last executing test programs: 3.940166764s ago: executing program 1 (id=321): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 2.967599743s ago: executing program 1 (id=333): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.842274425s ago: executing program 1 (id=334): unshare(0x22020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x3}}, 0x2e) getsockopt(r1, 0x111, 0x2, 0x0, &(0x7f0000000080)) 2.626697049s ago: executing program 1 (id=336): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x5, "0441b6"}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 2.60329977s ago: executing program 2 (id=337): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.543454811s ago: executing program 1 (id=338): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) 2.468612003s ago: executing program 2 (id=339): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 2.330710035s ago: executing program 1 (id=341): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 2.329971606s ago: executing program 2 (id=342): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.201728058s ago: executing program 2 (id=344): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.518671881s ago: executing program 3 (id=350): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x890b, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x8, 0x0, 0xffff}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @local}, {0x4f20, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "25081b84b4d1329004f5d610c6a3c5f82f8d46df0c868e4196428a7ba9fe24fd", "f4fd4f74929fbf0d72507c06f0baeb95", {"dd17b88ffce84ac2e1b19ff44df1b75a", "eab7f3207f48ea1eedf7a650eaddae5f"}}}}}, 0x86) 1.418151593s ago: executing program 0 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x5c}}, 0x0) 1.317727385s ago: executing program 3 (id=352): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.215718607s ago: executing program 2 (id=353): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x1080}, {r0, 0xc200}], 0x2, 0x0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 1.202814557s ago: executing program 0 (id=354): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1.188426508s ago: executing program 3 (id=355): setuid(0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 1.014680701s ago: executing program 3 (id=356): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000200)}}], 0x2, 0x40000043, 0x0) 1.002539991s ago: executing program 0 (id=357): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b40)={[{@errors_remount}, {@discard}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@gid}, {@dmask={'dmask', 0x3d, 0x9}}], [{@smackfshat={'smackfshat', 0x3d, ':$\x8d\x82R\xe5\x03\x1eM\xfc\x17\x85\x01f\xb1D!\xdfV\xa7\x95\xb0\x0f\xe7|\xfd\xe0\xcc\x94v\xaasq\xd0\xe0\xb0\xa3\xe5a\xbfc\xa9\xba\x8d\xb0\xbaZ\xa5P\x84\xb3G0\xe2\xdf\x99\x8e\xc6Ix\xcdo\xc5kz\x99\x8a8\xd3\xca\"y\xc4\x9bW\x02EWz\xe4\xf6\x86\xdbl}Z\xd1\xf7\xc8wN\xde\xd5\xdd~O\xc6\x8e\xdc\f\xffAQo\xcb\xffF\x10\xfa\x81\xba\x18 \xce\xb2\xa8a\xe3\xfe\xd7c\x97\xfcl\xa3\xd6t\vS\x8e\x18=\nT\r\xc2\x1a\x1e\xfa'}}]}, 0x1, 0x152a, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4089, 0xff9) 790.568745ms ago: executing program 0 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 742.686976ms ago: executing program 3 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c57596", 0xf}, {&(0x7f0000000280)='\x00\x00\x00\x00', 0x4}, {&(0x7f00000001c0)="38c8114f", 0x4}], 0x3) 581.101509ms ago: executing program 0 (id=360): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 469.895591ms ago: executing program 3 (id=361): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113d00000000008510000002000000850000000700000095000000000000d14300a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000f900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff0200"/51], 0xfdef) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 245.268586ms ago: executing program 0 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_READ(r7, 0x8008700b, &(0x7f00000000c0)) setrlimit(0xa, &(0x7f0000000040)={0x0, 0xc08}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="050000007d000000430000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB="00004498c600"/24], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r8}, 0x38) r9 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r9, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="132336feff", @ANYRES32=r8, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001819", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r8, @ANYBLOB="0000000000000000980500000800000085000000a5000000"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x16, &(0x7f00000004c0)=""/22, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x210, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000000880)=[{0x2, 0x3, 0x5, 0x2}, {0x3, 0x4001, 0x1, 0x8}], 0x10, 0x2}, 0x94) pipe(&(0x7f0000000240)) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x1098448, &(0x7f00000002c0)=ANY=[@ANYBLOB='tRans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRES32=r5, @ANYBLOB=',\x00']) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) semget$private(0x0, 0x0, 0x4c6) 0s ago: executing program 2 (id=363): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 82.339630][ T5778] cgroup: Unknown subsys name 'net' [ 82.534224][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.232230][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.953093][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.994534][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.002150][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.009815][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.018205][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.031459][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.033448][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.040225][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.048599][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.054380][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.061050][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.068811][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.074863][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.081592][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.090222][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.096216][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.102541][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.112435][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.118430][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.140678][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.154530][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.162341][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.169792][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.178688][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.646759][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.780266][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 86.825052][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.925391][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.953658][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.961049][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.969216][ T5790] bridge_slave_0: entered allmulticast mode [ 86.979575][ T5790] bridge_slave_0: entered promiscuous mode [ 86.989802][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.997232][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.004432][ T5790] bridge_slave_1: entered allmulticast mode [ 87.011723][ T5790] bridge_slave_1: entered promiscuous mode [ 87.129900][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.138089][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.145323][ T5788] bridge_slave_0: entered allmulticast mode [ 87.152827][ T5788] bridge_slave_0: entered promiscuous mode [ 87.163616][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.176920][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.225089][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.232561][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.240411][ T5788] bridge_slave_1: entered allmulticast mode [ 87.248043][ T5788] bridge_slave_1: entered promiscuous mode [ 87.297861][ T5790] team0: Port device team_slave_0 added [ 87.321875][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.329200][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.336648][ T5791] bridge_slave_0: entered allmulticast mode [ 87.344680][ T5791] bridge_slave_0: entered promiscuous mode [ 87.387388][ T5790] team0: Port device team_slave_1 added [ 87.408625][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.417077][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.424308][ T5791] bridge_slave_1: entered allmulticast mode [ 87.433628][ T5791] bridge_slave_1: entered promiscuous mode [ 87.443882][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.467379][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.474565][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.482126][ T5789] bridge_slave_0: entered allmulticast mode [ 87.489629][ T5789] bridge_slave_0: entered promiscuous mode [ 87.531747][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.559936][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.568454][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.575889][ T5789] bridge_slave_1: entered allmulticast mode [ 87.583342][ T5789] bridge_slave_1: entered promiscuous mode [ 87.593409][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.611436][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.636673][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.643678][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.670082][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.742384][ T5788] team0: Port device team_slave_0 added [ 87.750534][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.758132][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.784605][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.836678][ T5788] team0: Port device team_slave_1 added [ 87.895038][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.908152][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.921424][ T5791] team0: Port device team_slave_0 added [ 87.945544][ T5790] hsr_slave_0: entered promiscuous mode [ 87.952097][ T5790] hsr_slave_1: entered promiscuous mode [ 87.973686][ T5791] team0: Port device team_slave_1 added [ 87.980324][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.988010][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.014046][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.027184][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.034182][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.060470][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.133910][ T5789] team0: Port device team_slave_0 added [ 88.160388][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.168407][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.195139][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.201387][ T5803] Bluetooth: hci1: command tx timeout [ 88.211807][ T5799] Bluetooth: hci0: command tx timeout [ 88.219140][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.226901][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.252897][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.263583][ T5799] Bluetooth: hci2: command tx timeout [ 88.269684][ T5803] Bluetooth: hci3: command tx timeout [ 88.272672][ T5789] team0: Port device team_slave_1 added [ 88.364604][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.372127][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.399253][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.427437][ T5788] hsr_slave_0: entered promiscuous mode [ 88.433946][ T5788] hsr_slave_1: entered promiscuous mode [ 88.441010][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.449488][ T5788] Cannot create hsr debugfs directory [ 88.467559][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.474556][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.500841][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.529360][ T5791] hsr_slave_0: entered promiscuous mode [ 88.536032][ T5791] hsr_slave_1: entered promiscuous mode [ 88.542556][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.550350][ T5791] Cannot create hsr debugfs directory [ 88.673971][ T5789] hsr_slave_0: entered promiscuous mode [ 88.680657][ T5789] hsr_slave_1: entered promiscuous mode [ 88.688320][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.696093][ T5789] Cannot create hsr debugfs directory [ 88.991365][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.014883][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.025318][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.052729][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.120722][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.137544][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.154749][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.165350][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.257561][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.283003][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.293836][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.315221][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.417902][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.430228][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.440536][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.452937][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.525082][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.545300][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.611685][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.625367][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.632836][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.668388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.675560][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.694008][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.712493][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.719714][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.748398][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.755559][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.841390][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.887712][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.911867][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.950628][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.957867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.974974][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.982213][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.053064][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.087277][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.094509][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.170727][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.178032][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.258125][ T5799] Bluetooth: hci0: command tx timeout [ 90.263613][ T5799] Bluetooth: hci1: command tx timeout [ 90.335991][ T5799] Bluetooth: hci2: command tx timeout [ 90.341794][ T5803] Bluetooth: hci3: command tx timeout [ 90.355037][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.434814][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.521618][ T5791] veth0_vlan: entered promiscuous mode [ 90.582911][ T5791] veth1_vlan: entered promiscuous mode [ 90.643534][ T5790] veth0_vlan: entered promiscuous mode [ 90.664604][ T5790] veth1_vlan: entered promiscuous mode [ 90.695040][ T5791] veth0_macvtap: entered promiscuous mode [ 90.730904][ T5791] veth1_macvtap: entered promiscuous mode [ 90.765359][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.810912][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.837739][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.855393][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.877634][ T5790] veth0_macvtap: entered promiscuous mode [ 90.891066][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.902062][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.911273][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.920139][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.940761][ T5790] veth1_macvtap: entered promiscuous mode [ 91.032607][ T5788] veth0_vlan: entered promiscuous mode [ 91.083264][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.094355][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.107748][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.130410][ T5788] veth1_vlan: entered promiscuous mode [ 91.148236][ T5789] veth0_vlan: entered promiscuous mode [ 91.172898][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.183825][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.197970][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.207241][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.216785][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.234258][ T5789] veth1_vlan: entered promiscuous mode [ 91.253715][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.262665][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.272035][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.281790][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.318943][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.327082][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.383931][ T5788] veth0_macvtap: entered promiscuous mode [ 91.449129][ T5789] veth0_macvtap: entered promiscuous mode [ 91.468043][ T5789] veth1_macvtap: entered promiscuous mode [ 91.489074][ T5788] veth1_macvtap: entered promiscuous mode [ 91.556162][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.577330][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.581045][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.602116][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.612283][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.626935][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.641689][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.666779][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.684952][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.698035][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.709063][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.721105][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.754179][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.770062][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.805843][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.815568][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.830265][ T5887] netlink: set zone limit has 8 unknown bytes [ 91.912081][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.925196][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.946213][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.946469][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.966885][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.977528][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.988576][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.008108][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.023044][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.067866][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.093106][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.103917][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.114542][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.124674][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.135602][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.148611][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.199949][ T27] cfg80211: failed to load regulatory.db [ 92.210151][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.245806][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.266005][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.275259][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.331320][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.343985][ T5799] Bluetooth: hci1: command tx timeout [ 92.351910][ T5803] Bluetooth: hci0: command tx timeout [ 92.367805][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.416005][ T5803] Bluetooth: hci2: command tx timeout [ 92.421488][ T5803] Bluetooth: hci3: command tx timeout [ 92.439698][ T5897] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 92.480743][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.484427][ T5899] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 92.497305][ T5899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.508718][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.538391][ T5899] team0: Port device geneve0 added [ 92.759277][ T5899] syz.3.9 (5899) used greatest stack depth: 20904 bytes left [ 92.838381][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.870919][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.901864][ T5903] ip6gretap0: entered promiscuous mode [ 92.911107][ T5903] ip6gretap0: left promiscuous mode [ 93.059735][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 93.090845][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.105871][ T5906] netlink: set zone limit has 8 unknown bytes [ 93.114385][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.483996][ T23] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 93.501570][ T23] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 93.810061][ T5929] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.850550][ T5930] Zero length message leads to an empty skb [ 93.891862][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.417255][ T5799] Bluetooth: hci1: command tx timeout [ 94.422840][ T5803] Bluetooth: hci0: command tx timeout [ 94.453709][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 94.506861][ T5803] Bluetooth: hci3: command tx timeout [ 94.514075][ T5799] Bluetooth: hci2: command tx timeout [ 94.537541][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 94.577988][ T5938] vlan2: entered promiscuous mode [ 94.583707][ T5938] bond0: entered promiscuous mode [ 94.588952][ T5938] bond_slave_0: entered promiscuous mode [ 94.595390][ T5938] bond_slave_1: entered promiscuous mode [ 94.867536][ T5942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 94.891925][ T5942] netlink: set zone limit has 8 unknown bytes [ 95.126627][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.340331][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.365873][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.385386][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 95.409195][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.427981][ T23] usb 4-1: config 0 descriptor?? [ 95.448139][ T5956] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 95.507555][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.528452][ T5956] bond0: (slave team0): Enslaving as an active interface with an up link [ 95.544171][ T5957] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 95.610661][ T5957] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 95.677545][ T5956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.325590][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 96.351734][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.436336][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 96.550854][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.748349][ T5974] hsr_slave_1 (unregistering): left promiscuous mode [ 96.763091][ T5978] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 96.801987][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.819613][ T5978] team0: entered promiscuous mode [ 96.836998][ T5978] team_slave_0: entered promiscuous mode [ 96.843114][ T5978] team_slave_1: entered promiscuous mode [ 96.862982][ T5978] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.880634][ T5980] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 96.942312][ T5980] syz_tun: entered promiscuous mode [ 96.969296][ T5980] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.986092][ T5799] Bluetooth: hci3: command tx timeout [ 97.018137][ T5981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.035631][ T5984] Illegal XDP return value 4294967274 on prog (id 8) dev syz_tun, expect packet loss! [ 97.804423][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 97.886229][ T5880] usb 4-1: USB disconnect, device number 2 [ 98.101147][ T6006] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 98.149001][ T6009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.160636][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.193643][ T6006] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.241424][ T6007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.277707][ T6010] bond_slave_0: entered promiscuous mode [ 98.283737][ T6010] bond_slave_1: entered promiscuous mode [ 98.289659][ T6010] team_slave_0: entered promiscuous mode [ 98.295556][ T6010] team_slave_1: entered promiscuous mode [ 98.301367][ T6010] geneve0: entered promiscuous mode [ 98.310554][ T6010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.321175][ T6010] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 98.330396][ T6009] netlink: 'syz.0.47': attribute type 12 has an invalid length. [ 98.338664][ T6009] netlink: 'syz.0.47': attribute type 29 has an invalid length. [ 98.347377][ T6009] netlink: 148 bytes leftover after parsing attributes in process `syz.0.47'. [ 98.357640][ T6009] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 98.365242][ T6009] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 98.393532][ T6009] netlink: 39 bytes leftover after parsing attributes in process `syz.0.47'. [ 98.833577][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 99.155834][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.379693][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.401907][ T5828] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.414034][ T5828] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.428763][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.448166][ T5828] usb 2-1: config 0 descriptor?? [ 99.969258][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 100.179676][ T6048] tipc: Started in network mode [ 100.184731][ T6048] tipc: Node identity ce35230d7a18, cluster identity 4711 [ 100.216167][ T6048] tipc: Enabled bearer , priority 0 [ 100.231081][ T6048] syzkaller0: entered promiscuous mode [ 100.236851][ T6048] syzkaller0: entered allmulticast mode [ 100.276978][ T6048] tipc: Resetting bearer [ 100.294163][ T6047] tipc: Resetting bearer [ 100.315078][ T6047] tipc: Disabling bearer [ 100.744582][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 101.402677][ T6093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.447347][ T6093] bond_slave_0: entered promiscuous mode [ 101.453282][ T6093] bond_slave_1: entered promiscuous mode [ 101.460121][ T6093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.471158][ T6093] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 101.512030][ T6093] bridge_slave_0: left allmulticast mode [ 101.519737][ T6093] bridge_slave_0: left promiscuous mode [ 101.526478][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.544131][ T6093] bridge_slave_1: left allmulticast mode [ 101.549965][ T6093] bridge_slave_1: left promiscuous mode [ 101.560354][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.572900][ T6093] bond0: (slave bond_slave_0): Releasing backup interface [ 101.587153][ T6093] bond_slave_0: left promiscuous mode [ 101.604666][ T6093] bond0: (slave bond_slave_1): Releasing backup interface [ 101.619538][ T6093] bond_slave_1: left promiscuous mode [ 101.644835][ T6093] team0: Port device team_slave_0 removed [ 101.670355][ T6093] team0: Port device team_slave_1 removed [ 101.682601][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.690344][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.701175][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.709198][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.726973][ T6093] bond1: (slave macvlan2): Removing an active aggregator [ 101.734907][ T6093] bond1: (slave macvlan2): Releasing backup interface [ 101.784660][ T6096] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 102.045283][ T5880] usb 2-1: USB disconnect, device number 2 [ 102.108453][ T6093] syz.2.79 (6093) used greatest stack depth: 19536 bytes left [ 102.252336][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 103.136072][ T5175] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.338222][ T5175] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.350527][ T5175] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.361845][ T5175] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 103.371703][ T5175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.391458][ T5175] usb 4-1: config 0 descriptor?? [ 104.305875][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.404498][ T6171] netlink: 168 bytes leftover after parsing attributes in process `syz.1.109'. [ 104.535911][ T786] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 104.544543][ T786] usb 3-1: config 0 has no interface number 0 [ 104.561916][ T786] usb 3-1: too many endpoints for config 0 interface 64 altsetting 64: 64, using maximum allowed: 30 [ 104.575261][ T786] usb 3-1: config 0 interface 64 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 104.594427][ T786] usb 3-1: config 0 interface 64 has no altsetting 0 [ 104.602514][ T786] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 104.617395][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.633564][ T786] usb 3-1: config 0 descriptor?? [ 104.860950][ T786] usb 3-1: string descriptor 0 read error: -32 [ 104.886906][ T786] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 105.723978][ T786] usb 3-1: USB disconnect, device number 2 [ 105.924199][ T23] usb 4-1: USB disconnect, device number 3 [ 106.248326][ T6223] tipc: Enabling of bearer rejected, failed to enable media [ 107.167891][ T6256] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 107.202797][ T6256] syz_tun: entered promiscuous mode [ 107.211476][ T6256] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.246032][ T6259] bond1: option mode: unable to set because the bond device has slaves [ 107.286931][ T6256] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 107.658266][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 107.932307][ T6282] tipc: Started in network mode [ 107.941666][ T6282] tipc: Node identity 7ee30cde1dfc, cluster identity 4711 [ 107.951942][ T6282] tipc: Enabled bearer , priority 0 [ 108.094052][ T6282] syzkaller0: entered promiscuous mode [ 108.105091][ T6282] syzkaller0: entered allmulticast mode [ 108.114268][ T6282] tipc: Resetting bearer [ 108.341773][ T3515] tipc: Resetting bearer [ 108.351157][ T6281] tipc: Resetting bearer [ 109.076114][ T5175] tipc: Node number set to 1662979294 [ 109.893356][ T6281] tipc: Disabling bearer [ 109.902635][ T6290] syzkaller1: entered promiscuous mode [ 109.908307][ T6290] syzkaller1: entered allmulticast mode [ 110.015880][ T6306] tap0: tun_chr_ioctl cmd 1074025677 [ 110.021420][ T6306] tap0: linktype set to 0 [ 110.191211][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 111.343543][ T6365] tipc: Enabled bearer , priority 0 [ 111.352156][ T6365] syzkaller0: entered promiscuous mode [ 111.358386][ T6365] syzkaller0: entered allmulticast mode [ 111.392313][ T6365] tipc: Resetting bearer [ 111.414552][ T6364] tipc: Resetting bearer [ 111.437284][ T6364] tipc: Disabling bearer [ 112.325088][ T6394] tipc: Enabled bearer , priority 0 [ 112.364041][ T6394] syzkaller0: entered promiscuous mode [ 112.393396][ T6394] syzkaller0: entered allmulticast mode [ 112.452706][ T6394] tipc: Resetting bearer [ 112.475202][ T6393] tipc: Resetting bearer [ 112.524035][ T6393] tipc: Disabling bearer [ 112.966101][ T6415] netlink: 'syz.2.198': attribute type 12 has an invalid length. [ 113.931298][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 114.475873][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.681306][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.710344][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.724784][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.737634][ T8] usb 3-1: config 0 descriptor?? [ 114.747041][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 115.056035][ T5799] Bluetooth: hci3: command tx timeout [ 115.154767][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.170053][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.181244][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.191936][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.202983][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 115.216984][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 115.236486][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 115.244067][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 115.256958][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 115.264452][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 115.277439][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 115.285405][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 115.295035][ T8] pwc: recv_control_msg error -32 req 02 val 2900 [ 115.304029][ T8] pwc: recv_control_msg error -32 req 02 val 2800 [ 115.313487][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.325745][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.343353][ T8] pwc: Registered as video103. [ 115.366162][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 115.422234][ T8] usb 3-1: USB disconnect, device number 3 [ 118.850820][ T6545] tipc: Started in network mode [ 118.856027][ T6545] tipc: Node identity 7f000001, cluster identity 4711 [ 118.868402][ T6545] tipc: Enabling of bearer rejected, failed to enable media [ 122.682135][ T6635] syz.1.292[6635]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 123.460407][ T6635] loop1: detected capacity change from 0 to 32768 [ 123.516978][ T6635] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.292 (6635) [ 123.643449][ T6635] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 123.666582][ T6635] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.706139][ T6635] BTRFS info (device loop1): force zlib compression, level 3 [ 123.733995][ T6635] BTRFS info (device loop1): force clearing of disk cache [ 123.747958][ T6635] BTRFS info (device loop1): setting nodatasum [ 123.754191][ T6635] BTRFS info (device loop1): use zlib compression, level 3 [ 123.775801][ T6635] BTRFS info (device loop1): allowing degraded mounts [ 123.782698][ T6635] BTRFS info (device loop1): enabling disk space caching [ 123.807754][ T6635] BTRFS info (device loop1): disk space caching is enabled [ 124.052458][ T6635] BTRFS info (device loop1): enabling ssd optimizations [ 124.116014][ T6635] BTRFS info (device loop1): auto enabling async discard [ 124.152459][ T6635] BTRFS info (device loop1): rebuilding free space tree [ 124.246187][ T6635] BTRFS info (device loop1): disabling free space tree [ 124.253524][ T6635] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.275873][ T6635] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.586897][ T6681] tipc: Enabled bearer , priority 0 [ 124.664879][ T6681] tipc: Resetting bearer [ 124.770231][ T6680] tipc: Disabling bearer [ 125.441200][ T5788] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 126.003238][ T6702] netlink: 52 bytes leftover after parsing attributes in process `syz.1.312'. [ 127.358405][ T6735] tipc: Enabled bearer , priority 0 [ 127.377722][ T6735] tipc: Resetting bearer [ 127.398032][ T6733] tipc: Disabling bearer [ 128.208554][ T6765] tipc: Enabled bearer , priority 0 [ 128.250759][ T6765] tipc: Resetting bearer [ 128.292075][ T6764] tipc: Disabling bearer [ 129.401159][ T6802] loop0: detected capacity change from 0 to 256 [ 129.416998][ T6802] exfat: Unknown parameter 'smackfshat' [ 129.482488][ T5792] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.464864][ T6817] loop2: detected capacity change from 0 to 1024 [ 130.475108][ T6817] ======================================================= [ 130.475108][ T6817] WARNING: The mand mount option has been deprecated and [ 130.475108][ T6817] and is ignored by this kernel. Remove the mand [ 130.475108][ T6817] option from the mount to silence this warning. [ 130.475108][ T6817] ======================================================= [ 130.802679][ T6817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.896005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.951778][ T6817] ================================================================== [ 130.959919][ T6817] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 130.967700][ T6817] Read of size 18446744073709551588 at addr ffff88807bf8a040 by task syz.2.363/6817 [ 130.977725][ T6817] [ 130.980155][ T6817] CPU: 0 PID: 6817 Comm: syz.2.363 Not tainted syzkaller #0 [ 130.987472][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.997573][ T6817] Call Trace: [ 131.000878][ T6817] [ 131.003854][ T6817] dump_stack_lvl+0x16c/0x230 [ 131.008583][ T6817] ? read_lock_is_recursive+0x20/0x20 [ 131.013997][ T6817] ? show_regs_print_info+0x20/0x20 [ 131.019244][ T6817] ? load_image+0x3b0/0x3b0 [ 131.023789][ T6817] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 131.029215][ T6817] ? __virt_addr_valid+0x18c/0x540 [ 131.034651][ T6817] ? __virt_addr_valid+0x469/0x540 [ 131.039812][ T6817] print_report+0xac/0x220 [ 131.044273][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.049778][ T6817] kasan_report+0x117/0x150 [ 131.054331][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.059841][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.065392][ T6817] kasan_check_range+0x288/0x290 [ 131.070374][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.075877][ T6817] __asan_memmove+0x29/0x70 [ 131.080427][ T6817] ext4_xattr_set_entry+0x94b/0x1e90 [ 131.085774][ T6817] ext4_xattr_block_set+0xae3/0x32a0 [ 131.091110][ T6817] ? ext4_destroy_inode+0xe8/0x1b0 [ 131.096270][ T6817] ? ext4_destroy_inode+0x1b0/0x1b0 [ 131.101529][ T6817] ? proc_nr_inodes+0x230/0x230 [ 131.106422][ T6817] ? do_raw_spin_unlock+0x121/0x230 [ 131.112108][ T6817] ? _raw_spin_unlock+0x28/0x40 [ 131.117010][ T6817] ? ext4_xattr_block_find+0x350/0x350 [ 131.122512][ T6817] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 131.127929][ T6817] ext4_xattr_set_handle+0xbff/0x1290 [ 131.133355][ T6817] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 131.139381][ T6817] ? __ext4_journal_start_sb+0x259/0x570 [ 131.145059][ T6817] ext4_xattr_set+0x22d/0x320 [ 131.149789][ T6817] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 131.155372][ T6817] ? evm_protected_xattr_common+0x170/0x190 [ 131.161315][ T6817] ? evm_protect_xattr+0x534/0x7a0 [ 131.166451][ T6817] ? ext4_xattr_security_get+0x40/0x40 [ 131.172371][ T6817] __vfs_setxattr+0x431/0x470 [ 131.177109][ T6817] __vfs_setxattr_noperm+0x12d/0x5e0 [ 131.182414][ T6817] vfs_setxattr+0x16c/0x2f0 [ 131.186940][ T6817] ? xattr_permission+0x470/0x470 [ 131.191977][ T6817] ? __mnt_want_write+0x223/0x2a0 [ 131.197032][ T6817] ? path_setxattr+0x314/0x550 [ 131.201818][ T6817] path_setxattr+0x362/0x550 [ 131.206428][ T6817] ? simple_xattrs_free+0x150/0x150 [ 131.211662][ T6817] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 131.217665][ T6817] ? lock_chain_count+0x20/0x20 [ 131.222529][ T6817] __x64_sys_setxattr+0xbb/0xd0 [ 131.227495][ T6817] do_syscall_64+0x55/0xb0 [ 131.231957][ T6817] ? clear_bhb_loop+0x40/0x90 [ 131.236658][ T6817] ? clear_bhb_loop+0x40/0x90 [ 131.241358][ T6817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.247285][ T6817] RIP: 0033:0x7f282a18ebe9 [ 131.251726][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.271350][ T6817] RSP: 002b:00007f282af57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 131.279810][ T6817] RAX: ffffffffffffffda RBX: 00007f282a3c5fa0 RCX: 00007f282a18ebe9 [ 131.287799][ T6817] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 131.295792][ T6817] RBP: 00007f282a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.303785][ T6817] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 131.311777][ T6817] R13: 00007f282a3c6038 R14: 00007f282a3c5fa0 R15: 00007fff5291a168 [ 131.319781][ T6817] [ 131.322811][ T6817] [ 131.325152][ T6817] Allocated by task 6817: [ 131.329487][ T6817] kasan_set_track+0x4e/0x70 [ 131.334092][ T6817] __kasan_kmalloc+0x8f/0xa0 [ 131.338694][ T6817] __kmalloc_node_track_caller+0xb2/0x230 [ 131.344438][ T6817] kmemdup+0x2b/0x70 [ 131.348355][ T6817] ext4_xattr_block_set+0x9e5/0x32a0 [ 131.353654][ T6817] ext4_xattr_set_handle+0xbff/0x1290 [ 131.359040][ T6817] ext4_xattr_set+0x22d/0x320 [ 131.363737][ T6817] __vfs_setxattr+0x431/0x470 [ 131.368440][ T6817] __vfs_setxattr_noperm+0x12d/0x5e0 [ 131.373748][ T6817] vfs_setxattr+0x16c/0x2f0 [ 131.378305][ T6817] path_setxattr+0x362/0x550 [ 131.382915][ T6817] __x64_sys_setxattr+0xbb/0xd0 [ 131.387782][ T6817] do_syscall_64+0x55/0xb0 [ 131.392219][ T6817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.398136][ T6817] [ 131.400473][ T6817] Last potentially related work creation: [ 131.406190][ T6817] kasan_save_stack+0x3e/0x60 [ 131.410883][ T6817] __kasan_record_aux_stack+0xaf/0xc0 [ 131.416281][ T6817] call_rcu+0x158/0x930 [ 131.420548][ T6817] rht_deferred_worker+0x1bdd/0x2410 [ 131.425839][ T6817] process_scheduled_works+0xa45/0x15b0 [ 131.431411][ T6817] worker_thread+0xa55/0xfc0 [ 131.436044][ T6817] kthread+0x2fa/0x390 [ 131.440122][ T6817] ret_from_fork+0x48/0x80 [ 131.444549][ T6817] ret_from_fork_asm+0x11/0x20 [ 131.449370][ T6817] [ 131.451698][ T6817] The buggy address belongs to the object at ffff88807bf8a000 [ 131.451698][ T6817] which belongs to the cache kmalloc-1k of size 1024 [ 131.465763][ T6817] The buggy address is located 64 bytes inside of [ 131.465763][ T6817] 1024-byte region [ffff88807bf8a000, ffff88807bf8a400) [ 131.479052][ T6817] [ 131.481393][ T6817] The buggy address belongs to the physical page: [ 131.487960][ T6817] page:ffffea0001efe200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807bf8a800 pfn:0x7bf88 [ 131.499420][ T6817] head:ffffea0001efe200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.508364][ T6817] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 131.516888][ T6817] page_type: 0xffffffff() [ 131.521228][ T6817] raw: 00fff00000000840 ffff888017841dc0 0000000000000000 dead000000000001 [ 131.529839][ T6817] raw: ffff88807bf8a800 000000008010000f 00000001ffffffff 0000000000000000 [ 131.538434][ T6817] page dumped because: kasan: bad access detected [ 131.544859][ T6817] page_owner tracks the page as allocated [ 131.550575][ T6817] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3491, tgid 3491 (kworker/u4:11), ts 93795415102, free_ts 93782054302 [ 131.571341][ T6817] post_alloc_hook+0x1cd/0x210 [ 131.576125][ T6817] get_page_from_freelist+0x195c/0x19f0 [ 131.581691][ T6817] __alloc_pages+0x1e3/0x460 [ 131.586308][ T6817] alloc_slab_page+0x5d/0x170 [ 131.591010][ T6817] new_slab+0x87/0x2e0 [ 131.595098][ T6817] ___slab_alloc+0xc6d/0x12f0 [ 131.599790][ T6817] __kmem_cache_alloc_node+0x1a2/0x260 [ 131.605264][ T6817] __kmalloc+0xa4/0x240 [ 131.609470][ T6817] ___neigh_create+0x6d2/0x2440 [ 131.614333][ T6817] ip6_finish_output2+0x159e/0x1650 [ 131.619539][ T6817] ndisc_send_skb+0xbed/0x14b0 [ 131.624339][ T6817] addrconf_dad_completed+0x79f/0xd40 [ 131.629814][ T6817] addrconf_dad_work+0xc4e/0x14e0 [ 131.635097][ T6817] process_scheduled_works+0xa45/0x15b0 [ 131.640656][ T6817] worker_thread+0xa55/0xfc0 [ 131.645600][ T6817] kthread+0x2fa/0x390 [ 131.649676][ T6817] page last free stack trace: [ 131.654348][ T6817] free_unref_page_prepare+0x7ce/0x8e0 [ 131.659832][ T6817] free_unref_page+0x32/0x2e0 [ 131.664534][ T6817] __slab_free+0x35e/0x410 [ 131.668973][ T6817] qlist_free_all+0x75/0xe0 [ 131.673514][ T6817] kasan_quarantine_reduce+0x143/0x160 [ 131.679074][ T6817] __kasan_slab_alloc+0x22/0x80 [ 131.683941][ T6817] slab_post_alloc_hook+0x6e/0x4d0 [ 131.689072][ T6817] kmem_cache_alloc+0x11e/0x2e0 [ 131.693968][ T6817] vm_area_dup+0x27/0x270 [ 131.698312][ T6817] __split_vma+0x19f/0xc00 [ 131.702747][ T6817] do_vmi_align_munmap+0x2dc/0x1660 [ 131.708043][ T6817] do_vmi_munmap+0x252/0x2d0 [ 131.712649][ T6817] mmap_region+0x741/0x2020 [ 131.717177][ T6817] do_mmap+0x92f/0x10a0 [ 131.721351][ T6817] vm_mmap_pgoff+0x1c0/0x400 [ 131.725953][ T6817] ksys_mmap_pgoff+0x520/0x700 [ 131.730743][ T6817] [ 131.733071][ T6817] Memory state around the buggy address: [ 131.738707][ T6817] ffff88807bf89f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.746773][ T6817] ffff88807bf89f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.754860][ T6817] >ffff88807bf8a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.762928][ T6817] ^ [ 131.769085][ T6817] ffff88807bf8a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.777154][ T6817] ffff88807bf8a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.785223][ T6817] ================================================================== [ 131.798808][ T6817] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.806059][ T6817] CPU: 1 PID: 6817 Comm: syz.2.363 Not tainted syzkaller #0 [ 131.813366][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.823431][ T6817] Call Trace: [ 131.826728][ T6817] [ 131.829690][ T6817] dump_stack_lvl+0x16c/0x230 [ 131.834385][ T6817] ? show_regs_print_info+0x20/0x20 [ 131.839595][ T6817] ? load_image+0x3b0/0x3b0 [ 131.844109][ T6817] panic+0x2c0/0x710 [ 131.848109][ T6817] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.854292][ T6817] ? bpf_jit_dump+0xd0/0xd0 [ 131.858857][ T6817] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 131.864789][ T6817] ? _raw_spin_unlock+0x40/0x40 [ 131.869690][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.875188][ T6817] check_panic_on_warn+0x84/0xa0 [ 131.880191][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.885683][ T6817] end_report+0x6f/0x140 [ 131.889954][ T6817] kasan_report+0x128/0x150 [ 131.894476][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.899958][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.905464][ T6817] kasan_check_range+0x288/0x290 [ 131.910511][ T6817] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 131.915997][ T6817] __asan_memmove+0x29/0x70 [ 131.920535][ T6817] ext4_xattr_set_entry+0x94b/0x1e90 [ 131.925860][ T6817] ext4_xattr_block_set+0xae3/0x32a0 [ 131.931181][ T6817] ? ext4_destroy_inode+0xe8/0x1b0 [ 131.936316][ T6817] ? ext4_destroy_inode+0x1b0/0x1b0 [ 131.941539][ T6817] ? proc_nr_inodes+0x230/0x230 [ 131.946402][ T6817] ? do_raw_spin_unlock+0x121/0x230 [ 131.951615][ T6817] ? _raw_spin_unlock+0x28/0x40 [ 131.956574][ T6817] ? ext4_xattr_block_find+0x350/0x350 [ 131.962051][ T6817] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 131.967443][ T6817] ext4_xattr_set_handle+0xbff/0x1290 [ 131.972864][ T6817] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 131.978873][ T6817] ? __ext4_journal_start_sb+0x259/0x570 [ 131.984550][ T6817] ext4_xattr_set+0x22d/0x320 [ 131.989255][ T6817] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 131.994828][ T6817] ? evm_protected_xattr_common+0x170/0x190 [ 132.000746][ T6817] ? evm_protect_xattr+0x534/0x7a0 [ 132.005875][ T6817] ? ext4_xattr_security_get+0x40/0x40 [ 132.011357][ T6817] __vfs_setxattr+0x431/0x470 [ 132.016075][ T6817] __vfs_setxattr_noperm+0x12d/0x5e0 [ 132.021378][ T6817] vfs_setxattr+0x16c/0x2f0 [ 132.025897][ T6817] ? xattr_permission+0x470/0x470 [ 132.030974][ T6817] ? __mnt_want_write+0x223/0x2a0 [ 132.036109][ T6817] ? path_setxattr+0x314/0x550 [ 132.040886][ T6817] path_setxattr+0x362/0x550 [ 132.045493][ T6817] ? simple_xattrs_free+0x150/0x150 [ 132.050716][ T6817] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 132.056707][ T6817] ? lock_chain_count+0x20/0x20 [ 132.061618][ T6817] __x64_sys_setxattr+0xbb/0xd0 [ 132.066501][ T6817] do_syscall_64+0x55/0xb0 [ 132.071027][ T6817] ? clear_bhb_loop+0x40/0x90 [ 132.075730][ T6817] ? clear_bhb_loop+0x40/0x90 [ 132.080436][ T6817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.086356][ T6817] RIP: 0033:0x7f282a18ebe9 [ 132.090787][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.110582][ T6817] RSP: 002b:00007f282af57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 132.119014][ T6817] RAX: ffffffffffffffda RBX: 00007f282a3c5fa0 RCX: 00007f282a18ebe9 [ 132.127011][ T6817] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 132.135008][ T6817] RBP: 00007f282a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 132.143126][ T6817] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 132.151288][ T6817] R13: 00007f282a3c6038 R14: 00007f282a3c5fa0 R15: 00007fff5291a168 [ 132.159289][ T6817] [ 132.162568][ T6817] Kernel Offset: disabled [ 132.166930][ T6817] Rebooting in 86400 seconds..