last executing test programs: 7.374859722s ago: executing program 4 (id=407): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0x4d8, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf, 0xfff3}, {}, {0x3, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4ac, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_POLICE={0x480, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x5, 0x0, {0x8, 0x2, 0x2, 0x3, 0x7, 0x2}, {0x9, 0x0, 0x9, 0x5, 0x2, 0x1}, 0x81, 0x1ff, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x8, 0x800, 0xe1, 0x9, {0x2, 0x2, 0x2, 0x9, 0xc, 0x9}, {0x2, 0x1, 0x1, 0xffff, 0x6, 0x1}, 0x0, 0x5f9, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x2, 0x8, 0x4, 0x0, 0x6, 0x5, 0xffffffff, 0x1, 0x34c9, 0x4, 0xcf, 0x0, 0x3, 0x10001, 0x1, 0x0, 0x8000, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0xfffffff9, 0xf4f9, 0x6, 0x80, 0x9, 0x8, 0x81, 0x4, 0x400, 0x5, 0x4, 0xf7a6, 0xbb, 0x401, 0x8, 0xffffff56, 0x0, 0x3, 0x7, 0x9, 0x9, 0x7fffffff, 0x81, 0x5, 0x3, 0x46ab, 0x9, 0x7c, 0x40, 0x2, 0x1, 0x2, 0x7, 0x4, 0x7, 0x8, 0x1, 0x400, 0x1, 0x1, 0x7, 0x0, 0x6, 0x11, 0x101, 0x2, 0x9, 0x800, 0xf6e, 0x80000001, 0xffffffff, 0x51, 0x101, 0x3, 0x497, 0x5, 0x0, 0x1, 0xd53e, 0x7fffffff, 0x2, 0x1, 0x1400, 0x1, 0x10001, 0xf, 0x6b, 0x9, 0xb4ba, 0x9, 0x9, 0xd698, 0x80000001, 0x6, 0xffffffff, 0x7, 0x401, 0xffff, 0x7ff, 0x9, 0x8, 0x101, 0x3, 0x2, 0xea9, 0x6, 0x677c, 0x7, 0x4, 0x9, 0x3, 0xffff8001, 0x3ef, 0x8, 0x4, 0x0, 0x5, 0x1, 0x8, 0x5, 0x7fff, 0x7, 0x7, 0x2, 0x0, 0x401, 0x2, 0x0, 0x3, 0x4, 0x10001, 0x7, 0x8, 0xfffffff8, 0x8, 0x5, 0xdf, 0x9, 0x9, 0x5, 0x8, 0x9, 0xfffffffd, 0x9, 0x34, 0x100, 0x2, 0x3, 0x0, 0x3, 0x2, 0x3, 0x3, 0x0, 0x91a2, 0x9, 0x1ff, 0x5, 0x0, 0x5, 0xda9, 0x6, 0x9, 0xfa3e, 0x1000, 0x8, 0x8, 0x3, 0x9, 0x6, 0xb3f, 0x3, 0x1, 0x8000, 0xec0f, 0x80000001, 0x7fffffff, 0xffffffff, 0x3, 0x6, 0x4b6, 0x7, 0x3, 0x3, 0x5, 0x4, 0x8, 0x8, 0x2, 0x8, 0x3, 0x3dc1, 0x5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x80, 0x101, 0x5, 0x7, 0x1, 0x19, 0x1, 0x9, 0x3, 0x401, 0x1, 0x4, 0xffffffff, 0xb, 0x7, 0x9, 0xfffffffb, 0x2, 0x7fff, 0x2, 0x3, 0x7, 0x7, 0x3, 0x2, 0x80, 0x7, 0xfffffffd, 0xffff, 0x586b, 0xd46d, 0x3, 0xc5, 0xd3, 0x8, 0xcc, 0x468, 0x6, 0x1, 0x1000, 0x9, 0x3, 0xfffffff7, 0x1, 0x81, 0x6f, 0x2, 0x8, 0x4, 0x2, 0x5, 0xffffffff, 0x800, 0x380, 0x6]}]}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_MASK={0x8}]}}]}, 0x4d8}}, 0x24000801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.591949375s ago: executing program 4 (id=413): r0 = socket$pppoe(0x18, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18200000000000000000000000000000b7080000000000007baaf8ff0000fe00b508"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001d00)="6fb2d67d", 0x4}], 0x1}}], 0x3, 0x400c000) 5.995266402s ago: executing program 4 (id=418): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x0, 0xfffffffe, 0x0, 0x0, 0x100}) 5.834928743s ago: executing program 3 (id=419): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000000008000200050000000a0006"], 0x4c}}, 0x0) 5.280303902s ago: executing program 1 (id=422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0xc020) 5.061606046s ago: executing program 3 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.552921209s ago: executing program 4 (id=425): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x44, 0xd, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.508796069s ago: executing program 1 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}}}, 0x24}}, 0x0) 4.320322023s ago: executing program 2 (id=427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0x0, 0xffffffffffffffff}) 3.935810916s ago: executing program 0 (id=428): r0 = socket$pppoe(0x18, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18200000000000000000000000000000b7080000000000007baaf8ff0000fe00b508"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001d00)="6fb2d67d", 0x4}], 0x1}}], 0x3, 0x400c000) 3.900592425s ago: executing program 1 (id=429): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.672608861s ago: executing program 2 (id=430): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="310bfa87f07b33172adc95ef4439c7326557c4d5c3d34309d26a308012b5f72451dc369d0677b8f4", 0x28}], 0x1}}], 0x1, 0x10) 3.57070595s ago: executing program 4 (id=431): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.457064349s ago: executing program 2 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r4, 0x4a05c18f2097b6cd, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 3.344811776s ago: executing program 2 (id=433): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000000008000200050000000a0006"], 0x4c}}, 0x0) 3.071325723s ago: executing program 3 (id=434): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x38}, 0x0) 3.065836782s ago: executing program 4 (id=435): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x5, "d69a5a861aaa8de09dbf70a7e3daab092148c641d9881d5c077252f49646aeb2680000000000000050ba8c08f3a9e542ead79f6b104d357abcda41b7001796c3", {0x200006, 0x9a}}) 2.779279167s ago: executing program 0 (id=436): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) writev(r0, &(0x7f0000001980)=[{&(0x7f00000005c0)="c5d04a3be1655653af70a2be8a6f3f7f7cd8579e75c47bea726bfb729f9d9aca98dd70d81bfe8bdec5cba9226e0cb6cf53805a13e7f5f840d339efa8ec6fe5a71def2c65c7ec8a8428af23ad7c5499fd1344a3eaf6a1aabee22ad498b262354859e8bb140abbcb097014bf83941b3620417c670d47c28285adc0eca9063fece24838466b57e1928b6c73bdcd50d6e2b3fdc1ca98a24e71e0a54a875ffa8faca9f7c8c3ae1aad5a627fc8cc5418ad61a12a96b96ea05ece3008f4e41fd71b53c06eeee6b2c2ad5d1b", 0xc8}, {&(0x7f00000004c0)="a43a0e6bce75429a0b85db60d738f51e54d67684b699cf4f30ba3b674405de8ecadd108e88014754ef0edbb99403363334c1bd8d881aad3e94843693f77459ad4ad20494d88227cb8c8b594587746ba31964756f49aa073542957c468dd4b984ef31e6f8440b355b72fcbe88bf471c3252955649c8d89551", 0x78}, {&(0x7f00000006c0)="a17a9fd95b241c18177fca03dd5b68d074777179e4bfb456b2860c084bae52b46e9cb6f36296cd075669166cc77db891c9c774ed312ecf8c3c21b5a7807a375bb3e8e4cd85f5e0e6c7e16af852127d83adacaa7f33ca5a59558594cf33884a4df884e1f241e51df93e5e97928ad4c194eeba153bf3264f8a1e1f5ddcea5a6def1c590a495529c1f5cdefe8803eeede4470b0f0f73a2cf239b8cd754158ff825f2392c89039ff1d5a0eccc1f6d46a15de8a5e47a8fd0a11d15e43262b", 0xbc}, {&(0x7f0000000780)="fb1bf8e24e849cbe70eda49bf5868dc2112d7e31262c85743b45e0696553e2412c3cf03ad47bd87c938ec68e64d0fb449553b0fd2b62984780bc13ba4f21053e105507fc620f38efa8803446d3954069db2619e149e0bc1786e1dc50153fbec0be2324e713386e2ff4d52f5e63a6c173cd9fe007b166023467d1ef468744e37c43708f931e10a03a855c90a20fbb676f2f9c8622d4757165c58de5d1965d1aff0808d55ccd2cb01ef35668c938ba2929f50cdaaeb68bf3485342984752a794908d9e5ecfd4bf874186aa609cc5e9311def74ca19f6f25b68aed815272eec95cf70cfdc24aec58b02d4edb58f40dafa4ef340c8dd50f0348ec904059584a5ee176f40092614fd15b8737389dadf9a73f62c2b24edc66e5bb811315c9282a7483a202cd969aacb6794df09bb220371d8bda20475e65929514f01492896de948a36acd9588f8cf53fa9d608be5b0e3f30e0f8a5593d2f97d0f57c319be285671a77fcd29b728e94b3c1ac5e64031ca2ca170546978f8b2d9ce49f3e7f3694a63c3eb95b749a8ba198e92dabdc24a1fa41a10403b7acc570a5f6844d3426f45fff2310a93b5f7df9928a7c4557e8aef1c5ea747f794f408de107d17a627115e70dde9891c2cd114d58fa9fbc59040fcf5f265a55134b00028f147ea760081c3f208dd0d859979eecd342308f420d7a416a197c1d7a5c58781fe457598185c2c82548467822bb1f350e2dcd289b971f596683062955451a3a4c9fd693d065c43a07621386356d42f02f51850119ddd170868dabd11dd1a4d6bda04cad7ffd7a03f338e035cc06205947ac5dce0b1f6a48a968c10a21018d970711071a2eea2da69d2bfcf187a7c1cb5541e221cd9068122a2ba47b04c19f1408ee068cc8c957fee3f754f6816c0b64aa307265cce3078febd1916a589ffd24e918a640662c46a73851f70cff19bbfd604e77b99408bc35c8da4a298a85403a10186b59966d276cb2840d98678d88afbcd6dc01d8c517d75adb7e799973341481c0cb8e03e049f34ba296eae8315ba13c14700e4a70c384af502956fa2e0c105198cf1560d96b94407321527948890897133ac023ba40ebf11a542027d846127e61706570ed3eb4eaf32164f92a05a17bd34a372f954ef558f7d6dd9f2c609e58dd299b2847c9663ff65d87f5cb962fd9928d013cbfd77551e778a9121df654e810b162638fc4596019a9cb3135fea24f7b8490f40e84a09cca5620de4e161d8367723fb44f38b04d4a587ee4ae8c07a8e8f8c2afcc3b2fbc85fbc9dcda965cb3ac7a9bfbaa7891c697aaeafae5953ccdbf21649b746b768731f750492eb08bf2dd7f129b1a6fd6acc5ade59c1919f3fbbd77cf5db20ff284b8cba527f2ba25935b145c386c6c54151436", 0x3e1}], 0x4) 2.436678831s ago: executing program 0 (id=437): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x3, 0x4, 0xb11d, 0x5, "de5f1a50396c11f406ff3847925d0c8757d622"}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000900000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.174181623s ago: executing program 2 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 2.019339372s ago: executing program 3 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, 0x1330c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14044800}, 0x20048040) 1.28707211s ago: executing program 0 (id=440): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.060536081s ago: executing program 1 (id=441): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x6, r2, r1}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r5}) 1.038862342s ago: executing program 2 (id=442): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 774.688669ms ago: executing program 3 (id=443): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r2, 0xfffffeff) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 656.26576ms ago: executing program 1 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 635.367605ms ago: executing program 0 (id=445): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 227.206859ms ago: executing program 0 (id=446): r0 = socket$pppoe(0x18, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18200000000000000000000000000000b7080000000000007baaf8ff0000fe00b508"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001d00)="6fb2d67d", 0x4}], 0x1}}], 0x3, 0x400c000) 36.563022ms ago: executing program 3 (id=447): r0 = getpid() syz_pidfd_open(r0, 0x0) getpid() r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) 0s ago: executing program 1 (id=448): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000000008000200050000000a0006"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 173.694240][ T5756] cgroup: Unknown subsys name 'net' [ 173.843396][ T5756] cgroup: Unknown subsys name 'cpuset' [ 173.859064][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 219.262786][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.289526][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.296378][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.104791][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.119441][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.143550][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.151559][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.162576][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.175336][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.183868][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.185908][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.203435][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.205101][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.214538][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.230326][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.239849][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.244699][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.250927][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.266018][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.275814][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.285525][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.357046][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.366406][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.383211][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.408329][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.421789][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.431610][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.525656][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.553341][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.563470][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.577952][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.595669][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.604986][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.820540][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 224.841349][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 224.909586][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 225.313691][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 225.355072][ T5773] Bluetooth: hci0: command tx timeout [ 225.360720][ T5773] Bluetooth: hci2: command tx timeout [ 225.438639][ T5773] Bluetooth: hci1: command tx timeout [ 225.595552][ T5773] Bluetooth: hci3: command tx timeout [ 225.638537][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 225.679427][ T5773] Bluetooth: hci4: command tx timeout [ 226.094211][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.101936][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.112633][ T5775] bridge_slave_0: entered allmulticast mode [ 226.121636][ T5775] bridge_slave_0: entered promiscuous mode [ 226.237583][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.246157][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.254025][ T5779] bridge_slave_0: entered allmulticast mode [ 226.263041][ T5779] bridge_slave_0: entered promiscuous mode [ 226.274912][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.283402][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.291204][ T5775] bridge_slave_1: entered allmulticast mode [ 226.300598][ T5775] bridge_slave_1: entered promiscuous mode [ 226.370664][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.378498][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.386384][ T5772] bridge_slave_0: entered allmulticast mode [ 226.395555][ T5772] bridge_slave_0: entered promiscuous mode [ 226.413737][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.421442][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.431096][ T5779] bridge_slave_1: entered allmulticast mode [ 226.440226][ T5779] bridge_slave_1: entered promiscuous mode [ 226.450713][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.458951][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.468851][ T5772] bridge_slave_1: entered allmulticast mode [ 226.481982][ T5772] bridge_slave_1: entered promiscuous mode [ 226.676094][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.685404][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.693345][ T5784] bridge_slave_0: entered allmulticast mode [ 226.701971][ T5784] bridge_slave_0: entered promiscuous mode [ 226.749458][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.769714][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.813948][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.832356][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.843452][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.851117][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.859079][ T5784] bridge_slave_1: entered allmulticast mode [ 226.868140][ T5784] bridge_slave_1: entered promiscuous mode [ 227.061331][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.077337][ T5779] team0: Port device team_slave_0 added [ 227.095726][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.111380][ T5779] team0: Port device team_slave_1 added [ 227.180471][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.188363][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.196297][ T5787] bridge_slave_0: entered allmulticast mode [ 227.205326][ T5787] bridge_slave_0: entered promiscuous mode [ 227.382820][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.395310][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.403173][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.410724][ T5787] bridge_slave_1: entered allmulticast mode [ 227.421169][ T5787] bridge_slave_1: entered promiscuous mode [ 227.432479][ T5773] Bluetooth: hci2: command tx timeout [ 227.438141][ T5773] Bluetooth: hci0: command tx timeout [ 227.468621][ T5772] team0: Port device team_slave_0 added [ 227.478124][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.485547][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.512816][ T5773] Bluetooth: hci1: command tx timeout [ 227.518891][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.537591][ T5775] team0: Port device team_slave_0 added [ 227.546781][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.554135][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.580745][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.605585][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.673813][ T5773] Bluetooth: hci3: command tx timeout [ 227.674314][ T5772] team0: Port device team_slave_1 added [ 227.693737][ T5775] team0: Port device team_slave_1 added [ 227.753157][ T5773] Bluetooth: hci4: command tx timeout [ 227.783888][ T5784] team0: Port device team_slave_0 added [ 227.835405][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.912680][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.919881][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.946448][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.993676][ T5784] team0: Port device team_slave_1 added [ 228.003084][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.010234][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.037077][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.055999][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.095424][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.102855][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.129341][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.170482][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.177859][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.204279][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.363792][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.371000][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.398638][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.452490][ T5787] team0: Port device team_slave_0 added [ 228.474602][ T5779] hsr_slave_0: entered promiscuous mode [ 228.485354][ T5779] hsr_slave_1: entered promiscuous mode [ 228.502942][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.510486][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.536978][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.571995][ T5787] team0: Port device team_slave_1 added [ 228.839306][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.847449][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.874191][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.897225][ T5772] hsr_slave_0: entered promiscuous mode [ 228.908513][ T5772] hsr_slave_1: entered promiscuous mode [ 228.917461][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.925308][ T5772] Cannot create hsr debugfs directory [ 228.993070][ T5775] hsr_slave_0: entered promiscuous mode [ 229.001986][ T5775] hsr_slave_1: entered promiscuous mode [ 229.010189][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.018256][ T5775] Cannot create hsr debugfs directory [ 229.067514][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.074930][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.101522][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.207472][ T5784] hsr_slave_0: entered promiscuous mode [ 229.216468][ T5784] hsr_slave_1: entered promiscuous mode [ 229.227220][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.235164][ T5784] Cannot create hsr debugfs directory [ 229.519861][ T51] Bluetooth: hci0: command tx timeout [ 229.526262][ T5777] Bluetooth: hci2: command tx timeout [ 229.592351][ T5773] Bluetooth: hci1: command tx timeout [ 229.667131][ T5787] hsr_slave_0: entered promiscuous mode [ 229.677952][ T5787] hsr_slave_1: entered promiscuous mode [ 229.686686][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.694685][ T5787] Cannot create hsr debugfs directory [ 229.752616][ T5773] Bluetooth: hci3: command tx timeout [ 229.844418][ T5773] Bluetooth: hci4: command tx timeout [ 230.428027][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.537999][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.556782][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.627389][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.830274][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.855051][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.919634][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.937443][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.961228][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.997560][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.028873][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.051830][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.077567][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.124779][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.246707][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.291320][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.406713][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.494114][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.585510][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.594934][ T5773] Bluetooth: hci2: command tx timeout [ 231.596155][ T51] Bluetooth: hci0: command tx timeout [ 231.641941][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.672922][ T51] Bluetooth: hci1: command tx timeout [ 231.833352][ T51] Bluetooth: hci3: command tx timeout [ 231.914019][ T51] Bluetooth: hci4: command tx timeout [ 231.958563][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.220839][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.406378][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.414256][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.531994][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.576770][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.584554][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.631662][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.669315][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.807581][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.928207][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.948616][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.957108][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.973823][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.043275][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.050941][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.066428][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.074174][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.147791][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.189839][ T1822] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.197636][ T1822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.211590][ T1822] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.219300][ T1822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.271538][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.279355][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.485227][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.626772][ T5784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.637798][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.733737][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.741421][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.763768][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.771443][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.022863][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.511670][ T5779] veth0_vlan: entered promiscuous mode [ 235.588335][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.651882][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.688231][ T5779] veth1_vlan: entered promiscuous mode [ 235.878538][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.074174][ T5775] veth0_vlan: entered promiscuous mode [ 236.098998][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.123550][ T5779] veth0_macvtap: entered promiscuous mode [ 236.231629][ T5779] veth1_macvtap: entered promiscuous mode [ 236.265584][ T5775] veth1_vlan: entered promiscuous mode [ 236.476797][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.500274][ T5772] veth0_vlan: entered promiscuous mode [ 236.617673][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.681354][ T5775] veth0_macvtap: entered promiscuous mode [ 236.693972][ T5772] veth1_vlan: entered promiscuous mode [ 236.746711][ T5787] veth0_vlan: entered promiscuous mode [ 236.759486][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.770076][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.779277][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.788465][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.835456][ T5775] veth1_macvtap: entered promiscuous mode [ 236.900885][ T5787] veth1_vlan: entered promiscuous mode [ 237.031922][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.045579][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.059935][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.148015][ T5772] veth0_macvtap: entered promiscuous mode [ 237.177306][ T5772] veth1_macvtap: entered promiscuous mode [ 237.209302][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.220681][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.235202][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.339302][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.351386][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.362913][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.373730][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.388137][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.445503][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.456838][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.466433][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.475963][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.498702][ T5787] veth0_macvtap: entered promiscuous mode [ 237.558353][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.570758][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.581947][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.593612][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.607793][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.656788][ T5787] veth1_macvtap: entered promiscuous mode [ 237.768509][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.779366][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.790124][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.800708][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.025683][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.036624][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.046839][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.057670][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.067948][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.080694][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.096386][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.322861][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.333672][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.343879][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.356222][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.366965][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.377844][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.393249][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.524106][ T5784] veth0_vlan: entered promiscuous mode [ 238.608057][ T5784] veth1_vlan: entered promiscuous mode [ 238.636391][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.647099][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.657076][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.666448][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.031116][ T5784] veth0_macvtap: entered promiscuous mode [ 239.118014][ T5784] veth1_macvtap: entered promiscuous mode [ 239.333239][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.346361][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.357847][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.369201][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.379408][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.390430][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.400667][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.411556][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.426029][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.525755][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.536543][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.546805][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.557634][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.567806][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.578749][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.590494][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.601441][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.615995][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.977673][ T5784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.986859][ T5784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.998318][ T5784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.008555][ T5784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.685949][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.694329][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.886339][ T3808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.895187][ T3808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.195977][ T5779] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 244.213500][ T5032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.221573][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.492762][ T5032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.500846][ T5032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.790944][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.799514][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.990270][ T3676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.998669][ T3676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.523365][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.531425][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.821564][ T3808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.830095][ T3808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.960163][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.968597][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.033150][ T5952] loop0: detected capacity change from 0 to 32768 [ 247.043206][ T5952] XFS: ikeep mount option is deprecated. [ 247.161005][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.169300][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.458616][ T5971] loop3: detected capacity change from 0 to 8 [ 247.677500][ T5952] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 248.137706][ T5971] SQUASHFS error: xz decompression failed, data probably corrupt [ 248.146130][ T5971] SQUASHFS error: Failed to read block 0x108: -5 [ 248.153536][ T5971] SQUASHFS error: Unable to read metadata cache entry [106] [ 248.161081][ T5971] SQUASHFS error: Unable to read inode 0x11f [ 248.350248][ T5952] XFS (loop0): Ending clean mount [ 249.472888][ T5775] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 251.994251][ T5991] syz.1.13 uses old SIOCAX25GETINFO [ 252.087654][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 253.290131][ T5993] loop1: detected capacity change from 0 to 256 [ 253.724251][ T5993] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 253.879888][ T5999] loop4: detected capacity change from 0 to 256 [ 253.964070][ T5999] ======================================================= [ 253.964070][ T5999] WARNING: The mand mount option has been deprecated and [ 253.964070][ T5999] and is ignored by this kernel. Remove the mand [ 253.964070][ T5999] option from the mount to silence this warning. [ 253.964070][ T5999] ======================================================= [ 254.853598][ T5999] FAT-fs (loop4): Directory bread(block 64) failed [ 254.860622][ T5999] FAT-fs (loop4): Directory bread(block 65) failed [ 254.867714][ T5999] FAT-fs (loop4): Directory bread(block 66) failed [ 254.874718][ T5999] FAT-fs (loop4): Directory bread(block 67) failed [ 254.881776][ T5999] FAT-fs (loop4): Directory bread(block 68) failed [ 254.888764][ T5999] FAT-fs (loop4): Directory bread(block 69) failed [ 254.895810][ T5999] FAT-fs (loop4): Directory bread(block 70) failed [ 254.902733][ T5999] FAT-fs (loop4): Directory bread(block 71) failed [ 254.909655][ T5999] FAT-fs (loop4): Directory bread(block 72) failed [ 254.919275][ T5999] FAT-fs (loop4): Directory bread(block 73) failed [ 255.011775][ T6008] loop3: detected capacity change from 0 to 512 [ 255.115174][ T6008] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 255.135316][ T6008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.147471][ T6008] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 255.464641][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 258.658113][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 258.666915][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 258.674570][ T51] Bluetooth: hci1: hardware error 0x00 [ 260.557369][ T6037] loop3: detected capacity change from 0 to 256 [ 260.714799][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 261.015472][ T6037] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 261.547998][ T6048] loop2: detected capacity change from 0 to 4096 [ 261.583110][ T6048] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 262.682708][ T6057] loop3: detected capacity change from 0 to 128 [ 262.731025][ T6057] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 264.862609][ T5787] sysv_free_block: flc_count > flc_size [ 264.872604][ T5787] sysv_free_block: flc_count > flc_size [ 264.878358][ T5787] sysv_free_block: flc_count > flc_size [ 264.884397][ T5787] sysv_free_block: flc_count > flc_size [ 264.890125][ T5787] sysv_free_block: flc_count > flc_size [ 264.896315][ T5787] sysv_free_block: flc_count > flc_size [ 264.902050][ T5787] sysv_free_block: flc_count > flc_size [ 264.908113][ T5787] sysv_free_block: flc_count > flc_size [ 264.913972][ T5787] sysv_free_block: flc_count > flc_size [ 264.919700][ T5787] sysv_free_block: flc_count > flc_size [ 264.928000][ T5787] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 268.136840][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 268.936410][ T6082] loop3: detected capacity change from 0 to 256 [ 270.766853][ T6082] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 271.272693][ T6102] loop2: detected capacity change from 0 to 256 [ 271.630587][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'. [ 272.234136][ T6102] FAT-fs (loop2): Directory bread(block 64) failed [ 272.241241][ T6102] FAT-fs (loop2): Directory bread(block 65) failed [ 272.248481][ T6102] FAT-fs (loop2): Directory bread(block 66) failed [ 272.255425][ T6102] FAT-fs (loop2): Directory bread(block 67) failed [ 272.262478][ T6102] FAT-fs (loop2): Directory bread(block 68) failed [ 272.269273][ T6102] FAT-fs (loop2): Directory bread(block 69) failed [ 272.276329][ T6102] FAT-fs (loop2): Directory bread(block 70) failed [ 272.283247][ T6102] FAT-fs (loop2): Directory bread(block 71) failed [ 272.290150][ T6102] FAT-fs (loop2): Directory bread(block 72) failed [ 272.297134][ T6102] FAT-fs (loop2): Directory bread(block 73) failed [ 274.855484][ T6129] loop1: detected capacity change from 0 to 256 [ 275.492760][ T6129] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 278.624558][ T6167] loop2: detected capacity change from 0 to 256 [ 278.862925][ T6167] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 280.734872][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.741695][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.377850][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 282.387022][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 282.455078][ T51] Bluetooth: hci4: hardware error 0x00 [ 285.753516][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 296.340455][ T6263] Zero length message leads to an empty skb [ 296.952704][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 296.961612][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 296.970824][ T51] Bluetooth: hci0: hardware error 0x00 [ 298.926813][ T6272] loop3: detected capacity change from 0 to 4096 [ 299.033021][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 307.436262][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 307.447901][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 308.549024][ T51] Bluetooth: hci2: hardware error 0x00 [ 309.425086][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 311.124848][ T5773] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 311.520827][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 313.716886][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 318.728358][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 323.411769][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 327.353698][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 329.811228][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 329.820114][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 329.963364][ T51] Bluetooth: hci3: hardware error 0x00 [ 331.601011][ T6505] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 331.698852][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 331.772549][ T1642] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 331.876987][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 332.117481][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 332.202435][ T1642] usb 2-1: Using ep0 maxpacket: 8 [ 332.209043][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 332.221920][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.259590][ T1642] usb 2-1: config 162 has an invalid interface descriptor of length 8, skipping [ 332.269292][ T1642] usb 2-1: config 162 has an invalid descriptor of length 198, skipping remainder of the config [ 332.281005][ T1642] usb 2-1: config 162 has 0 interfaces, different from the descriptor's value: 3 [ 332.341502][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 332.351315][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.359820][ T25] usb 1-1: Product: syz [ 332.364350][ T25] usb 1-1: Manufacturer: syz [ 332.369199][ T25] usb 1-1: SerialNumber: syz [ 332.434995][ T1642] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 332.445211][ T1642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.453766][ T1642] usb 2-1: Product: syz [ 332.458221][ T1642] usb 2-1: Manufacturer: syz [ 332.463237][ T1642] usb 2-1: SerialNumber: syz [ 332.511059][ T25] usb 1-1: config 0 descriptor?? [ 332.521757][ T5888] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 332.529025][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 332.542476][ T25] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 332.577672][ T1642] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 332.587272][ T1642] usb 2-1: no configuration chosen from 1 choice [ 332.757773][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 332.770340][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 332.781995][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 332.791545][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.870509][ T6523] 9pnet_fd: Insufficient options for proto=fd [ 332.886060][ T5888] usb 5-1: config 0 descriptor?? [ 333.135882][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 333.156590][ T6508] netlink: 'syz.4.217': attribute type 5 has an invalid length. [ 333.165030][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 333.174449][ T6508] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 333.270081][ T6500] loop0: detected capacity change from 0 to 1024 [ 333.301420][ T5888] ath6kl: Failed to submit usb control message: -71 [ 333.308613][ T5888] ath6kl: unable to send the bmi data to the device: -71 [ 333.316201][ T5888] ath6kl: Unable to send get target info: -71 [ 333.359028][ T5888] ath6kl: Failed to init ath6kl core: -71 [ 333.370599][ T5888] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 333.421319][ T6530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.222'. [ 333.430561][ T5888] usb 5-1: USB disconnect, device number 2 [ 333.816162][ T25] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 333.880868][ T6534] program syz.2.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.022556][ T1642] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 334.093706][ T25] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 334.100931][ T25] em28xx 1-1:0.0: No AC97 audio processor [ 334.162401][ T1642] usb 4-1: device descriptor read/64, error -71 [ 334.403342][ T1642] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 334.566016][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 334.583455][ T1642] usb 4-1: device descriptor read/64, error -71 [ 334.658220][ T5888] usb 2-1: USB disconnect, device number 2 [ 334.705448][ T1642] usb usb4-port1: attempt power cycle [ 335.097868][ T1642] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 335.198856][ T1642] usb 4-1: device descriptor read/8, error -71 [ 335.564341][ T1642] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 335.717061][ T1642] usb 4-1: device descriptor read/8, error -71 [ 335.842429][ T1642] usb usb4-port1: unable to enumerate USB device [ 337.321456][ T1642] usb 1-1: USB disconnect, device number 2 [ 337.328902][ T1642] em28xx 1-1:0.0: Disconnecting em28xx [ 337.384168][ T1642] em28xx 1-1:0.0: Freeing device [ 338.979292][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'. [ 342.240117][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.248761][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.418110][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 343.851935][ T6601] loop1: detected capacity change from 0 to 32768 [ 343.864452][ T6601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.251 (6601) [ 343.918855][ T6601] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.929826][ T6601] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 343.939746][ T6601] BTRFS info (device loop1): using free-space-tree [ 348.049748][ T6643] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 348.484994][ T6601] BTRFS error (device loop1): open_ctree failed [ 349.067435][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.266'. [ 349.294092][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 349.303504][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 349.312836][ T6660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'. [ 355.243447][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 358.053199][ T6722] binder: BINDER_SET_CONTEXT_MGR already set [ 358.059580][ T6722] binder: 6721:6722 ioctl 4018620d 20000040 returned -16 [ 359.216333][ T6736] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.916001][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 362.995479][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 363.157471][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 363.192910][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.205006][ T5888] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 363.215973][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.190964][ T5888] usb 4-1: config 0 descriptor?? [ 364.666258][ T5888] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 364.674078][ T5888] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 364.734184][ T5888] hid-steam 0003:28DE:1102.0001: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 364.817862][ T5888] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 364.857234][ T5888] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0001/input/input5 [ 364.906952][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 365.030101][ T5888] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 365.037905][ T5888] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 365.707753][ T5888] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 365.846978][ T5888] usb 4-1: USB disconnect, device number 6 [ 366.356284][ T5888] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 369.419543][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 372.389931][ T6858] 9pnet_virtio: no channels available for device syz [ 373.403213][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 375.380247][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 375.769149][ T25] usb 1-1: device descriptor read/all, error -71 [ 379.493733][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 382.560187][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 384.430067][ T6973] dccp_close: ABORT with 20 bytes unread [ 386.579313][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 386.648140][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 387.041829][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.053611][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 387.063851][ T25] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 387.073548][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.108538][ T7010] usb usb7: usbfs: process 7010 (syz.1.397) did not claim interface 0 before use [ 387.170589][ T25] usb 3-1: config 0 descriptor?? [ 387.281175][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 387.288381][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 387.359277][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 387.378976][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 387.386539][ T25] usb 3-1: media controller created [ 387.403005][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.454401][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 387.460709][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 387.505078][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 387.548628][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 387.556183][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 387.740027][ T25] usb 3-1: USB disconnect, device number 2 [ 387.971173][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 389.240963][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 390.043092][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 392.133614][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 393.287293][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 394.764337][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 394.903195][ T7101] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.164442][ T7101] kvm: pic: non byte read [ 395.169889][ T7101] kvm: pic: level sensitive irq not supported [ 395.170198][ T7101] kvm: pic: non byte read [ 395.502285][ C0] hrtimer: interrupt took 249015 ns [ 396.475765][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.913237][ T5888] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 397.051713][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 397.061242][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 397.124599][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 397.164465][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.174944][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.185558][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.196052][ T5888] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.211518][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.221118][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.584223][ T5888] usb 3-1: GET_CAPABILITIES returned 2f [ 397.590178][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 397.703473][ T7150] ===================================================== [ 397.710755][ T7150] BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x470 [ 397.717722][ T7150] ax25cmp+0x3a5/0x470 [ 397.722035][ T7150] nr_dev_get+0x20e/0x450 [ 397.726901][ T7150] nr_route_frame+0x1a2/0xfe0 [ 397.731803][ T7150] nr_xmit+0x5a/0x1c0 [ 397.736164][ T7150] dev_hard_start_xmit+0x247/0xa20 [ 397.741474][ T7150] __dev_queue_xmit+0x366a/0x57d0 [ 397.746854][ T7150] raw_sendmsg+0x6b5/0xdf0 [ 397.751468][ T7150] ieee802154_sock_sendmsg+0x96/0xd0 [ 397.757208][ T7150] __sock_sendmsg+0x30f/0x380 [ 397.762284][ T7150] ____sys_sendmsg+0x903/0xb60 [ 397.767257][ T7150] ___sys_sendmsg+0x28d/0x3c0 [ 397.772366][ T7150] __sys_sendmmsg+0x2ff/0x880 [ 397.777251][ T7150] __x64_sys_sendmmsg+0xbc/0x120 [ 397.782746][ T7150] x64_sys_call+0x33c2/0x3c30 [ 397.787854][ T7150] do_syscall_64+0xcd/0x1e0 [ 397.792723][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.798862][ T7150] [ 397.801290][ T7150] Uninit was created at: [ 397.806027][ T7150] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 397.812306][ T7150] kmalloc_reserve+0x13d/0x4a0 [ 397.817265][ T7150] __alloc_skb+0x363/0x7b0 [ 397.821874][ T7150] alloc_skb_with_frags+0xc8/0xd00 [ 397.827572][ T7150] sock_alloc_send_pskb+0xa81/0xbf0 [ 397.833144][ T7150] raw_sendmsg+0x367/0xdf0 [ 397.837757][ T7150] ieee802154_sock_sendmsg+0x96/0xd0 [ 397.843436][ T7150] __sock_sendmsg+0x30f/0x380 [ 397.847050][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 397.848281][ T7150] ____sys_sendmsg+0x903/0xb60 [ 397.862356][ T7150] ___sys_sendmsg+0x28d/0x3c0 [ 397.867271][ T7150] __sys_sendmmsg+0x2ff/0x880 [ 397.872368][ T7150] __x64_sys_sendmmsg+0xbc/0x120 [ 397.877528][ T7150] x64_sys_call+0x33c2/0x3c30 [ 397.882561][ T7150] do_syscall_64+0xcd/0x1e0 [ 397.887261][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.893533][ T7150] [ 397.895993][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.3.447 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 397.907004][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.917395][ T7150] ===================================================== [ 397.924607][ T7150] Disabling lock debugging due to kernel taint [ 397.930911][ T7150] Kernel panic - not syncing: kmsan.panic set ... [ 397.937591][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.3.447 Tainted: G B 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 397.949920][ T7150] Tainted: [B]=BAD_PAGE [ 397.954204][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.964435][ T7150] Call Trace: [ 397.967862][ T7150] [ 397.970901][ T7150] dump_stack_lvl+0x216/0x2d0 [ 397.975795][ T7150] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.981801][ T7150] dump_stack+0x1e/0x24 [ 397.986246][ T7150] panic+0x4e2/0xcf0 [ 397.990340][ T7150] ? kmsan_get_metadata+0xd1/0x1c0 [ 397.995649][ T7150] kmsan_report+0x2c7/0x2d0 [ 398.000331][ T7150] ? kmsan_metadata_is_contiguous+0x66/0x1e0 [ 398.006530][ T7150] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 398.012644][ T7150] ? __msan_warning+0x95/0x120 [ 398.017628][ T7150] ? ax25cmp+0x3a5/0x470 [ 398.022060][ T7150] ? nr_dev_get+0x20e/0x450 [ 398.026832][ T7150] ? nr_route_frame+0x1a2/0xfe0 [ 398.031868][ T7150] ? nr_xmit+0x5a/0x1c0 [ 398.036184][ T7150] ? dev_hard_start_xmit+0x247/0xa20 [ 398.041648][ T7150] ? __dev_queue_xmit+0x366a/0x57d0 [ 398.047024][ T7150] ? raw_sendmsg+0x6b5/0xdf0 [ 398.051885][ T7150] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 398.057591][ T7150] ? __sock_sendmsg+0x30f/0x380 [ 398.062654][ T7150] ? ____sys_sendmsg+0x903/0xb60 [ 398.067787][ T7150] ? ___sys_sendmsg+0x28d/0x3c0 [ 398.072840][ T7150] ? __sys_sendmmsg+0x2ff/0x880 [ 398.077885][ T7150] ? __x64_sys_sendmmsg+0xbc/0x120 [ 398.083183][ T7150] ? x64_sys_call+0x33c2/0x3c30 [ 398.088248][ T7150] ? do_syscall_64+0xcd/0x1e0 [ 398.093091][ T7150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.099372][ T7150] ? kmsan_internal_poison_memory+0x7d/0x90 [ 398.105751][ T7150] ? kmsan_get_metadata+0x13e/0x1c0 [ 398.111138][ T7150] ? kmsan_internal_poison_memory+0x49/0x90 [ 398.117235][ T7150] ? kmsan_slab_alloc+0xdf/0x160 [ 398.122380][ T7150] ? kmem_cache_alloc_node_noprof+0x907/0xe00 [ 398.128837][ T7150] ? kmalloc_reserve+0x13d/0x4a0 [ 398.133944][ T7150] ? __alloc_skb+0x363/0x7b0 [ 398.138687][ T7150] ? alloc_skb_with_frags+0xc8/0xd00 [ 398.144165][ T7150] ? sock_alloc_send_pskb+0xa81/0xbf0 [ 398.149731][ T7150] ? raw_sendmsg+0x367/0xdf0 [ 398.154664][ T7150] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 398.160417][ T7150] ? __sock_sendmsg+0x30f/0x380 [ 398.165501][ T7150] ? ____sys_sendmsg+0x903/0xb60 [ 398.170822][ T7150] ? ___sys_sendmsg+0x28d/0x3c0 [ 398.175958][ T7150] ? __sys_sendmmsg+0x2ff/0x880 [ 398.180997][ T7150] ? __x64_sys_sendmmsg+0xbc/0x120 [ 398.186300][ T7150] ? x64_sys_call+0x33c2/0x3c30 [ 398.191375][ T7150] ? do_syscall_64+0xcd/0x1e0 [ 398.196215][ T7150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.202495][ T7150] ? __alloc_skb+0x1e9/0x7b0 [ 398.207247][ T7150] ? kmsan_get_metadata+0x13e/0x1c0 [ 398.212616][ T7150] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 398.218704][ T7150] ? kmsan_get_metadata+0x13e/0x1c0 [ 398.224141][ T7150] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 398.230150][ T7150] ? kmsan_get_metadata+0x13e/0x1c0 [ 398.235530][ T7150] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 398.241632][ T7150] __msan_warning+0x95/0x120 [ 398.246439][ T7150] ax25cmp+0x3a5/0x470 [ 398.250705][ T7150] nr_dev_get+0x20e/0x450 [ 398.255214][ T7150] nr_route_frame+0x1a2/0xfe0 [ 398.260082][ T7150] ? validate_xmit_xfrm+0x8b/0x1bc0 [ 398.265660][ T7150] ? kmsan_get_metadata+0x13e/0x1c0 [ 398.271058][ T7150] nr_xmit+0x5a/0x1c0 [ 398.275206][ T7150] ? __pfx_nr_xmit+0x10/0x10 [ 398.280062][ T7150] dev_hard_start_xmit+0x247/0xa20 [ 398.285392][ T7150] __dev_queue_xmit+0x366a/0x57d0 [ 398.290776][ T7150] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 398.296771][ T7150] ? _copy_from_iter+0x9ae/0x2b00 [ 398.302075][ T7150] ? __dev_queue_xmit+0x3d6/0x57d0 [ 398.307560][ T7150] raw_sendmsg+0x6b5/0xdf0 [ 398.312257][ T7150] ? __pfx_raw_sendmsg+0x10/0x10 [ 398.317372][ T7150] ieee802154_sock_sendmsg+0x96/0xd0 [ 398.322968][ T7150] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 398.329161][ T7150] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 398.335436][ T7150] __sock_sendmsg+0x30f/0x380 [ 398.340417][ T7150] ____sys_sendmsg+0x903/0xb60 [ 398.345476][ T7150] ___sys_sendmsg+0x28d/0x3c0 [ 398.350403][ T7150] ? __rcu_read_unlock+0x7b/0xe0 [ 398.355573][ T7150] ? __fget_files+0x42b/0x500 [ 398.360448][ T7150] ? kmsan_get_metadata+0x13e/0x1c0 [ 398.365860][ T7150] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 398.371882][ T7150] __sys_sendmmsg+0x2ff/0x880 [ 398.376767][ T7150] ? do_futex+0x341/0x4a0 [ 398.381278][ T7150] ? kmsan_get_metadata+0x13e/0x1c0 [ 398.386693][ T7150] __x64_sys_sendmmsg+0xbc/0x120 [ 398.391871][ T7150] x64_sys_call+0x33c2/0x3c30 [ 398.396766][ T7150] do_syscall_64+0xcd/0x1e0 [ 398.401438][ T7150] ? clear_bhb_loop+0x25/0x80 [ 398.406330][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.412530][ T7150] RIP: 0033:0x7f576fd85d29 [ 398.417086][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.436919][ T7150] RSP: 002b:00007f5770bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 398.445546][ T7150] RAX: ffffffffffffffda RBX: 00007f576ff75fa0 RCX: 00007f576fd85d29 [ 398.453702][ T7150] RDX: 000000000000fdef RSI: 00000000200020c0 RDI: 0000000000000005 [ 398.461834][ T7150] RBP: 00007f576fe01b08 R08: 0000000000000000 R09: 0000000000000000 [ 398.469957][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.478083][ T7150] R13: 0000000000000000 R14: 00007f576ff75fa0 R15: 00007ffe3a206868 [ 398.486332][ T7150] [ 398.489943][ T7150] Kernel Offset: disabled [ 398.494341][ T7150] Rebooting in 86400 seconds..