth: hci4: command tx timeout
[ 1351.545967][T27284] binder: 27283:27284 ioctl c018620c 20000000 returned -22
[ 1351.942237][ T4133] team0 (unregistering): Port device team_slave_1 removed
[ 1352.003671][ T4133] team0 (unregistering): Port device team_slave_0 removed
[ 1352.072159][ T4133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1352.120571][ T4133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1352.228617][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6584'.
[ 1352.239954][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6584'.
[ 1352.698072][ T4133] bond0 (unregistering): Released all slaves
[ 1352.915839][T27140] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1352.987012][T27140] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1353.026252][T27140] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1353.073736][T27140] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1353.118652][T13212] Bluetooth: hci4: command tx timeout
[ 1353.130577][   T26] audit: type=1326 audit(1719873500.209:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.6587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7857775b99 code=0x0
[ 1354.214455][T27140] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1354.603984][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1354.682044][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1354.878081][T27140] 8021q: adding VLAN 0 to HW filter on device team0
[ 1354.984002][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1355.009827][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1355.069497][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1355.076804][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1355.236035][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1355.285314][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1355.320753][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1355.347572][T27328] binder: BINDER_SET_CONTEXT_MGR already set
[ 1355.371454][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1355.378640][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1355.392108][T27328] binder: 27327:27328 ioctl 4018620d 20000100 returned -16
[ 1355.420861][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1355.421585][T27331] binder: 27327:27331 ioctl c018620c 20000000 returned -1
[ 1355.445561][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1355.475973][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1355.511000][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1355.559762][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1355.590501][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1355.642388][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1355.678205][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1355.713370][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1355.730598][T27339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6597'.
[ 1355.754007][T27140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1355.792336][T27140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1355.808083][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6597'.
[ 1355.824929][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1355.850539][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1357.707533][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1357.732733][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1357.917497][T27140] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1358.340639][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1358.378699][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1358.498054][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1358.506944][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1358.576782][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1358.591531][   T26] audit: type=1326 audit(1719873505.669:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27375 comm="syz.4.6607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9af75b99 code=0x0
[ 1358.622397][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1358.638723][T27140] device veth0_vlan entered promiscuous mode
[ 1358.667233][T27140] device veth1_vlan entered promiscuous mode
[ 1358.724183][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1358.755496][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1358.813342][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1358.848568][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1358.859657][T27140] device veth0_macvtap entered promiscuous mode
[ 1358.879797][T27140] device veth1_macvtap entered promiscuous mode
[ 1358.965610][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1359.008776][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.036307][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1359.067420][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.103412][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1359.116666][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.147483][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1359.173943][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.206235][T27140] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1359.232732][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1359.243259][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1359.266799][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1359.314178][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1359.352475][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1359.373200][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.404436][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1359.445660][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.519484][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1359.549157][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.576339][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1359.613766][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.653920][T27140] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1359.687529][T27140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.747602][T27140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.777341][T27140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.786321][T27140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.797024][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1359.818621][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1360.963146][ T3898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1360.992440][ T3898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1361.019879][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1361.527558][T27404] xt_NFQUEUE: number of total queues is 0
[ 1361.580170][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.586483][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.749605][ T3898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1361.801469][ T3898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1361.877307][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1364.673680][   T26] audit: type=1326 audit(1719873511.749:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27442 comm="syz.2.6624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a54175b99 code=0x0
[ 1364.724168][T27431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6621'.
[ 1367.529348][T27483] binder: 27482:27483 ioctl 4018620d 0 returned -22
[ 1367.556475][T27480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6636'.
[ 1368.868412][T27505] xt_limit: Overflow, try lower: 0/0
[ 1368.973414][T27504] xt_NFQUEUE: number of total queues is 0
[ 1370.247329][T27526] binder: BINDER_SET_CONTEXT_MGR already set
[ 1370.264190][T27526] binder: 27524:27526 ioctl 4018620d 20000100 returned -16
[ 1371.350878][T27537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6652'.
[ 1372.335492][T27560] netlink: 'syz.2.6659': attribute type 33 has an invalid length.
[ 1372.343663][T27560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6659'.
[ 1372.355817][T27560] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1372.705838][T27569] binder: BINDER_SET_CONTEXT_MGR already set
[ 1372.756126][T27569] binder: 27566:27569 ioctl 4018620d 20000100 returned -16
[ 1375.062913][T27608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6674'.
[ 1376.273637][T27628] binder: BINDER_SET_CONTEXT_MGR already set
[ 1376.300831][T27628] binder: 27626:27628 ioctl 4018620d 20000100 returned -16
[ 1376.737820][ T3565] Bluetooth: hci4: SCO packet for unknown connection handle 0
[ 1376.769647][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6682'.
[ 1377.561886][T27659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6689'.
[ 1377.635142][T27662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6690'.
[ 1377.676731][T27662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6690'.
[ 1377.819682][T27670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6693'.
[ 1379.343758][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6701'.
[ 1379.438835][T27697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6701'.
[ 1379.455159][T27697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6701'.
[ 1379.475658][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6701'.
[ 1379.516442][T27702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6703'.
[ 1379.607040][T27705] fuse: Bad value for 'fd'
[ 1379.965531][T27717] can0: slcan on ptm0.
[ 1380.688155][T27712] can0 (unregistered): slcan off ptm0.
[ 1381.526371][T27756] binder: 27753:27756 ioctl c0306201 0 returned -14
[ 1381.841735][T27774] __nla_validate_parse: 6 callbacks suppressed
[ 1381.841754][T27774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6728'.
[ 1381.992693][T27781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6731'.
[ 1382.093903][T27779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6731'.
[ 1382.348136][T27779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6731'.
[ 1383.038619][T27789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6732'.
[ 1383.129170][T27789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6732'.
[ 1383.292244][T27796] tipc: Started in network mode
[ 1383.471185][T27796] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1383.665138][T27796] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1384.548334][T27822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6744'.
[ 1384.778382][ T3293] tipc: Node number set to 1
[ 1385.273546][T27832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6748'.
[ 1385.289966][T27832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6748'.
[ 1385.451681][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6746'.
[ 1385.533984][T27843] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1386.857852][T27840] __nla_validate_parse: 1 callbacks suppressed
[ 1386.857869][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6746'.
[ 1388.761007][T27876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6761'.
[ 1389.068237][   T26] audit: type=1326 audit(1719873536.149:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.6762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a54175b99 code=0x0
[ 1390.719717][T27905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6767'.
[ 1390.770407][T27905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6767'.
[ 1390.797427][T27905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6767'.
[ 1392.188408][T27931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6777'.
[ 1392.682288][   T26] audit: type=1804 audit(1719873539.759:4867): pid=27944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6780" name="/root/syzkaller.fDHY71/440/bus" dev="sda1" ino=2059 res=1 errno=0
[ 1392.803547][ T5258] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1393.026571][T27951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6781'.
[ 1393.052594][T27951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6781'.
[ 1393.086952][T27951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6781'.
[ 1393.102258][ T5258] usb 4-1: Using ep0 maxpacket: 32
[ 1393.145144][   T26] audit: type=1326 audit(1719873540.219:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27953 comm="syz.2.6782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a54175b99 code=0x0
[ 1393.222615][ T5258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1393.243997][ T5258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1393.271329][ T5258] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1393.311463][ T5258] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[ 1393.343582][ T5258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1393.381450][ T5258] usb 4-1: config 0 descriptor??
[ 1394.368508][T27963] kvm [27958]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6d00000800
[ 1394.409899][T27963] kvm [27958]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x14500000800
[ 1394.428008][T27963] kvm [27958]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x14600000000
[ 1394.477900][T27963] kvm [27958]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1cd00000800
[ 1394.512308][T27963] kvm [27958]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2e500000800
[ 1394.798402][ T5258] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[ 1394.814619][ T5258] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[ 1394.830943][ T5258] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[ 1394.838414][ T5258] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[ 1394.845308][ T5258] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[ 1394.858497][ T5258] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0
[ 1395.034888][ T5258] ntrig 0003:1B96:000A.0006: Firmware version: 4.9.4.29.2 (6459 ba9b)
[ 1395.161481][T27983] input: syz0 as /devices/virtual/input/input75
[ 1395.359033][ T5258] usb 4-1: USB disconnect, device number 84
[ 1396.435635][T28000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6794'.
[ 1396.524427][T28000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6794'.
[ 1396.580691][T28000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6794'.
[ 1397.990536][T28033] Bluetooth: MGMT ver 1.22
[ 1397.995663][T28033] Bluetooth: hci3: unsupported parameter 49150
[ 1398.002064][T28033] Bluetooth: hci3: unsupported parameter 49150
[ 1398.426359][T28031] lo speed is unknown, defaulting to 1000
[ 1398.436739][T28031] lo speed is unknown, defaulting to 1000
[ 1398.446030][T28031] lo speed is unknown, defaulting to 1000
[ 1398.545443][T28031] infiniband syz0: set active
[ 1398.550720][T28031] infiniband syz0: added lo
[ 1398.573316][ T3293] lo speed is unknown, defaulting to 1000
[ 1398.613402][T28031] RDS/IB: syz0: added
[ 1398.618780][T28031] smc: adding ib device syz0 with port count 1
[ 1398.625174][T28031] smc:    ib device syz0 port 1 has pnetid 
[ 1398.637527][T28031] lo speed is unknown, defaulting to 1000
[ 1398.684441][ T3293] lo speed is unknown, defaulting to 1000
[ 1398.792883][T28031] lo speed is unknown, defaulting to 1000
[ 1398.969135][T28031] lo speed is unknown, defaulting to 1000
[ 1399.076122][T28031] lo speed is unknown, defaulting to 1000
[ 1399.182322][T28031] lo speed is unknown, defaulting to 1000
[ 1399.928610][T28052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6809'.
[ 1400.028413][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6809'.
[ 1400.055516][T28052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6809'.
[ 1400.132271][T28061] bond0: (slave tunl0): The slave device specified does not support setting the MAC address
[ 1400.145829][T28061] bond0: (slave tunl0): Error -95 calling set_mac_address
[ 1402.452904][T28091] input: syz0 as /devices/virtual/input/input76
[ 1403.079812][T28097] rdma_rxe: already configured on lo
[ 1403.693887][T28099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6824'.
[ 1404.826642][   T26] audit: type=1804 audit(1719873551.899:4869): pid=28128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6832" name="/root/syzkaller.hfKnTp/1325/bus" dev="sda1" ino=2056 res=1 errno=0
[ 1404.906852][   T26] audit: type=1804 audit(1719873551.899:4870): pid=28128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6832" name="/root/syzkaller.hfKnTp/1325/bus" dev="sda1" ino=2056 res=1 errno=0
[ 1405.702451][T28144] rdma_rxe: rxe_register_device failed with error -23
[ 1405.711878][T28144] rdma_rxe: failed to add lo
[ 1406.867802][   T26] audit: type=1326 audit(1719873553.929:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.0.6843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7857775b99 code=0x0
[ 1407.158699][T28162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6844'.
[ 1408.039574][T28175] binder: 28174:28175 ioctl c018620c 0 returned -14
[ 1409.697118][T28205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6858'.
[ 1411.679413][T28223] binder: 28222:28223 ioctl c018620c 0 returned -14
[ 1412.443960][   T26] audit: type=1326 audit(1719873559.519:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28240 comm="syz.3.6868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e86975b99 code=0x0
[ 1413.679251][T28248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6870'.
[ 1414.943171][T28265] binder: 28264:28265 ioctl c018620c 0 returned -14
[ 1415.868893][T28283] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1415.881363][T28283] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1415.891896][T28283] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1417.089388][T28301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6887'.
[ 1417.127854][   T26] audit: type=1326 audit(1719873564.209:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28302 comm="syz.4.6886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9af75b99 code=0x0
[ 1417.169076][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6888'.
[ 1419.308671][T28337] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1419.339109][T28337] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1419.350366][T28337] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1420.277086][T28358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6903'.
[ 1421.264651][ T3990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.302873][T13212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1421.314133][T13212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1421.330232][T13212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1421.348190][T13212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1421.357558][T13212] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1421.366775][T13212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1421.580883][ T3990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.324299][ T3990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.473351][T28385] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1422.485923][T28385] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1422.496811][T28385] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1422.515245][T28370] lo speed is unknown, defaulting to 1000
[ 1422.875277][   T26] audit: type=1326 audit(1719873569.949:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28392 comm="syz.2.6912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a54175b99 code=0x0
[ 1423.212920][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.219312][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.269805][ T3990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1423.417987][ T3565] Bluetooth: hci2: command tx timeout
[ 1423.529502][T28405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6916'.
[ 1423.612767][T28408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6917'.
[ 1423.756693][ T3990] tipc: Disabling bearer <udp:syz2>
[ 1423.762877][ T3990] tipc: Disabling bearer <udp:syz0>
[ 1423.787735][ T3990] tipc: Left network mode
[ 1424.523100][T28370] chnl_net:caif_netlink_parms(): no params data found
[ 1425.461763][T28435] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1425.475244][T28435] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1425.485793][T28435] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1425.617999][T13212] Bluetooth: hci2: command tx timeout
[ 1426.010670][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6927'.
[ 1426.282971][T28370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.332628][T28370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.386428][T28370] device bridge_slave_0 entered promiscuous mode
[ 1426.460171][T28370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.467335][T28370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.530055][T28370] device bridge_slave_1 entered promiscuous mode
[ 1426.547793][   T26] audit: type=1326 audit(1719873573.599:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28454 comm="syz.4.6929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9af75b99 code=0x0
[ 1426.752196][T28370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1426.848965][T28370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1426.897702][T28461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6931'.
[ 1427.055310][T28370] team0: Port device team_slave_0 added
[ 1427.149719][T28370] team0: Port device team_slave_1 added
[ 1427.325380][T28370] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1427.338369][T28370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1427.385173][T28370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1427.588451][T28370] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1427.595466][T28370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1427.636046][T28370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1427.667551][T13212] Bluetooth: hci2: command tx timeout
[ 1428.620634][T28370] device hsr_slave_0 entered promiscuous mode
[ 1428.658406][T28370] device hsr_slave_1 entered promiscuous mode
[ 1428.730005][T28477] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1428.742487][T28477] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1428.753308][T28477] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1428.771437][   T26] audit: type=1326 audit(1719873575.839:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28479 comm="syz.4.6936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9af75b99 code=0x0
[ 1428.892944][T28484] can0: slcan on ptm0.
[ 1429.227891][ T3990] device hsr_slave_0 left promiscuous mode
[ 1429.242846][ T3990] device hsr_slave_1 left promiscuous mode
[ 1429.280291][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1429.304535][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1429.325604][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1429.338045][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1429.356074][ T3990] device bridge_slave_1 left promiscuous mode
[ 1429.385902][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1429.416608][ T3990] device bridge_slave_0 left promiscuous mode
[ 1429.426372][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1429.593951][ T3990] device veth1_macvtap left promiscuous mode
[ 1429.613403][ T3990] device veth0_macvtap left promiscuous mode
[ 1429.634606][ T3990] device veth1_vlan left promiscuous mode
[ 1429.654233][ T3990] device veth0_vlan left promiscuous mode
[ 1429.738154][T13212] Bluetooth: hci2: command tx timeout
[ 1429.967293][ T3990] infiniband syz0: set down
[ 1430.178646][T13212] Bluetooth: hci4: SCO packet for unknown connection handle 0
[ 1430.657208][ T3990] team0 (unregistering): Port device team_slave_1 removed
[ 1430.722277][ T3990] team0 (unregistering): Port device team_slave_0 removed
[ 1430.777585][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1430.849133][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1432.214040][ T3990] bond0 (unregistering): Released all slaves
[ 1432.305726][ T2481] smc: removing ib device syz0
[ 1432.349699][T28478] can0 (unregistered): slcan off ptm0.
[ 1432.372506][ T3631] lo speed is unknown, defaulting to 1000
[ 1432.378291][T28512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6946'.
[ 1432.378410][T28517] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1432.399937][T28517] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1432.410402][T28517] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1433.584482][ T3565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1433.596995][ T3565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1433.616861][ T3565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1433.624981][ T3565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1433.633122][ T3565] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1433.640556][ T3565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1433.932141][T28370] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1433.994007][T28370] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1434.054285][T28370] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1434.105640][T28370] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1434.369455][T28532] chnl_net:caif_netlink_parms(): no params data found
[ 1434.678309][T28370] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1434.764355][T28532] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1434.782263][T28532] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1434.802480][T28532] device bridge_slave_0 entered promiscuous mode
[ 1434.824705][T28370] 8021q: adding VLAN 0 to HW filter on device team0
[ 1434.845477][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1434.855859][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1434.892783][T28532] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1434.906589][T28532] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1434.949073][T28532] device bridge_slave_1 entered promiscuous mode
[ 1435.017038][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1435.038499][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1435.047120][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1435.054337][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1435.368967][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1435.696302][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1435.709230][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1435.747951][T13212] Bluetooth: hci3: command tx timeout
[ 1435.772409][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1435.779590][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1435.885179][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1435.918879][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1435.980092][T28532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1436.016337][T28553] can0: slcan on ptm0.
[ 1436.027160][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1436.054612][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1436.275335][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1436.288594][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1436.297522][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1436.306762][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1436.315504][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1436.332012][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1437.016750][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1437.030229][T28532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1437.055621][T28557] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1437.068358][T28557] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1437.078995][T28557] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1437.148054][T28551] can0 (unregistered): slcan off ptm0.
[ 1437.255694][T28532] team0: Port device team_slave_0 added
[ 1437.335461][T28532] team0: Port device team_slave_1 added
[ 1437.473394][T28559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6960'.
[ 1437.499798][T28532] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1437.506914][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1437.592192][T28532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1437.648251][T28532] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1437.683086][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1437.775701][T28532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1437.817778][ T3565] Bluetooth: hci3: command tx timeout
[ 1437.831152][ T3565] Bluetooth: hci4: SCO packet for unknown connection handle 0
[ 1437.981427][T28532] device hsr_slave_0 entered promiscuous mode
[ 1438.012116][T28532] device hsr_slave_1 entered promiscuous mode
[ 1438.032159][T28532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1438.054694][T28532] Cannot create hsr debugfs directory
[ 1438.337214][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1438.351266][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1438.397181][T28370] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1438.566123][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1438.587181][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1439.063676][T28532] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1439.364939][T28370] device veth0_vlan entered promiscuous mode
[ 1439.383357][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1439.409853][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1439.455922][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1439.536828][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1439.809917][T13212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1439.814384][T28370] device veth1_vlan entered promiscuous mode
[ 1439.825263][ T3567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1439.833991][ T3567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1439.844802][ T3567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1439.852524][ T3567] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1439.860885][ T3567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1439.897687][ T3567] Bluetooth: hci3: command tx timeout
[ 1439.998664][T28532] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1440.143936][T28370] device veth0_macvtap entered promiscuous mode
[ 1440.171594][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1440.188618][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1440.332822][T28532] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1440.362761][T28370] device veth1_macvtap entered promiscuous mode
[ 1440.404520][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1440.418519][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1440.454493][T13212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1440.466378][T13212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1440.478219][T13212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1440.495546][T13212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1440.506989][T13212] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1440.514829][T13212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1440.615836][T28532] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1440.655512][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1440.666434][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.685924][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1440.696610][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.714287][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1440.724977][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.742808][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1440.754804][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.773633][T28370] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1440.815318][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1440.828528][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1440.852943][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1440.877704][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.887565][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1440.919090][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.947671][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1440.967658][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.980527][T28370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1440.991478][T28370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1441.003283][T28370] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1441.034630][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1441.063776][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1441.080093][T28370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.097871][T28370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.106702][T28370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.117215][T28370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.452510][T28591] chnl_net:caif_netlink_parms(): no params data found
[ 1441.544676][ T3990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.569815][T28532] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1441.580580][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1441.600091][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1441.655459][T28532] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1441.675032][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1441.727723][T28532] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1441.797451][ T3990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.847550][T28532] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1441.857188][ T3898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1441.897918][T13212] Bluetooth: hci0: command tx timeout
[ 1441.902707][ T3898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1441.952917][ T3990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.979151][ T3565] Bluetooth: hci3: command tx timeout
[ 1442.015090][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1442.068729][T28591] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1442.075867][T28591] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1442.102954][T28591] device bridge_slave_0 entered promiscuous mode
[ 1442.133689][ T3990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.322874][T28593] chnl_net:caif_netlink_parms(): no params data found
[ 1442.339589][T28591] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1442.347066][T28591] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1442.356318][T28591] device bridge_slave_1 entered promiscuous mode
[ 1442.630235][T13212] Bluetooth: hci4: command tx timeout
[ 1443.261133][T28591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1443.285750][T28593] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.307796][T28593] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1443.316096][T28593] device bridge_slave_0 entered promiscuous mode
[ 1443.350566][T28593] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.358447][T28593] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1443.366811][T28593] device bridge_slave_1 entered promiscuous mode
[ 1443.431498][T28591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1443.498671][T28611] can0: slcan on ptm0.
[ 1443.552271][T28593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1443.640977][T28593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1443.700377][T28609] can0 (unregistered): slcan off ptm0.
[ 1443.781855][ T3990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.814619][T28591] team0: Port device team_slave_0 added
[ 1443.856192][T28591] team0: Port device team_slave_1 added
[ 1443.914331][T28593] team0: Port device team_slave_0 added
[ 1443.978151][ T3565] Bluetooth: hci0: command tx timeout
[ 1444.040945][ T3990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.114978][T28593] team0: Port device team_slave_1 added
[ 1444.148420][T28591] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1444.155403][T28591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1444.183371][T28591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1444.241067][ T3990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.258904][T28591] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1444.266567][T28591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1444.293738][T28591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1444.327939][T28532] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1444.367428][T28593] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1444.376063][T28593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1444.416272][T28593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1444.449595][ T3990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.481873][T28593] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1444.490103][T28593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1444.519877][T28593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1444.562997][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1444.573048][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1444.611950][T28591] device hsr_slave_0 entered promiscuous mode
[ 1444.620871][T28591] device hsr_slave_1 entered promiscuous mode
[ 1444.628457][T28591] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1444.636107][T28591] Cannot create hsr debugfs directory
[ 1444.645504][T28532] 8021q: adding VLAN 0 to HW filter on device team0
[ 1444.706731][T28593] device hsr_slave_0 entered promiscuous mode
[ 1444.708344][ T3565] Bluetooth: hci4: command tx timeout
[ 1444.720737][T28593] device hsr_slave_1 entered promiscuous mode
[ 1444.741495][T28593] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1444.755140][T28593] Cannot create hsr debugfs directory
[ 1444.786106][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1444.803912][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1444.824174][T17232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1444.831375][T17232] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1444.844331][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1444.949851][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1444.958988][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1444.967549][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1444.974770][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1445.052804][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1445.111532][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1445.249444][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1445.269989][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1445.299689][ T3990] tipc: Disabling bearer <udp:syz0>
[ 1445.319352][ T3990] tipc: Left network mode
[ 1445.403150][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1445.421561][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1445.430993][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1445.440798][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1445.458565][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1445.476913][T28532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1445.491571][T28532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1445.510230][ T3990] tipc: Disabling bearer <udp:syz2>
[ 1445.516615][ T3990] tipc: Left network mode
[ 1445.526287][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1445.538096][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1445.639039][T28642] can0: slcan on ptm0.
[ 1445.718712][T28639] can0 (unregistered): slcan off ptm0.
[ 1446.068333][ T3565] Bluetooth: hci0: command tx timeout
[ 1446.078642][T17231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1446.086978][T17231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1446.306859][T28532] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1446.349285][T28653] mkiss: ax0: crc mode is auto.
[ 1446.778125][ T3565] Bluetooth: hci4: command tx timeout
[ 1446.931013][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1446.941632][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1446.961539][ T3565] Bluetooth: hci2: SCO packet for unknown connection handle 0
[ 1447.019553][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1447.036981][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1447.054459][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1447.064717][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1447.132197][T28532] device veth0_vlan entered promiscuous mode
[ 1447.154766][T28532] device veth1_vlan entered promiscuous mode
[ 1447.246061][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1447.263982][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1447.292029][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1447.300923][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1447.360689][T28532] device veth0_macvtap entered promiscuous mode
[ 1447.382632][T28532] device veth1_macvtap entered promiscuous mode
[ 1447.490785][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1447.503146][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.513576][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1447.524298][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.534893][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1447.545706][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.555625][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1447.566213][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.576735][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1447.596907][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.609166][T28532] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1447.619518][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1447.628972][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1447.638604][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1447.647428][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1447.670293][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.682407][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.693163][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.703866][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.713950][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.724466][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.734366][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.745153][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.762367][T28532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1447.773816][T28532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1447.792521][T28532] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1447.867769][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1447.877039][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1447.891116][T28532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.906381][T28532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.920441][T28532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.929893][T28532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.960257][T28591] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1448.037914][T28591] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1448.087318][T28591] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1448.111652][T28591] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1448.118731][T17231] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1448.137907][ T3565] Bluetooth: hci0: command tx timeout
[ 1448.284002][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1448.357827][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1448.492698][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1448.500291][T17231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1448.513320][T17231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024
[ 1448.525214][T17231] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[ 1448.536281][T17231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.548070][T28593] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1448.564581][T17231] usb 2-1: config 0 descriptor??
[ 1448.580321][ T3967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1448.598383][T28667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1448.615390][ T3967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1448.622791][T28593] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1448.636636][T28593] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1448.746664][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1448.754874][T28593] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1448.771575][T28591] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1448.788338][T28673] can0: slcan on ptm0.
[ 1448.858590][ T3565] Bluetooth: hci4: command tx timeout
[ 1448.948032][T28671] can0 (unregistered): slcan off ptm0.
[ 1448.997554][ T3990] device hsr_slave_0 left promiscuous mode
[ 1449.020727][ T3990] device hsr_slave_1 left promiscuous mode
[ 1449.027089][T17231] appletouch 2-1:0.0: Failed to read mode from device.
[ 1449.035641][T17231] appletouch: probe of 2-1:0.0 failed with error -5
[ 1449.057151][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1449.069339][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1449.077296][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1449.085303][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1449.419658][ T3990] device bridge_slave_1 left promiscuous mode
[ 1449.482565][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1449.557109][ T3990] device bridge_slave_0 left promiscuous mode
[ 1449.625765][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1449.724635][ T3990] device hsr_slave_0 left promiscuous mode
[ 1449.738168][ T3990] device hsr_slave_1 left promiscuous mode
[ 1449.746096][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1449.762342][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1449.786110][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1449.798508][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1449.806613][ T3990] device bridge_slave_1 left promiscuous mode
[ 1449.820498][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1449.839941][ T3990] device bridge_slave_0 left promiscuous mode
[ 1449.847429][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1449.910085][ T3990] device hsr_slave_0 left promiscuous mode
[ 1449.917198][ T3990] device hsr_slave_1 left promiscuous mode
[ 1449.926571][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1449.935025][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1449.955072][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1449.963710][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1449.974702][ T3990] device bridge_slave_1 left promiscuous mode
[ 1449.981445][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1449.992191][ T3990] device bridge_slave_0 left promiscuous mode
[ 1449.999253][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1450.160753][ T3990] device veth1_macvtap left promiscuous mode
[ 1450.166918][ T3990] device veth0_macvtap left promiscuous mode
[ 1450.182973][ T3990] device veth1_vlan left promiscuous mode
[ 1450.194791][ T3990] device veth0_vlan left promiscuous mode
[ 1450.213635][ T3990] device veth1_macvtap left promiscuous mode
[ 1450.226278][ T3990] device veth0_macvtap left promiscuous mode
[ 1450.236041][ T3990] device veth1_vlan left promiscuous mode
[ 1450.252396][ T3990] device veth0_vlan left promiscuous mode
[ 1450.260442][ T3990] device veth1_macvtap left promiscuous mode
[ 1450.269174][ T3990] device veth0_macvtap left promiscuous mode
[ 1450.275352][ T3990] device veth1_vlan left promiscuous mode
[ 1450.281565][ T3990] device veth0_vlan left promiscuous mode
[ 1451.189737][ T3565] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1451.361953][ T3990] team0 (unregistering): Port device team_slave_1 removed
[ 1451.420161][ T3990] team0 (unregistering): Port device team_slave_0 removed
[ 1451.470528][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1451.520828][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1452.034167][ T3565] Bluetooth: hci3: unexpected cc 0x0c05 length: 5 > 1
[ 1452.112341][ T3990] bond0 (unregistering): Released all slaves
[ 1452.635213][ T3990] team0 (unregistering): Port device team_slave_1 removed
[ 1452.682961][ T3990] team0 (unregistering): Port device team_slave_0 removed
[ 1452.730771][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1452.781491][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1453.315026][ T3990] bond0 (unregistering): Released all slaves
[ 1453.542553][ T3990] team0 (unregistering): Port device vlan1 removed
[ 1453.845478][ T3990] team0 (unregistering): Port device team_slave_1 removed
[ 1453.892235][ T3990] team0 (unregistering): Port device team_slave_0 removed
[ 1453.943114][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1453.991694][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1454.526933][ T3990] bond0 (unregistering): Released all slaves
[ 1454.609258][T28593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1454.628234][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1454.656666][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1454.668541][T28591] 8021q: adding VLAN 0 to HW filter on device team0
[ 1454.682017][ T5237] usb 2-1: USB disconnect, device number 40
[ 1454.730638][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1454.743027][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1454.771843][T26758] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1454.779028][T26758] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1454.805939][T28593] 8021q: adding VLAN 0 to HW filter on device team0
[ 1454.858103][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1454.866799][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1454.899434][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1454.907234][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1454.919914][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1454.937445][ T5258] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1454.944646][ T5258] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1454.998131][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1455.013718][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1455.033589][T28707] can0: slcan on ptm0.
[ 1455.036102][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1455.076629][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1455.088194][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1455.095320][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1455.159350][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1455.168413][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1455.191981][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1455.214074][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1455.222858][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1455.234372][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1455.243235][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1455.251873][T17232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1455.259036][T17232] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1455.266790][T17232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1455.317579][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1455.326056][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1455.344739][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1455.354788][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1455.368093][T28703] can0 (unregistered): slcan off ptm0.
[ 1455.378369][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1455.393679][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1455.584563][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1455.682367][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1455.692599][T28591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1455.728105][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1455.736219][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1455.754339][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1455.772297][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1455.789647][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1455.801272][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1455.810290][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1455.823517][T28593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1455.893479][ T3565] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1456.059671][ T3565] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1456.079554][ T3565] Bluetooth: hci3: Injecting HCI hardware error event
[ 1456.091193][T13212] Bluetooth: hci3: hardware error 0x00
[ 1456.265437][ T3565] Bluetooth: hci2: unexpected cc 0x0c05 length: 5 > 1
[ 1456.436312][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1456.467116][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1456.488769][T28591] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1456.564488][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1456.580501][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1456.588361][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1456.597260][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1456.615314][T28593] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1456.670844][T28742] can0: slcan on ptm0.
[ 1456.727257][T28591] device veth0_vlan entered promiscuous mode
[ 1456.750129][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1456.762712][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1456.818953][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1456.826997][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1456.848800][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1456.849473][T28740] can0 (unregistered): slcan off ptm0.
[ 1456.872945][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1456.906798][T28591] device veth1_vlan entered promiscuous mode
[ 1456.924042][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1456.940015][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1456.953417][T28593] device veth0_vlan entered promiscuous mode
[ 1456.980002][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1456.991450][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1457.032971][T28593] device veth1_vlan entered promiscuous mode
[ 1457.054196][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1457.064862][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1457.085093][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1457.111514][T28591] device veth0_macvtap entered promiscuous mode
[ 1457.172242][T28591] device veth1_macvtap entered promiscuous mode
[ 1457.242472][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1457.263674][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1458.077066][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1458.086664][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1458.095733][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1458.111425][T28593] device veth0_macvtap entered promiscuous mode
[ 1458.135195][T28591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1458.147925][T13212] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1458.155260][T28591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1458.177664][T28591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1458.196329][T28591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1458.217322][T28591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1458.248859][T28591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1458.264282][T28591] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1458.282036][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1458.291926][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1458.310612][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1458.352381][T28593] device veth1_macvtap entered promiscuous mode
[ 1458.375419][T28591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1458.403198][T28591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1458.428041][T28591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1458.439250][T28591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1458.453843][T28591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1458.453914][T28760] fuse: Unknown parameter '0xffffffffffffffff'
[ 1458.473514][T28591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1458.492289][T28591] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1458.508659][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1458.528313][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1458.740946][T28591] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1458.764319][T28591] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1458.994854][T28591] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.116083][T28591] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.305197][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1459.329983][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.367795][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1459.378331][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.388257][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1459.398899][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.408778][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1459.419555][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.431155][T28593] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1459.460860][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1459.478637][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1459.501810][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1459.525033][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.545562][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1459.567746][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.588777][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1459.603447][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.613408][T28593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1459.625432][T28593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1459.637282][T28593] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1459.652375][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1459.665927][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1460.196639][T28593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1460.212473][T28593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1460.223222][T28593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1460.232650][T28593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1460.306059][T13212] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1460.314722][T13212] Bluetooth: hci2: Injecting HCI hardware error event
[ 1460.330172][ T3565] Bluetooth: hci2: hardware error 0x00
[ 1460.474815][T24520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1460.494551][T24520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1460.558370][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1460.560546][T19617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1460.600421][ T3898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1460.622479][ T3898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1460.623826][T19617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1460.654267][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1460.675824][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1460.703553][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1460.717556][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1460.762376][T17231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1460.958758][T28781] can0: slcan on ptm0.
[ 1462.185885][T13212] Bluetooth: hci0: unexpected cc 0x0c05 length: 5 > 1
[ 1462.289830][T28775] can0 (unregistered): slcan off ptm0.
[ 1462.378377][ T3565] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1462.689752][T13212] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1462.708246][T13212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1462.716243][T13212] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1462.732390][T13212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1462.740660][T13212] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1462.757437][T13212] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1462.883204][ T2481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1463.010398][ T2481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1463.123093][ T2481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1463.276362][ T2481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1463.415528][T28799] chnl_net:caif_netlink_parms(): no params data found
[ 1463.800110][T28799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1463.807229][T28799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1463.828921][T28799] device bridge_slave_0 entered promiscuous mode
[ 1463.979153][T28799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1463.989189][T28799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1464.014223][T28799] device bridge_slave_1 entered promiscuous mode
[ 1464.079351][T28817] mkiss: ax0: crc mode is auto.
[ 1464.262282][T28799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1464.284504][T28799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1464.410537][T28799] team0: Port device team_slave_0 added
[ 1464.499726][T28799] team0: Port device team_slave_1 added
[ 1464.554330][T28799] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1464.562764][T28799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1464.599463][T28799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1464.612388][T28799] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1464.621189][T28799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1464.621472][T28822] netlink: 'syz.1.7030': attribute type 24 has an invalid length.
[ 1464.655379][T28799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1464.984536][ T3565] Bluetooth: hci1: command tx timeout
[ 1465.684852][T28799] device hsr_slave_0 entered promiscuous mode
[ 1465.732152][T28799] device hsr_slave_1 entered promiscuous mode
[ 1465.795974][T28799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1465.816165][T28799] Cannot create hsr debugfs directory
[ 1466.044821][T28833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7034'.
[ 1466.074966][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7034'.
[ 1466.090210][T28840] can0: slcan on ptm0.
[ 1466.217873][ T3565] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1466.227670][ T3565] Bluetooth: hci0: Injecting HCI hardware error event
[ 1466.239556][T13212] Bluetooth: hci0: hardware error 0x00
[ 1466.337972][T28830] can0 (unregistered): slcan off ptm0.
[ 1466.646913][ T2481] device hsr_slave_0 left promiscuous mode
[ 1466.658304][ T2481] device hsr_slave_1 left promiscuous mode
[ 1466.682703][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1466.690313][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1466.698246][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1466.705683][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1466.714868][ T2481] device bridge_slave_1 left promiscuous mode
[ 1466.721179][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1466.734541][ T2481] device bridge_slave_0 left promiscuous mode
[ 1466.750121][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1466.905881][ T3565] Bluetooth: hci0: unexpected cc 0x0c05 length: 5 > 1
[ 1466.912904][ T3565] Bluetooth: hci0: unexpected event for opcode 0x0c05
[ 1466.939983][ T2481] device veth1_macvtap left promiscuous mode
[ 1466.953561][ T2481] device veth0_macvtap left promiscuous mode
[ 1467.117936][ T3565] Bluetooth: hci1: command tx timeout
[ 1467.198556][ T2481] device veth1_vlan left promiscuous mode
[ 1467.301078][ T2481] device veth0_vlan left promiscuous mode
[ 1468.297796][T13212] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1469.188066][T13212] Bluetooth: hci1: command tx timeout
[ 1469.595933][ T2481] team0 (unregistering): Port device team_slave_1 removed
[ 1469.675660][ T2481] team0 (unregistering): Port device team_slave_0 removed
[ 1469.750713][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1469.774851][T28885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7049'.
[ 1469.786433][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7049'.
[ 1469.858374][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1469.969519][T28879] slcan: can't register candev
[ 1469.974848][T28879] Falling back ldisc for ptm0.
[ 1470.023755][   T26] audit: type=1326 audit(1719873617.099:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28887 comm="syz.3.7050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a60775b99 code=0x0
[ 1470.693940][ T2481] bond0 (unregistering): Released all slaves
[ 1471.084335][T28906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7053'.
[ 1471.129447][T28906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7053'.
[ 1471.168853][T28906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7053'.
[ 1471.268062][T13212] Bluetooth: hci1: command tx timeout
[ 1471.680307][T28925] can0: slcan on ptm0.
[ 1471.784759][T28799] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1471.840127][T28799] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1471.861322][T28799] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1471.895367][T28799] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1471.988255][T28923] can0 (unregistered): slcan off ptm0.
[ 1472.193685][T28799] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1472.234926][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1472.250505][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1472.276360][T28799] 8021q: adding VLAN 0 to HW filter on device team0
[ 1472.299080][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1472.320690][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1472.343108][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1472.350269][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1472.404720][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1472.415229][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1472.443273][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1472.471376][T26758] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1472.478604][T26758] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1472.517132][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1472.543132][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1472.592856][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1472.617474][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1472.643377][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1472.674266][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1472.714312][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1472.736282][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1472.756903][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1472.774376][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1472.799157][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1472.825064][T28799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1473.226778][   T26] audit: type=1326 audit(1719873620.299:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28940 comm="syz.1.7063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa27575b99 code=0x0
[ 1473.511928][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1473.527790][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1473.561705][T28799] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1473.631190][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1473.647020][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1473.705578][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1473.718873][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1473.743168][T28799] device veth0_vlan entered promiscuous mode
[ 1473.758008][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1473.775042][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1473.803430][T28799] device veth1_vlan entered promiscuous mode
[ 1473.848099][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1473.859212][T26758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1473.935508][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1473.964112][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1474.008808][T28799] device veth0_macvtap entered promiscuous mode
[ 1474.096822][T28799] device veth1_macvtap entered promiscuous mode
[ 1474.213024][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1474.271755][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.317111][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1474.348253][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.358305][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1474.368883][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.378744][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1474.398041][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.415452][T28799] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1474.470427][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1474.513732][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.551004][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1474.567034][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.577764][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1474.588719][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.598839][T28799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1474.611187][T28799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1474.648201][T28799] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1474.655859][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1474.670695][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1474.700262][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1474.720118][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1474.752276][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7069'.
[ 1474.762450][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1474.780576][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1474.815058][T28976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7069'.
[ 1474.834767][T28962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7068'.
[ 1474.910097][T28799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1474.937687][T28799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1474.976867][T28799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1474.978080][T28968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7069'.
[ 1475.005451][T28799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1475.041914][T28977] can0: slcan on ptm0.
[ 1475.318288][T28972] can0 (unregistered): slcan off ptm0.
[ 1475.324779][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1475.382806][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1475.422108][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1475.461719][T19617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1475.486557][T19617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1475.557360][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1475.947468][   T26] audit: type=1326 audit(1719873623.019:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28994 comm="syz.2.7075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82ec175b99 code=0x0
[ 1478.562897][T29030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7081'.
[ 1478.565282][T29031] can0: slcan on ptm0.
[ 1478.614827][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7081'.
[ 1478.662103][T29030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7081'.
[ 1478.689851][T29034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7083'.
[ 1478.717995][T29027] can0 (unregistered): slcan off ptm0.
[ 1479.893159][   T26] audit: type=1326 audit(1719873626.939:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29047 comm="syz.1.7087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa27575b99 code=0x0
[ 1480.263187][T17232] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1480.481738][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7088'.
[ 1481.084628][T17232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1481.127159][T17232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024
[ 1481.155675][T17232] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[ 1481.179096][T17232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.268257][T17232] usb 4-1: config 0 descriptor??
[ 1481.276143][T29081] can0: slcan on ptm0.
[ 1481.298037][T29056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1481.428402][T29077] can0 (unregistered): slcan off ptm0.
[ 1481.574536][T17232] appletouch 4-1:0.0: Failed to read mode from device.
[ 1481.592101][T17232] appletouch: probe of 4-1:0.0 failed with error -5
[ 1482.033591][T29093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7098'.
[ 1483.398382][ T5258] usb 4-1: USB disconnect, device number 85
[ 1483.712726][   T26] audit: type=1326 audit(1719873630.789:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29107 comm="syz.3.7101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a60775b99 code=0x0
[ 1484.460167][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.470334][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.519207][T29135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7110'.
[ 1484.897062][T26758] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1485.277998][T26758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1485.347301][T26758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024
[ 1485.584257][T26758] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[ 1485.709847][T26758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.771053][T26758] usb 4-1: config 0 descriptor??
[ 1485.787969][T29139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1486.018668][T26758] appletouch 4-1:0.0: Failed to read mode from device.
[ 1486.027152][T26758] appletouch: probe of 4-1:0.0 failed with error -5
[ 1487.776290][ T3631] usb 4-1: USB disconnect, device number 86
[ 1487.817858][ T3293] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1487.902902][T29188] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1487.915628][T29188] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1487.926761][T29188] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1488.187747][ T3293] usb 5-1: Using ep0 maxpacket: 16
[ 1488.348149][ T3293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1488.457745][ T3293] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1488.528429][ T3293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.582962][ T3293] usb 5-1: config 0 descriptor??
[ 1488.690959][ T3293] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input80
[ 1488.960565][ T2988] bcm5974 5-1:0.0: could not read from device
[ 1488.987296][ T3293] usb 5-1: USB disconnect, device number 66
[ 1488.993643][T29183] bcm5974 5-1:0.0: could not read from device
[ 1489.500617][T29190] netlink: 'syz.3.7131': attribute type 3 has an invalid length.
[ 1489.554948][T29190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'.
[ 1491.096093][T29227] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1491.109127][T29227] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1491.120700][T29227] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1496.795642][T29309] tmpfs: Unknown parameter 'usrquota'
[ 1498.192786][T29322] afs: Bad value for 'source'
[ 1499.695807][T29350] tmpfs: Unknown parameter 'usrquota'
[ 1504.107162][T29398] tmpfs: Unknown parameter 'usrquota'
[ 1505.113296][ T4713] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1505.319109][T29387] loop1: detected capacity change from 0 to 32768
[ 1505.337818][T29387] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.7196 (29387)
[ 1505.376856][T29387] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1505.429465][T29387] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1505.453467][T29387] BTRFS info (device loop1): using free space tree
[ 1505.637768][ T4713] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1505.647050][ T4713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1505.698154][T29387] BTRFS info (device loop1): enabling ssd optimizations
[ 1506.198613][ T4713] usb 1-1: Product: syz
[ 1506.202851][ T4713] usb 1-1: Manufacturer: syz
[ 1506.207479][ T4713] usb 1-1: SerialNumber: syz
[ 1506.215829][ T4713] usb 1-1: config 0 descriptor??
[ 1506.278947][ T4713] ch341 1-1:0.0: ch341-uart converter detected
[ 1506.497856][ T4713] usb 1-1: failed to receive control message: -71
[ 1506.504400][ T4713] ch341-uart: probe of ttyUSB0 failed with error -71
[ 1506.570496][ T4713] usb 1-1: USB disconnect, device number 33
[ 1506.590539][ T4713] ch341 1-1:0.0: device disconnected
[ 1509.083400][T29454] fscrypt (sda1, inode 2069): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[ 1509.097284][T29454] fscrypt (sda1, inode 2069): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[ 1510.263464][T29482] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1510.405669][T29482] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1510.670535][T29482] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1511.576865][T29493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7219'.
[ 1511.838252][T28370] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1512.236119][T29507] devtmpfs: Too few inodes for current use
[ 1512.254200][T29507] netlink: 'syz.0.7223': attribute type 10 has an invalid length.
[ 1512.277704][T29507] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7223'.
[ 1512.319296][T29507] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1512.346939][T29507] bridge0: port 3(veth0_to_bridge) entered disabled state
[ 1512.378170][T29507] device veth0_to_bridge entered promiscuous mode
[ 1512.395198][T29507] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.443896][T29507] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1512.451234][T29507] bridge0: port 3(veth0_to_bridge) entered forwarding state
[ 1512.568507][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.580927][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.593430][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.605810][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.618183][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.630539][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.642946][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.655379][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.667767][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1512.680182][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1514.318376][   T26] audit: type=1326 audit(1719873661.399:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29530 comm="syz.2.7229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82ec175b99 code=0x0
[ 1516.518448][T29555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7234'.
[ 1517.204398][T29546] loop1: detected capacity change from 0 to 32768
[ 1517.236280][T29546] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.7232 (29546)
[ 1517.377624][T29546] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 1517.429050][T29546] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1517.451991][T29572] kernel profiling enabled (shift: 25)
[ 1517.488322][T29546] BTRFS info (device loop1): using free space tree
[ 1517.587612][    C1] ==================================================================
[ 1517.595725][    C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0
[ 1517.602968][    C1] Read of size 8 at addr ffffc900044df380 by task syz.0.7240/29570
[ 1517.610952][    C1] 
[ 1517.613301][    C1] CPU: 1 PID: 29570 Comm: syz.0.7240 Not tainted 6.1.96-syzkaller #0
[ 1517.621476][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1517.631662][    C1] Call Trace:
[ 1517.634963][    C1]  <IRQ>
[ 1517.637833][    C1]  dump_stack_lvl+0x1e3/0x2cb
[ 1517.642548][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1517.648036][    C1]  ? panic+0x764/0x764
[ 1517.652132][    C1]  ? _printk+0xd1/0x111
[ 1517.656332][    C1]  print_report+0x15f/0x4f0
[ 1517.660858][    C1]  ? __virt_addr_valid+0xb9/0x520
[ 1517.665914][    C1]  ? profile_pc+0xa4/0xe0
[ 1517.670359][    C1]  kasan_report+0x136/0x160
[ 1517.674891][    C1]  ? profile_pc+0xa4/0xe0
[ 1517.679260][    C1]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 1517.685174][    C1]  profile_pc+0xa4/0xe0
[ 1517.689369][    C1]  profile_tick+0xee/0x170
[ 1517.693809][    C1]  tick_sched_timer+0x390/0x550
[ 1517.698677][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[ 1517.704235][    C1]  __hrtimer_run_queues+0x5a7/0xe50
[ 1517.709462][    C1]  ? hrtimer_interrupt+0x980/0x980
[ 1517.714590][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[ 1517.720683][    C1]  hrtimer_interrupt+0x392/0x980
[ 1517.725666][    C1]  __sysvec_apic_timer_interrupt+0x156/0x580
[ 1517.731690][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[ 1517.737353][    C1]  </IRQ>
[ 1517.740300][    C1]  <TASK>
[ 1517.743341][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1517.749355][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[ 1517.755886][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36
[ 1517.775518][    C1] RSP: 0018:ffffc900044df380 EFLAGS: 00000206
[ 1517.781609][    C1] RAX: 3c024187012d0e00 RBX: 1ffff9200089be74 RCX: ffffffff816ad45a
[ 1517.789598][    C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001
[ 1517.797676][    C1] RBP: ffffc900044df410 R08: dffffc0000000000 R09: fffffbfff209384d
[ 1517.801663][    C0] net_ratelimit: 4110 callbacks suppressed
[ 1517.801680][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.805738][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 1517.811999][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.823405][    C1] R13: 1ffff9200089be70 R14: ffffc900044df3a0 R15: 0000000000000246
[ 1517.823434][    C1]  ? mark_lock+0x9a/0x340
[ 1517.823472][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1517.832164][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.843303][    C1]  ? rcu_is_watching+0x11/0xb0
[ 1517.843331][    C1]  ? lru_add_fn+0xc06/0x1ac0
[ 1517.843354][    C1]  folio_batch_move_lru+0x5b3/0x720
[ 1517.851701][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.855640][    C1]  ? folio_add_lru+0xd70/0xd70
[ 1517.860834][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.872421][    C1]  ? lru_add_drain_cpu+0x8b0/0x8b0
[ 1517.872450][    C1]  ? folio_batch_add_and_move+0x98/0x2b0
[ 1517.877675][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.881871][    C1]  ? folio_add_lru+0xd70/0xd70
[ 1517.887375][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.898925][    C1]  ? folio_add_lru+0x34d/0xd70
[ 1517.898948][    C1]  folio_add_lru+0x46a/0xd70
[ 1517.898969][    C1]  shmem_get_folio_gfp+0x1713/0x3470
[ 1517.904079][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.915595][    C1]  ? shmem_get_folio+0xa0/0xa0
[ 1517.915629][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1517.921070][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.926353][    C1]  shmem_fault+0x235/0x9c0
[ 1517.938609][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1517.942964][    C1]  ? shmem_fallocate+0x11c0/0x11c0
[ 1518.024642][    C1]  ? filemap_read_folio+0x780/0x780
[ 1518.029852][    C1]  ? count_memcg_event_mm+0x90/0x410
[ 1518.035151][    C1]  __do_fault+0x136/0x4f0
[ 1518.039489][    C1]  handle_mm_fault+0x3412/0x5340
[ 1518.044445][    C1]  ? follow_page_pte+0x39c/0x1880
[ 1518.049483][    C1]  ? numa_migrate_prep+0x250/0x250
[ 1518.054678][    C1]  ? follow_page_mask+0xb8a/0x1420
[ 1518.059805][    C1]  ? check_vma_flags+0x440/0x4d0
[ 1518.064798][    C1]  __get_user_pages+0x4f3/0x1190
[ 1518.069765][    C1]  ? populate_vma_page_range+0x2b0/0x2b0
[ 1518.075414][    C1]  populate_vma_page_range+0x217/0x2b0
[ 1518.080981][    C1]  __mm_populate+0x275/0x440
[ 1518.085587][    C1]  ? check_vma_flags+0x4d0/0x4d0
[ 1518.090534][    C1]  ? xfd_validate_state+0x6a/0x140
[ 1518.095653][    C1]  vm_mmap_pgoff+0x22b/0x2d0
[ 1518.100338][    C1]  ? account_locked_vm+0xe0/0xe0
[ 1518.105281][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1518.111271][    C1]  ? ksys_mmap_pgoff+0xd8/0x6d0
[ 1518.116229][    C1]  do_syscall_64+0x3b/0xb0
[ 1518.120664][    C1]  ? clear_bhb_loop+0x45/0xa0
[ 1518.125350][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1518.131251][    C1] RIP: 0033:0x7f8312975b99
[ 1518.135685][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1518.155296][    C1] RSP: 002b:00007f8313798048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1518.163711][    C1] RAX: ffffffffffffffda RBX: 00007f8312b03fa0 RCX: 00007f8312975b99
[ 1518.171696][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
[ 1518.179670][    C1] RBP: 00007f83129f677e R08: ffffffffffffffff R09: 0000000000000000
[ 1518.187752][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 1518.195719][    C1] R13: 000000000000000b R14: 00007f8312b03fa0 R15: 00007fffaa368ec8
[ 1518.203704][    C1]  </TASK>
[ 1518.206721][    C1] 
[ 1518.209042][    C1] The buggy address belongs to stack of task syz.0.7240/29570
[ 1518.216484][    C1]  and is located at offset 0 in frame:
[ 1518.222015][    C1]  _raw_spin_unlock_irqrestore+0x0/0x130
[ 1518.227651][    C1] 
[ 1518.229972][    C1] This frame has 1 object:
[ 1518.234376][    C1]  [32, 40) 'flags.i.i.i.i'
[ 1518.234387][    C1] 
[ 1518.241189][    C1] The buggy address belongs to the virtual mapping at
[ 1518.241189][    C1]  [ffffc900044d8000, ffffc900044e1000) created by:
[ 1518.241189][    C1]  copy_process+0x637/0x4060
[ 1518.258823][    C1] 
[ 1518.261140][    C1] The buggy address belongs to the physical page:
[ 1518.267541][    C1] page:ffffea0001d0af40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x742bd
[ 1518.277780][    C1] memcg:ffff888020486882
[ 1518.282007][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1518.289123][    C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 1518.297703][    C1] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888020486882
[ 1518.306276][    C1] page dumped because: kasan: bad access detected
[ 1518.312684][    C1] page_owner tracks the page as allocated
[ 1518.318390][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 1505581155935, free_ts 1505363650142
[ 1518.336265][    C1]  post_alloc_hook+0x18d/0x1b0
[ 1518.341027][    C1]  get_page_from_freelist+0x31a1/0x3320
[ 1518.346588][    C1]  __alloc_pages+0x28d/0x770
[ 1518.351195][    C1]  __vmalloc_node_range+0x92b/0x1490
[ 1518.356488][    C1]  dup_task_struct+0x3e5/0x6d0
[ 1518.361247][    C1]  copy_process+0x637/0x4060
[ 1518.365832][    C1]  kernel_clone+0x222/0x920
[ 1518.370335][    C1]  kernel_thread+0x152/0x1d0
[ 1518.374921][    C1]  kthreadd+0x596/0x760
[ 1518.379084][    C1]  ret_from_fork+0x1f/0x30
[ 1518.383500][    C1] page last free stack trace:
[ 1518.388248][    C1]  free_unref_page_prepare+0xf63/0x1120
[ 1518.393789][    C1]  free_unref_page_list+0x663/0x900
[ 1518.398981][    C1]  release_pages+0x2836/0x2b40
[ 1518.403749][    C1]  __pagevec_release+0x80/0xf0
[ 1518.408518][    C1]  invalidate_mapping_pagevec+0x621/0x730
[ 1518.414244][    C1]  btrfs_get_bdev_and_sb+0x109/0x190
[ 1518.419534][    C1]  open_fs_devices+0x28c/0x1180
[ 1518.424565][    C1]  btrfs_mount_root+0x531/0x930
[ 1518.429416][    C1]  legacy_get_tree+0xeb/0x180
[ 1518.434111][    C1]  vfs_get_tree+0x88/0x270
[ 1518.438614][    C1]  vfs_kern_mount+0xb8/0x150
[ 1518.443217][    C1]  btrfs_mount+0x39b/0xb40
[ 1518.447628][    C1]  legacy_get_tree+0xeb/0x180
[ 1518.452312][    C1]  vfs_get_tree+0x88/0x270
[ 1518.456730][    C1]  do_new_mount+0x2ba/0xb40
[ 1518.461234][    C1]  __se_sys_mount+0x2d5/0x3c0
[ 1518.465915][    C1] 
[ 1518.468232][    C1] Memory state around the buggy address:
[ 1518.473856][    C1]  ffffc900044df280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1518.481913][    C1]  ffffc900044df300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1518.489966][    C1] >ffffc900044df380: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00
[ 1518.498029][    C1]                    ^
[ 1518.502084][    C1]  ffffc900044df400: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
[ 1518.510146][    C1]  ffffc900044df480: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[ 1518.518455][    C1] ==================================================================
[ 1518.526501][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1518.533861][    C1] CPU: 1 PID: 29570 Comm: syz.0.7240 Not tainted 6.1.96-syzkaller #0
[ 1518.541925][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1518.551972][    C1] Call Trace:
[ 1518.555334][    C1]  <IRQ>
[ 1518.558187][    C1]  dump_stack_lvl+0x1e3/0x2cb
[ 1518.562874][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1518.568339][    C1]  ? panic+0x764/0x764
[ 1518.572398][    C1]  ? rcu_is_watching+0x11/0xb0
[ 1518.577157][    C1]  ? lock_release+0xd6/0xa20
[ 1518.581755][    C1]  ? vscnprintf+0x59/0x80
[ 1518.586084][    C1]  panic+0x318/0x764
[ 1518.589979][    C1]  ? __wake_up_klogd+0xcc/0x100
[ 1518.594840][    C1]  ? check_panic_on_warn+0x1d/0xa0
[ 1518.599956][    C1]  ? memcpy_page_flushcache+0xfc/0xfc
[ 1518.605414][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1518.610620][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1518.616518][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1518.621372][    C1]  check_panic_on_warn+0x7e/0xa0
[ 1518.626394][    C1]  ? profile_pc+0xa4/0xe0
[ 1518.630746][    C1]  end_report+0x66/0x110
[ 1518.634985][    C1]  kasan_report+0x143/0x160
[ 1518.639490][    C1]  ? profile_pc+0xa4/0xe0
[ 1518.643925][    C1]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 1518.649820][    C1]  profile_pc+0xa4/0xe0
[ 1518.653985][    C1]  profile_tick+0xee/0x170
[ 1518.658404][    C1]  tick_sched_timer+0x390/0x550
[ 1518.663250][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[ 1518.668793][    C1]  __hrtimer_run_queues+0x5a7/0xe50
[ 1518.674171][    C1]  ? hrtimer_interrupt+0x980/0x980
[ 1518.679286][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[ 1518.685455][    C1]  hrtimer_interrupt+0x392/0x980
[ 1518.690402][    C1]  __sysvec_apic_timer_interrupt+0x156/0x580
[ 1518.696386][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[ 1518.702043][    C1]  </IRQ>
[ 1518.704975][    C1]  <TASK>
[ 1518.707922][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1518.713910][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[ 1518.720415][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36
[ 1518.740028][    C1] RSP: 0018:ffffc900044df380 EFLAGS: 00000206
[ 1518.746123][    C1] RAX: 3c024187012d0e00 RBX: 1ffff9200089be74 RCX: ffffffff816ad45a
[ 1518.754117][    C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001
[ 1518.762091][    C1] RBP: ffffc900044df410 R08: dffffc0000000000 R09: fffffbfff209384d
[ 1518.770150][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 1518.778119][    C1] R13: 1ffff9200089be70 R14: ffffc900044df3a0 R15: 0000000000000246
[ 1518.786121][    C1]  ? mark_lock+0x9a/0x340
[ 1518.790462][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1518.795315][    C1]  ? rcu_is_watching+0x11/0xb0
[ 1518.800090][    C1]  ? lru_add_fn+0xc06/0x1ac0
[ 1518.804686][    C1]  folio_batch_move_lru+0x5b3/0x720
[ 1518.809885][    C1]  ? folio_add_lru+0xd70/0xd70
[ 1518.814837][    C1]  ? lru_add_drain_cpu+0x8b0/0x8b0
[ 1518.819978][    C1]  ? folio_batch_add_and_move+0x98/0x2b0
[ 1518.825620][    C1]  ? folio_add_lru+0xd70/0xd70
[ 1518.830383][    C1]  ? folio_add_lru+0x34d/0xd70
[ 1518.835145][    C1]  folio_add_lru+0x46a/0xd70
[ 1518.839822][    C1]  shmem_get_folio_gfp+0x1713/0x3470
[ 1518.845225][    C1]  ? shmem_get_folio+0xa0/0xa0
[ 1518.849992][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1518.855190][    C1]  shmem_fault+0x235/0x9c0
[ 1518.859609][    C1]  ? shmem_fallocate+0x11c0/0x11c0
[ 1518.864722][    C1]  ? filemap_read_folio+0x780/0x780
[ 1518.869941][    C1]  ? count_memcg_event_mm+0x90/0x410
[ 1518.875236][    C1]  __do_fault+0x136/0x4f0
[ 1518.879568][    C1]  handle_mm_fault+0x3412/0x5340
[ 1518.884520][    C1]  ? follow_page_pte+0x39c/0x1880
[ 1518.889678][    C1]  ? numa_migrate_prep+0x250/0x250
[ 1518.894819][    C1]  ? follow_page_mask+0xb8a/0x1420
[ 1518.899965][    C1]  ? check_vma_flags+0x440/0x4d0
[ 1518.904919][    C1]  __get_user_pages+0x4f3/0x1190
[ 1518.909879][    C1]  ? populate_vma_page_range+0x2b0/0x2b0
[ 1518.915529][    C1]  populate_vma_page_range+0x217/0x2b0
[ 1518.921026][    C1]  __mm_populate+0x275/0x440
[ 1518.925645][    C1]  ? check_vma_flags+0x4d0/0x4d0
[ 1518.930596][    C1]  ? xfd_validate_state+0x6a/0x140
[ 1518.935718][    C1]  vm_mmap_pgoff+0x22b/0x2d0
[ 1518.940319][    C1]  ? account_locked_vm+0xe0/0xe0
[ 1518.945407][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1518.951604][    C1]  ? ksys_mmap_pgoff+0xd8/0x6d0
[ 1518.956653][    C1]  do_syscall_64+0x3b/0xb0
[ 1518.961115][    C1]  ? clear_bhb_loop+0x45/0xa0
[ 1518.965902][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1518.971842][    C1] RIP: 0033:0x7f8312975b99
[ 1518.976257][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1518.995872][    C1] RSP: 002b:00007f8313798048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1519.004291][    C1] RAX: ffffffffffffffda RBX: 00007f8312b03fa0 RCX: 00007f8312975b99
[ 1519.012287][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
[ 1519.020261][    C1] RBP: 00007f83129f677e R08: ffffffffffffffff R09: 0000000000000000
[ 1519.028333][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 1519.036312][    C1] R13: 000000000000000b R14: 00007f8312b03fa0 R15: 00007fffaa368ec8
[ 1519.044303][    C1]  </TASK>
[ 1519.047594][    C1] Kernel Offset: disabled
[ 1519.051946][    C1] Rebooting in 86400 seconds..