last executing test programs: 12.314875646s ago: executing program 4 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) sched_setaffinity(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17", 0xa2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x3b, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 11.382169681s ago: executing program 4 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r4, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x101, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1}}}, 0x38) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[@ANYBLOB="b0000000080211000001080211"], 0x1e) 9.045634678s ago: executing program 4 (id=237): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) close(r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x54, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xf, 0xd}, {0x4, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}]}, 0x54}}, 0x48010) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(r5, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) unlinkat(r7, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 7.25442716s ago: executing program 2 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) sched_setaffinity(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17", 0xa2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x3b, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 6.361358802s ago: executing program 1 (id=245): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) 6.307268196s ago: executing program 2 (id=246): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000005c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 5.833762094s ago: executing program 2 (id=249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x3}, {0xffffffff}, 0x0, 0x0, 0x5}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d5", 0x1c) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x66ad, &(0x7f0000000140)={0x0, 0x8c65, 0x0, 0x3, 0xfffffdfc}, &(0x7f0000000040), &(0x7f0000000280)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8044016}, 0x4000044) 4.960071823s ago: executing program 1 (id=250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sync() 4.833137764s ago: executing program 0 (id=252): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2000000, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702507aa71ea6e6cfde87b1a3167a37c34e401f8ff00000000bfa10000000000f107010000f8ffffffb702000004000000b7030000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) 4.832691954s ago: executing program 0 (id=253): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e00"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.823125815s ago: executing program 3 (id=254): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/128, 0x80}], 0x1) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 3.742123831s ago: executing program 3 (id=255): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.618885441s ago: executing program 3 (id=256): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, r2, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', r4, 0x0, 0x20000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000003c0)="0b036800e0ff64000200475400f6a13bb10000000800884848", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @random="10414c9854c6"}, 0x4a, {}, 'veth1_to_bridge\x00'}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x6}, {0x8, 0x13, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0xa}, {0x8, 0x1e, 0x0, 0x0, 0x9}, {0xfffffffffffffce7, 0xd, 0x0, 0x0, 0x4}, {0x8, 0xd, 0x0, 0x0, 0x4}, {0x8, 0x13, 0x0, 0x0, 0x4}, {0x8, 0x16, 0x0, 0x0, 0x7fff}, {0x8, 0x9b, 0x0, 0x0, 0xffff8000}]}}]}]}, 0x60}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x5b, 0x0) sendmsg$key(r9, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 3.091125493s ago: executing program 4 (id=257): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f00000000c0)) 3.017129179s ago: executing program 2 (id=258): socketpair$unix(0x1, 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0x21, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x10c, 0x30, 0x1, 0x4, 0x0, {}, [{0xf8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0xc8, 0x3, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1000, 0x94, 0xfa, 0x5}, {0x1, 0x33, 0x0, 0xf9d}, {0x6b08, 0x2, 0x1, 0x7}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x101, 0xf7, 0xff}, {0x4, 0xd, 0x10, 0x2}, {0x63b, 0x5, 0xb8, 0x7}, {0x2, 0x3, 0xb8, 0x8009f2}, {0xfffb, 0x4, 0x2, 0x7}, {0x9, 0x85, 0x9, 0x1000}, {0x400, 0xf, 0x8, 0x4}, {0x0, 0x4, 0xf8, 0xfff}]}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS={0x4}]}, {0x16, 0x6, "a83bd554a1b4e18ed071161a626324c9f16a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0xc0, 0xda, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x1ff, 0x1, 0x1, {0x22, 0x243}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x24}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xb, 0x4, 0x6}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0xc5, 0x5d, 0x4, 0xff, 0x9}, 0x17e, &(0x7f0000000780)={0x5, 0xf, 0x17e, 0x3, [@generic={0x7e, 0x10, 0x4, "5f077a79dd930903715d6a999dcb250632f84a514f36df8289f3ac7e7ad9b49dcd4d1516247c5d7d539ef74d88cae9b83469f53f8a5e7dfc9c5ed349c48c8a99a585a5e29e023716fc4e5bbf1bfd76215235fdb79ecc057bd4b44923d2f96fd41b4a1c21f64a60f9e19ec51e413bc46a01532685890b44c443317b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0xa, 0x1}, @generic={0xf1, 0x10, 0xa, "57d2b17f5de941cdb6efd9a46beef20fba844a773afaec0eba102324c39cdef1aa78d14a89cc3c3fdfac770b4a215baa8d93a627dcee441b7167ae3b387312a02f476ad32d2c46b491c7b78783e1777c3c62ddf40e24fd8c70ae2b6d6ab8d02a077546ce11881f031e83f354e3cf50462fcee9a5dc1fa1f40d7bb3d62c740073c94e1f1fab27f005f63d8d82f07222efc9f8b24cce946d015a7252bb54934cd6e1179db252246f15c73da0b6f0a42dfb0171b7d9672497b238e5ac1f79a0dc91c24658ab699320539f693b811031a1541052a44d400a999e5d44c054039b2c221d5c30f235a50f7fa27ab64a0b0b"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1007}}]}) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.016640429s ago: executing program 1 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x4) socket(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x9}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x63, 0x2, 0x10000000001, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0xa]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r1], 0x7c}}, 0x80) 2.916338307s ago: executing program 0 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) syz_open_dev$dri(&(0x7f0000000100), 0x20000000000000, 0x70501) accept(r2, 0x0, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 2.458810413s ago: executing program 3 (id=261): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) 2.313252445s ago: executing program 1 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x2, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000001}, 0x40) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0x3, 0x77828d5, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x40, 0x7, 0x3ff, 0x8}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="00000000e25a7e68bc8fdebfadfad1151679bfcaccada78f18fd4045262cf669e80808d0fe5bc4349716d7", @ANYRES8=r4, @ANYBLOB="04002bbd7000fedbdf25080000003c0001801400020070696d7265673100000000000000000008000100", @ANYRESOCT=r3], 0x154}, 0x1, 0x0, 0x0, 0x4044001}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 1.898206408s ago: executing program 0 (id=263): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40046103, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) capset(0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x240008c8) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, 0x0, 0x0, &(0x7f00000001c0)) mq_open(0x0, 0x40, 0x9, 0x0) sendfile(r0, r1, 0x0, 0x110003) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"}) 1.860742371s ago: executing program 4 (id=264): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 1.50524197s ago: executing program 4 (id=265): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x84) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) truncate(0x0, 0x8fff5) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r3}}, 0x40) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(&(0x7f0000000300), 0x0, 0x0, 0x2200892, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 1.473703232s ago: executing program 1 (id=266): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = syz_io_uring_setup(0x3db7, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x363}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.236022771s ago: executing program 3 (id=267): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f2", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 1.053619626s ago: executing program 2 (id=268): r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaa857d3d37e0e41d6b38a252d71ca9aaaa0180c200000086dd6000000000200000fe800000000000000004"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="57fb32c100000000000000000040000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000280)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 997.47634ms ago: executing program 1 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) 771.641448ms ago: executing program 0 (id=270): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x10) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 734.063681ms ago: executing program 0 (id=271): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) 60.495295ms ago: executing program 3 (id=272): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010000000000000000000200000000000009000000000634547b18000000280016802400010000000000000008000000040000000000fe8000000000000000000000010000bb"], 0x4c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000140)={0x0, "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"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c800a2da39224f3baa4eea92782600796574fd98f10f958f7aae2560e83167ee7b235d7deee99825d337a2857a43c2c67835054dbae1165b864ba0cbde062a12efa50bce6c71d3d10dcd58631c24ad7f931b478aeb08890d02488ef83ea736d1fde9d9dabcda35cd0f0fbd529d62b6491a83a942d4b607d09d34e441e7d5f4fea8891e7b27b7ec516910a9f61a731316b94b5415cf77952a9b6001d427284b923c38"], 0xa6) 0s ago: executing program 2 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) syz_open_dev$dri(&(0x7f0000000100), 0x20000000000000, 0x70501) accept(r2, 0x0, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 51.027034][ T4173] cgroup: Unknown subsys name 'net' [ 51.157810][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.329205][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.206678][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 54.230882][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.272255][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.306861][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.377931][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.413337][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.420984][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.428929][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.452781][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.459925][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.467746][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.476140][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.483469][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.491285][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.498720][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.505957][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.513766][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.562899][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.571595][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.579782][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.594616][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.605282][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.619078][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.626363][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.634618][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.641625][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.648754][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.656873][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.665464][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.675957][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.695169][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.702215][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.710487][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.769451][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.794305][ T4183] team0: Port device team_slave_0 added [ 54.801529][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.812401][ T4189] team0: Port device team_slave_0 added [ 54.818729][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.826563][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.834652][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.843295][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.852374][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.859438][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.867784][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.876050][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.886417][ T4183] team0: Port device team_slave_1 added [ 54.906282][ T4189] team0: Port device team_slave_1 added [ 54.913739][ T4191] team0: Port device team_slave_0 added [ 54.942718][ T4191] team0: Port device team_slave_1 added [ 54.978897][ T4184] team0: Port device team_slave_0 added [ 54.986639][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.996594][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.003766][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.029793][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.041613][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.048872][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.074954][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.087660][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.094683][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.120838][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.138386][ T4184] team0: Port device team_slave_1 added [ 55.153007][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.162529][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.169626][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.195539][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.210978][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.218083][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.244380][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.279351][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.286331][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.312265][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.332260][ T4185] team0: Port device team_slave_0 added [ 55.350476][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.357643][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.384793][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.404065][ T4185] team0: Port device team_slave_1 added [ 55.431244][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.438237][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.464338][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.484575][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.493516][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.502567][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.509304][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.516046][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.523867][ T4189] Cannot create hsr debugfs directory [ 55.540182][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.548815][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.555552][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.563431][ T4191] Cannot create hsr debugfs directory [ 55.576828][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.584022][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.610320][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.650730][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.657726][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.683692][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.712619][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.719808][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.726482][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.734291][ T4184] Cannot create hsr debugfs directory [ 55.793944][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.800728][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.807448][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.815155][ T4185] Cannot create hsr debugfs directory [ 55.865437][ T24] Bluetooth: hci0: command 0x0409 tx timeout [ 55.933178][ T24] Bluetooth: hci4: command 0x0409 tx timeout [ 55.939275][ T24] Bluetooth: hci1: command 0x0409 tx timeout [ 55.945830][ T24] Bluetooth: hci2: command 0x0409 tx timeout [ 55.952017][ T24] Bluetooth: hci3: command 0x0409 tx timeout [ 56.077971][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.088636][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.098902][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.110926][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.159595][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.183530][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.205679][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.215259][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.250773][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.271440][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.286366][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.296025][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.309902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.319194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.327773][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.346564][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.376605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.385535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.395029][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.402230][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.410974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.420386][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.436970][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.467475][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.476689][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.485800][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.492848][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.500588][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.510521][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.519143][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.527864][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.536413][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.545123][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.553595][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.580966][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.590016][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.600684][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.616062][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.629392][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.637776][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.657487][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.669236][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.677882][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.697696][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.708486][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.724809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.732621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.745926][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.761217][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.773613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.782170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.792683][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.799780][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.809356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.849882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.858773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.867545][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.874648][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.886064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.895260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.904017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.912484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.922112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.930957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.940862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.965922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.980299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.005213][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.017066][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.030444][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.039075][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.048408][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.072939][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.091746][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.100862][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.110258][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.124484][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.145201][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.175526][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.183201][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.197891][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.206354][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.213451][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.222117][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.231117][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.239454][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.246517][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.256129][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.264837][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.295166][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.306662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.315456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.324602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.332326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.339998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.349604][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.360892][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.369808][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.380923][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.391663][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.409136][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.426775][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.435837][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.444594][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.452822][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.459912][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.468303][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.477929][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.486369][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.493442][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.501332][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.509053][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.517704][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.530998][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.540064][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.552204][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.569577][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.578962][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.588420][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.597572][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.607068][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.615829][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.641811][ T4189] device veth0_vlan entered promiscuous mode [ 57.663985][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.672555][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.681703][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.688764][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.698015][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.707106][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.715578][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.722725][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.730890][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.739966][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.748178][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.756612][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.765201][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.774167][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.782717][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.791530][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.800829][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.809547][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.818309][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.826893][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.835078][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.842650][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.850677][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.860986][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.868894][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.879329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.889876][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.902697][ T4191] device veth0_vlan entered promiscuous mode [ 57.914832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.924820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.943394][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 57.949147][ T4189] device veth1_vlan entered promiscuous mode [ 57.962718][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.981124][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.991215][ T4191] device veth1_vlan entered promiscuous mode [ 58.006851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.014841][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 58.019659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.020899][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 58.029594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.039894][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 58.044217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.049107][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 58.056716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.071055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.080553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.089629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.098037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.124744][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.158566][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.181511][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.189827][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.198763][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.212102][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.220618][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.229651][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.237901][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.259398][ T4189] device veth0_macvtap entered promiscuous mode [ 58.275904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.288867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.301619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.312673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.324781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.348307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.361011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.370856][ T4189] device veth1_macvtap entered promiscuous mode [ 58.383774][ T4191] device veth0_macvtap entered promiscuous mode [ 58.394764][ T4191] device veth1_macvtap entered promiscuous mode [ 58.412521][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.437491][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.455824][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.468480][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.480501][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.492081][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.504482][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.515550][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.522961][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.534415][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.548719][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.556575][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.578535][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.595731][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.609685][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.620288][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.636426][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.646830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.655794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.664875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.674031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.684848][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.695510][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.707201][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.721396][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.731172][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.743762][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.752453][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.773727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.782565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.794358][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.803905][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.812597][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.821480][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.842433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.851532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.866611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.876944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.908356][ T4184] device veth0_vlan entered promiscuous mode [ 58.918213][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.926972][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.936928][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.946192][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.954771][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.962394][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.014963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.025391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.040516][ T4183] device veth0_vlan entered promiscuous mode [ 59.056829][ T4184] device veth1_vlan entered promiscuous mode [ 59.065911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.074784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.082426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.091342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.099742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.112017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.123562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.132995][ T4185] device veth0_vlan entered promiscuous mode [ 59.162758][ T4183] device veth1_vlan entered promiscuous mode [ 59.187351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.197370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.211821][ T4185] device veth1_vlan entered promiscuous mode [ 59.234636][ T4184] device veth0_macvtap entered promiscuous mode [ 59.241363][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.242568][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.257484][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.265576][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.274643][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.281960][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.296785][ T4184] device veth1_macvtap entered promiscuous mode [ 59.317852][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.326962][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.335222][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.343698][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.351489][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.360135][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.388447][ T4183] device veth0_macvtap entered promiscuous mode [ 59.411091][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.421989][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.432142][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.443185][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.455608][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.474343][ T4183] device veth1_macvtap entered promiscuous mode [ 59.482033][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.484212][ T4185] device veth0_macvtap entered promiscuous mode [ 59.496675][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.506199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.515169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.523617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.531991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.541817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.552291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.562346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.570310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.596654][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.607298][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.618411][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.629002][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.640978][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.651221][ T4185] device veth1_macvtap entered promiscuous mode [ 59.672581][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.690238][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.701731][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.712280][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.722406][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.733373][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.745001][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.752972][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.756303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.775083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.775839][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.784750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.799791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.808435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.817425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.835179][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.844240][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.852920][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.866647][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.879353][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.890627][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.900778][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.911563][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.921639][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.932433][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.963957][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.986133][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.997585][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.007778][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.019294][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 60.023496][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.029749][ T4297] IPVS: set_ctl: invalid protocol: 23 172.20.20.170:20001 [ 60.039702][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.058407][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.068965][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.080256][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.091317][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.099409][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 60.107485][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.125363][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.130931][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 60.139804][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.148990][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 60.149086][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.165355][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 60.181833][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.191379][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.201907][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.210828][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.224981][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.241071][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.251337][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.272826][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.289656][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.300621][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.315772][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.329586][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.349354][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.389164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.416943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.437927][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.447309][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.456449][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.466410][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.480506][ T4300] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.489702][ T4300] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.498417][ T4300] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.507136][ T4300] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.519642][ T4300] Zero length message leads to an empty skb [ 60.744030][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.752064][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.002227][ T4309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.178360][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.234990][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.391122][ T4321] loop3: detected capacity change from 0 to 128 [ 61.501205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.603561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.808622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.910776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.013641][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 62.022567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 62.093349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.102349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.105209][ T24] Bluetooth: hci0: command 0x0419 tx timeout [ 62.217985][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.227281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.583811][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.833926][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 62.953285][ T4236] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 62.986689][ T4236] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 63.183581][ T4236] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 63.206382][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.237232][ T4236] usb 4-1: Product: syz [ 63.254608][ T4236] usb 4-1: Manufacturer: syz [ 63.271964][ T4236] usb 4-1: SerialNumber: syz [ 63.358177][ T4236] usb 4-1: config 0 descriptor?? [ 63.504972][ T4301] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.532641][ T4301] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.593532][ T4301] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.639985][ T4301] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.383290][ T4301] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.392208][ T4301] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.401213][ T4301] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.410084][ T4301] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.637269][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 64.643833][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 64.649982][ T4251] Bluetooth: hci1: command 0x0419 tx timeout [ 64.656744][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 64.686160][ T4190] usb 4-1: USB disconnect, device number 2 [ 64.705132][ T4301] syz.2.3 (4301) used greatest stack depth: 19840 bytes left [ 64.714831][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.722870][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.735131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.773265][ T3073] attempt to access beyond end of device [ 64.773265][ T3073] loop3: rw=1, want=1041, limit=128 [ 64.814641][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.822963][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.823853][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.841788][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.864503][ T26] audit: type=1326 audit(1755266314.836:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 64.933798][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.959250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.994480][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.002467][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.026806][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.044524][ T26] audit: type=1326 audit(1755266314.886:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 65.070927][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.084394][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.117825][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.146240][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.155586][ T26] audit: type=1326 audit(1755266314.886:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 65.193371][ T26] audit: type=1326 audit(1755266314.886:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 65.242591][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.271687][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.335451][ T26] audit: type=1326 audit(1755266314.886:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 65.518762][ T26] audit: type=1326 audit(1755266314.886:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 65.541257][ T26] audit: type=1326 audit(1755266314.886:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 65.583488][ T26] audit: type=1326 audit(1755266314.886:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 65.928899][ T26] audit: type=1326 audit(1755266314.886:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 66.166692][ T26] audit: type=1326 audit(1755266314.886:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 66.661561][ T4358] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 67.351602][ T4360] loop3: detected capacity change from 0 to 128 [ 67.853248][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 68.133157][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 68.253282][ T24] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 68.325873][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.664524][ T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 68.731094][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.866686][ T24] usb 4-1: Product: syz [ 68.924268][ T24] usb 4-1: Manufacturer: syz [ 68.985275][ T24] usb 4-1: SerialNumber: syz [ 69.125375][ T24] usb 4-1: config 0 descriptor?? [ 70.516690][ T7] usb 4-1: USB disconnect, device number 3 [ 70.707888][ T500] attempt to access beyond end of device [ 70.707888][ T500] loop3: rw=1, want=1041, limit=128 [ 71.136900][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.145895][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.501480][ T4403] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 72.569745][ T4434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 72.831547][ T4444] loop2: detected capacity change from 0 to 16 [ 72.850647][ T4444] erofs: (device loop2): mounted with root inode @ nid 36. [ 73.583409][ T4446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 74.021392][ T4449] autofs4:pid:4449:autofs_fill_super: called with bogus options [ 75.011011][ T4482] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.098043][ T4486] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 75.402575][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 75.402588][ T26] audit: type=1326 audit(1755266325.366:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 75.488909][ T26] audit: type=1326 audit(1755266325.376:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 75.572874][ T26] audit: type=1326 audit(1755266325.376:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 75.669421][ T26] audit: type=1326 audit(1755266325.376:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 75.799307][ T26] audit: type=1326 audit(1755266325.376:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 75.822068][ T26] audit: type=1326 audit(1755266325.376:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 75.858603][ T26] audit: type=1326 audit(1755266325.376:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f12d14febe9 code=0x7ffc0000 [ 75.982488][ T4510] kernel profiling enabled (shift: 17) [ 76.171284][ T4510] process 'syz.1.75' launched './file0' with NULL argv: empty string added [ 76.249736][ T26] audit: type=1326 audit(1755266326.146:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 76.256187][ T1336] cfg80211: failed to load regulatory.db [ 76.293981][ T26] audit: type=1326 audit(1755266326.146:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 76.316630][ T26] audit: type=1326 audit(1755266326.146:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 76.852735][ T4518] kvm [4514]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 76.973449][ T4518] kvm [4514]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 76.990033][ T4518] kvm [4514]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 78.722493][ T4560] loop3: detected capacity change from 0 to 128 [ 80.173205][ T1336] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.692794][ T4580] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.713638][ T4580] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.793165][ T1336] usb 4-1: Using ep0 maxpacket: 32 [ 81.913393][ T1336] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 81.947465][ T1336] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.303811][ T1336] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 82.316868][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.326266][ T1336] usb 4-1: Product: syz [ 82.330485][ T1336] usb 4-1: Manufacturer: syz [ 82.335453][ T1336] usb 4-1: SerialNumber: syz [ 82.342743][ T1336] usb 4-1: config 0 descriptor?? [ 83.436340][ T4609] sched: RT throttling activated [ 83.693847][ T1336] usb 4-1: can't set config #0, error -71 [ 83.711168][ T1336] usb 4-1: USB disconnect, device number 4 [ 83.734944][ T4399] attempt to access beyond end of device [ 83.734944][ T4399] loop3: rw=1, want=1041, limit=128 [ 86.385631][ T4649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 86.624459][ T4661] loop3: detected capacity change from 0 to 128 [ 88.374242][ T4370] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.613864][ T4681] binder: 4680:4681 ioctl c0306201 2000000003c0 returned -14 [ 88.699626][ T4684] 9pnet_virtio: no channels available for device syz [ 88.813100][ T4370] usb 4-1: Using ep0 maxpacket: 32 [ 88.955590][ T4370] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 88.970453][ T4370] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.223195][ T4370] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 89.232659][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.248583][ T4370] usb 4-1: Product: syz [ 89.253951][ T4370] usb 4-1: Manufacturer: syz [ 89.265587][ T4370] usb 4-1: SerialNumber: syz [ 89.280176][ T4370] usb 4-1: config 0 descriptor?? [ 89.580053][ T4268] usb 4-1: USB disconnect, device number 5 [ 90.190042][ T4399] attempt to access beyond end of device [ 90.190042][ T4399] loop3: rw=1, want=1041, limit=128 [ 92.486706][ T4742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.145'. [ 92.515918][ T4741] Invalid ELF header magic: != ELF [ 92.553997][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.884076][ T4236] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 93.003714][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.062653][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.156643][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.283668][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.311890][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.385310][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.513585][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.561703][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.677317][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.813368][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.855473][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.983867][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.143821][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.176835][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.293236][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.463817][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.506010][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.623729][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.672451][ T4765] loop0: detected capacity change from 0 to 16 [ 94.773910][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.790318][ T4765] erofs: (device loop0): mounted with root inode @ nid 36. [ 94.816259][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.924292][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.133789][ T4769] autofs4:pid:4769:autofs_fill_super: called with bogus options [ 95.683225][ T4236] usb 2-1: unable to read config index 7 descriptor/all [ 95.700270][ T4236] usb 2-1: can't read configurations, error -71 [ 95.755276][ T4778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.907047][ T4786] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 96.276779][ T4789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 96.339644][ T4793] loop1: detected capacity change from 0 to 1024 [ 96.356594][ T4793] ======================================================= [ 96.356594][ T4793] WARNING: The mand mount option has been deprecated and [ 96.356594][ T4793] and is ignored by this kernel. Remove the mand [ 96.356594][ T4793] option from the mount to silence this warning. [ 96.356594][ T4793] ======================================================= [ 96.475093][ T4796] loop4: detected capacity change from 0 to 128 [ 97.698997][ T4793] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.839655][ T4813] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 98.493428][ T4236] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.924185][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 100.145033][ T4236] usb 5-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 100.168245][ T4236] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.213140][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.333785][ T4236] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 100.347311][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.358650][ T4236] usb 5-1: Product: syz [ 100.367927][ T4236] usb 5-1: Manufacturer: syz [ 100.376474][ T4236] usb 5-1: SerialNumber: syz [ 100.396683][ T4236] usb 5-1: config 0 descriptor?? [ 100.573300][ T4235] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 100.593590][ T4235] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 100.606035][ T4235] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.606243][ T4235] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.606327][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.611157][ T4235] usb 1-1: config 0 descriptor?? [ 100.633375][ T4821] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.688445][ T4235] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 100.754010][ T4236] usb 5-1: USB disconnect, device number 2 [ 101.512120][ T4325] attempt to access beyond end of device [ 101.512120][ T4325] loop4: rw=1, want=1041, limit=128 [ 102.776020][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 102.776036][ T26] audit: type=1326 audit(1755266352.186:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 102.938713][ T1108] usb 1-1: USB disconnect, device number 2 [ 103.065370][ T26] audit: type=1326 audit(1755266352.186:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.093102][ T26] audit: type=1326 audit(1755266352.266:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.361326][ T4861] loop0: detected capacity change from 0 to 1024 [ 103.366652][ T26] audit: type=1326 audit(1755266352.266:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.569978][ T26] audit: type=1326 audit(1755266352.266:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.627675][ T4861] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.706804][ T26] audit: type=1326 audit(1755266352.326:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.728980][ T26] audit: type=1326 audit(1755266352.326:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.751186][ T26] audit: type=1326 audit(1755266352.326:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.776862][ T26] audit: type=1326 audit(1755266352.326:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 103.921660][ T4861] overlayfs: './file2' not a directory [ 103.989524][ T26] audit: type=1326 audit(1755266352.326:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4694759be9 code=0x7ffc0000 [ 105.207296][ T4889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 105.649306][ T4891] loop4: detected capacity change from 0 to 128 [ 106.173193][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.633130][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 107.713498][ T24] usb 5-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 107.763112][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.063171][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 108.072231][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.663266][ T24] usb 5-1: Product: syz [ 109.667891][ T24] usb 5-1: Manufacturer: syz [ 109.684176][ T24] usb 5-1: SerialNumber: syz [ 109.709999][ T24] usb 5-1: config 0 descriptor?? [ 109.753164][ T24] usb 5-1: can't set config #0, error -71 [ 110.224300][ T24] usb 5-1: USB disconnect, device number 3 [ 110.244225][ T154] attempt to access beyond end of device [ 110.244225][ T154] loop4: rw=1, want=1041, limit=128 [ 110.766176][ T4930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 111.546255][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): rose3: link becomes ready [ 111.886038][ T4924] usb usb8: usbfs: process 4924 (syz.4.190) did not claim interface 0 before use [ 112.213103][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 113.142622][ T4957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.171028][ T4958] loop0: detected capacity change from 0 to 128 [ 113.303181][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 115.109121][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 115.167293][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 64 [ 115.312358][ T1108] Bluetooth: hci1: command 0x0405 tx timeout [ 115.437614][ T4975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.206'. [ 116.070231][ T4956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.285646][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.295887][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.334940][ T4371] attempt to access beyond end of device [ 116.334940][ T4371] loop0: rw=1, want=1041, limit=128 [ 116.353795][ T24] usb 4-1: can't set config #27, error -71 [ 116.422393][ T24] usb 4-1: USB disconnect, device number 6 [ 116.464540][ T4981] device netdevsim0 entered promiscuous mode [ 116.514105][ T4981] device netdevsim0 left promiscuous mode [ 117.374196][ T4999] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 117.521649][ T4999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.551782][ T5001] bond1: (slave dummy0): making interface the new active one [ 117.580634][ T5001] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 117.600625][ T5003] netlink: 'syz.3.213': attribute type 10 has an invalid length. [ 117.621241][ T5003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.213'. [ 117.691041][ T5003] device dummy0 entered promiscuous mode [ 117.830801][ T5003] bond1: (slave dummy0): Releasing active interface [ 118.247464][ T5015] loop4: detected capacity change from 0 to 128 [ 118.337603][ T5018] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 118.693300][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.317761][ T5025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.219'. [ 120.373255][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 121.093298][ T24] usb 5-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 121.104259][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.187821][ T5031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.258930][ T5030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.278495][ T4369] attempt to access beyond end of device [ 121.278495][ T4369] loop4: rw=1, want=1041, limit=128 [ 121.303263][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 121.335215][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.375128][ T24] usb 5-1: Product: syz [ 121.440803][ T24] usb 5-1: config 0 descriptor?? [ 121.583988][ T24] usb 5-1: can't set config #0, error -71 [ 121.596598][ T24] usb 5-1: USB disconnect, device number 4 [ 121.758362][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 121.758372][ T26] audit: type=1326 audit(1755266371.726:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 121.929119][ T26] audit: type=1326 audit(1755266371.756:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 122.900205][ T26] audit: type=1326 audit(1755266371.766:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 122.933146][ T26] audit: type=1326 audit(1755266371.766:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 123.011877][ T5046] trusted_key: encrypted_key: master key parameter 'defa^lt' is invalid [ 123.196755][ T5050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 123.202955][ T26] audit: type=1326 audit(1755266371.766:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 123.204224][ T26] audit: type=1326 audit(1755266371.766:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 123.217179][ T26] audit: type=1326 audit(1755266371.766:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 123.218605][ T26] audit: type=1326 audit(1755266371.766:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 123.221578][ T26] audit: type=1326 audit(1755266371.776:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 123.222775][ T26] audit: type=1326 audit(1755266371.776:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b06bbe9 code=0x7ffc0000 [ 123.752009][ T5054] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.361182][ T5068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.523295][ T5072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.249254][ T5085] bridge0: port 3(syz_tun) entered blocking state [ 128.274594][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 128.307280][ T5085] bridge0: port 3(syz_tun) entered disabled state [ 128.387214][ T5085] device syz_tun entered promiscuous mode [ 128.395894][ T5085] bridge0: port 3(syz_tun) entered blocking state [ 128.402812][ T5085] bridge0: port 3(syz_tun) entered forwarding state [ 130.889458][ T5122] tipc: Failed to remove unknown binding: 66,1,1/0:588883399/588883401 [ 130.909352][ T5122] tipc: Failed to remove unknown binding: 66,1,1/0:588883399/588883401 [ 132.612670][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.619227][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.599395][ T5142] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.916738][ T5158] netlink: 'syz.1.259': attribute type 9 has an invalid length. [ 133.973232][ T5158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.259'. [ 134.131554][ T5149] syz.3.256 (5149) used greatest stack depth: 19232 bytes left [ 135.827712][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 136.042008][ T5199] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 136.707968][ T5183] ================================================================== [ 136.716046][ T5183] BUG: KASAN: use-after-free in __lock_acquire+0xf7/0x7c60 [ 136.723229][ T5183] Read of size 8 at addr ffff888062b3c2b8 by task syz.4.265/5183 [ 136.730920][ T5183] [ 136.733223][ T5183] CPU: 0 PID: 5183 Comm: syz.4.265 Not tainted 5.15.189-syzkaller #0 [ 136.741261][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.751297][ T5183] Call Trace: [ 136.754553][ T5183] [ 136.757462][ T5183] dump_stack_lvl+0x168/0x230 [ 136.762130][ T5183] ? show_regs_print_info+0x20/0x20 [ 136.767314][ T5183] ? load_image+0x3b0/0x3b0 [ 136.771790][ T5183] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 136.777169][ T5183] ? rcu_lock_release+0x5/0x20 [ 136.781919][ T5183] print_address_description+0x60/0x2d0 [ 136.787476][ T5183] ? __lock_acquire+0xf7/0x7c60 [ 136.792317][ T5183] kasan_report+0xdf/0x130 [ 136.796721][ T5183] ? __lock_acquire+0xf7/0x7c60 [ 136.801558][ T5183] __lock_acquire+0xf7/0x7c60 [ 136.806216][ T5183] ? __kernel_text_address+0x9a/0x100 [ 136.811564][ T5183] ? unwind_get_return_address+0x49/0x80 [ 136.817179][ T5183] ? stack_trace_save+0xe0/0xe0 [ 136.822006][ T5183] ? arch_stack_walk+0xf2/0x140 [ 136.826854][ T5183] ? stack_trace_save+0x98/0xe0 [ 136.831678][ T5183] ? verify_lock_unused+0x140/0x140 [ 136.836857][ T5183] ? verify_lock_unused+0x140/0x140 [ 136.842030][ T5183] ? kasan_save_stack+0x4b/0x60 [ 136.846850][ T5183] ? kasan_save_stack+0x35/0x60 [ 136.851672][ T5183] ? kasan_record_aux_stack+0xb8/0x100 [ 136.857102][ T5183] ? task_work_add+0x2f/0x1d0 [ 136.861752][ T5183] ? fput_many+0xde/0x1a0 [ 136.866054][ T5183] ? poll_freewait+0xba/0x210 [ 136.870725][ T5183] ? do_select+0x1629/0x16f0 [ 136.875289][ T5183] ? __se_sys_pselect6+0x2ed/0x3a0 [ 136.880374][ T5183] ? do_syscall_64+0x4c/0xa0 [ 136.884962][ T5183] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.891014][ T5183] lock_acquire+0x197/0x3f0 [ 136.895499][ T5183] ? remove_wait_queue+0x20/0x120 [ 136.900525][ T5183] ? read_lock_is_recursive+0x10/0x10 [ 136.905877][ T5183] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 136.911229][ T5183] ? lockdep_hardirqs_off+0x70/0x100 [ 136.916490][ T5183] _raw_spin_lock_irqsave+0xa4/0xf0 [ 136.921664][ T5183] ? remove_wait_queue+0x20/0x120 [ 136.926663][ T5183] ? _raw_spin_lock+0x40/0x40 [ 136.931314][ T5183] ? kick_process+0xd4/0x140 [ 136.935877][ T5183] ? task_work_add+0x1a7/0x1d0 [ 136.940613][ T5183] remove_wait_queue+0x20/0x120 [ 136.945447][ T5183] poll_freewait+0x99/0x210 [ 136.949923][ T5183] do_select+0x1629/0x16f0 [ 136.954313][ T5183] ? do_select+0xbc1/0x16f0 [ 136.958833][ T5183] ? core_sys_select+0x860/0x860 [ 136.963745][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 136.969974][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 136.976190][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 136.982400][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 136.988612][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 136.994824][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.001043][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.007264][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.013477][ T5183] ? __lock_acquire+0x7c60/0x7c60 [ 137.018484][ T5183] ? __lock_acquire+0x7c60/0x7c60 [ 137.023487][ T5183] ? __might_fault+0xb3/0x110 [ 137.028247][ T5183] core_sys_select+0x65c/0x860 [ 137.032992][ T5183] ? poll_select_set_timeout+0x150/0x150 [ 137.038615][ T5183] ? sigprocmask+0x190/0x190 [ 137.043185][ T5183] ? __lock_acquire+0x7c60/0x7c60 [ 137.048185][ T5183] __se_sys_pselect6+0x2ed/0x3a0 [ 137.053097][ T5183] ? __x64_sys_pselect6+0xf0/0xf0 [ 137.058106][ T5183] ? __x64_sys_pselect6+0x1d/0xf0 [ 137.063108][ T5183] do_syscall_64+0x4c/0xa0 [ 137.067515][ T5183] ? clear_bhb_loop+0x30/0x80 [ 137.072161][ T5183] ? clear_bhb_loop+0x30/0x80 [ 137.076816][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.082690][ T5183] RIP: 0033:0x7f308b06bbe9 [ 137.087079][ T5183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.106658][ T5183] RSP: 002b:00007f30892d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 137.115049][ T5183] RAX: ffffffffffffffda RBX: 00007f308b292fa0 RCX: 00007f308b06bbe9 [ 137.122995][ T5183] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 137.130949][ T5183] RBP: 00007f308b0eee19 R08: 0000000000000000 R09: 0000000000000000 [ 137.138892][ T5183] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 137.146835][ T5183] R13: 00007f308b293038 R14: 00007f308b292fa0 R15: 00007ffebcab6838 [ 137.154783][ T5183] [ 137.157779][ T5183] [ 137.160077][ T5183] Allocated by task 5037: [ 137.164370][ T5183] __kasan_kmalloc+0xb5/0xf0 [ 137.168935][ T5183] comedi_device_postconfig+0x496/0xc50 [ 137.174465][ T5183] comedi_device_attach+0x52f/0x650 [ 137.179632][ T5183] comedi_unlocked_ioctl+0x5ec/0xe90 [ 137.184887][ T5183] __se_sys_ioctl+0xfa/0x170 [ 137.189451][ T5183] do_syscall_64+0x4c/0xa0 [ 137.193841][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.199713][ T5183] [ 137.202009][ T5183] Freed by task 5194: [ 137.205957][ T5183] kasan_set_track+0x4b/0x70 [ 137.210516][ T5183] kasan_set_free_info+0x1f/0x40 [ 137.215422][ T5183] ____kasan_slab_free+0xd5/0x110 [ 137.220429][ T5183] slab_free_freelist_hook+0xea/0x170 [ 137.225772][ T5183] kfree+0xef/0x2a0 [ 137.229554][ T5183] comedi_device_detach+0x35f/0x6e0 [ 137.234720][ T5183] comedi_unlocked_ioctl+0xbd0/0xe90 [ 137.239975][ T5183] __se_sys_ioctl+0xfa/0x170 [ 137.244535][ T5183] do_syscall_64+0x4c/0xa0 [ 137.248925][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.254788][ T5183] [ 137.257086][ T5183] Last potentially related work creation: [ 137.262766][ T5183] kasan_save_stack+0x35/0x60 [ 137.267418][ T5183] kasan_record_aux_stack+0xb8/0x100 [ 137.272673][ T5183] call_rcu+0x182/0x930 [ 137.276798][ T5183] fib_create_info+0x196e/0x24f0 [ 137.281703][ T5183] fib_table_insert+0xe4/0x1b20 [ 137.286520][ T5183] fib_magic+0x2c1/0x390 [ 137.290729][ T5183] fib_add_ifaddr+0x389/0x5e0 [ 137.295375][ T5183] fib_inetaddr_event+0x13c/0x1c0 [ 137.300368][ T5183] blocking_notifier_call_chain+0x103/0x1b0 [ 137.306239][ T5183] __inet_insert_ifa+0x9e9/0xbc0 [ 137.311148][ T5183] inetdev_event+0xdf6/0x1360 [ 137.315795][ T5183] raw_notifier_call_chain+0xcb/0x160 [ 137.321137][ T5183] __dev_notify_flags+0x178/0x2d0 [ 137.326144][ T5183] dev_change_flags+0xe3/0x1a0 [ 137.330884][ T5183] do_setlink+0xc01/0x3980 [ 137.335268][ T5183] rtnl_newlink+0x1419/0x17d0 [ 137.339915][ T5183] rtnetlink_rcv_msg+0x9b9/0xe60 [ 137.344821][ T5183] netlink_rcv_skb+0x1e0/0x430 [ 137.349572][ T5183] netlink_unicast+0x774/0x920 [ 137.354394][ T5183] netlink_sendmsg+0x8ab/0xbc0 [ 137.359134][ T5183] __sys_sendto+0x423/0x580 [ 137.363713][ T5183] __x64_sys_sendto+0xda/0xf0 [ 137.368385][ T5183] do_syscall_64+0x4c/0xa0 [ 137.372803][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.378670][ T5183] [ 137.380969][ T5183] The buggy address belongs to the object at ffff888062b3c200 [ 137.380969][ T5183] which belongs to the cache kmalloc-256 of size 256 [ 137.394990][ T5183] The buggy address is located 184 bytes inside of [ 137.394990][ T5183] 256-byte region [ffff888062b3c200, ffff888062b3c300) [ 137.408233][ T5183] The buggy address belongs to the page: [ 137.413835][ T5183] page:ffffea00018acf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062b3ce00 pfn:0x62b3c [ 137.425258][ T5183] head:ffffea00018acf00 order:1 compound_mapcount:0 [ 137.431826][ T5183] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 137.439779][ T5183] raw: 00fff00000010200 ffffea00018dde00 0000000500000005 ffff888016841b40 [ 137.448370][ T5183] raw: ffff888062b3ce00 000000008010000a 00000001ffffffff 0000000000000000 [ 137.456921][ T5183] page dumped because: kasan: bad access detected [ 137.463311][ T5183] page_owner tracks the page as allocated [ 137.468999][ T5183] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 56141753239, free_ts 11286900773 [ 137.488063][ T5183] get_page_from_freelist+0x1b77/0x1c60 [ 137.493584][ T5183] __alloc_pages+0x1e1/0x470 [ 137.498156][ T5183] new_slab+0xc0/0x4b0 [ 137.502213][ T5183] ___slab_alloc+0x81e/0xdf0 [ 137.506774][ T5183] __kmalloc+0x1cd/0x330 [ 137.511016][ T5183] fib_create_info+0xabc/0x24f0 [ 137.515838][ T5183] fib_table_insert+0xe4/0x1b20 [ 137.520662][ T5183] fib_magic+0x2c1/0x390 [ 137.524873][ T5183] fib_add_ifaddr+0x140/0x5e0 [ 137.529559][ T5183] fib_inetaddr_event+0x13c/0x1c0 [ 137.534568][ T5183] blocking_notifier_call_chain+0x103/0x1b0 [ 137.540433][ T5183] __inet_insert_ifa+0x9e9/0xbc0 [ 137.545349][ T5183] inetdev_event+0xdf6/0x1360 [ 137.549996][ T5183] raw_notifier_call_chain+0xcb/0x160 [ 137.555338][ T5183] __dev_notify_flags+0x178/0x2d0 [ 137.560364][ T5183] dev_change_flags+0xe3/0x1a0 [ 137.565112][ T5183] page last free stack trace: [ 137.569778][ T5183] free_unref_page_prepare+0x637/0x6c0 [ 137.575210][ T5183] free_unref_page+0x94/0x280 [ 137.579859][ T5183] free_contig_range+0x96/0xf0 [ 137.584593][ T5183] destroy_args+0xef/0x8b0 [ 137.588986][ T5183] debug_vm_pgtable+0x318/0x370 [ 137.593806][ T5183] do_one_initcall+0x1ee/0x680 [ 137.598544][ T5183] do_initcall_level+0x137/0x1f0 [ 137.603455][ T5183] do_initcalls+0x4b/0x90 [ 137.607776][ T5183] kernel_init_freeable+0x3ce/0x560 [ 137.612943][ T5183] kernel_init+0x19/0x1b0 [ 137.617262][ T5183] ret_from_fork+0x1f/0x30 [ 137.621765][ T5183] [ 137.624067][ T5183] Memory state around the buggy address: [ 137.629670][ T5183] ffff888062b3c180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.637709][ T5183] ffff888062b3c200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.645758][ T5183] >ffff888062b3c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.653795][ T5183] ^ [ 137.659663][ T5183] ffff888062b3c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.667701][ T5183] ffff888062b3c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.675743][ T5183] ================================================================== [ 137.683777][ T5183] Disabling lock debugging due to kernel taint [ 137.689909][ T5183] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.697399][ T5183] CPU: 0 PID: 5183 Comm: syz.4.265 Tainted: G B 5.15.189-syzkaller #0 [ 137.706832][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.716869][ T5183] Call Trace: [ 137.720148][ T5183] [ 137.723078][ T5183] dump_stack_lvl+0x168/0x230 [ 137.727736][ T5183] ? show_regs_print_info+0x20/0x20 [ 137.732907][ T5183] ? load_image+0x3b0/0x3b0 [ 137.737387][ T5183] panic+0x2c9/0x7f0 [ 137.741255][ T5183] ? bpf_jit_dump+0xd0/0xd0 [ 137.745735][ T5183] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 137.751603][ T5183] ? _raw_spin_unlock+0x40/0x40 [ 137.756426][ T5183] ? __lock_acquire+0xf7/0x7c60 [ 137.761272][ T5183] check_panic_on_warn+0x80/0xa0 [ 137.766192][ T5183] ? __lock_acquire+0xf7/0x7c60 [ 137.771017][ T5183] end_report+0x6d/0xf0 [ 137.775173][ T5183] kasan_report+0x102/0x130 [ 137.779665][ T5183] ? __lock_acquire+0xf7/0x7c60 [ 137.784489][ T5183] __lock_acquire+0xf7/0x7c60 [ 137.789140][ T5183] ? __kernel_text_address+0x9a/0x100 [ 137.794516][ T5183] ? unwind_get_return_address+0x49/0x80 [ 137.800126][ T5183] ? stack_trace_save+0xe0/0xe0 [ 137.804949][ T5183] ? arch_stack_walk+0xf2/0x140 [ 137.809778][ T5183] ? stack_trace_save+0x98/0xe0 [ 137.814603][ T5183] ? verify_lock_unused+0x140/0x140 [ 137.819778][ T5183] ? verify_lock_unused+0x140/0x140 [ 137.824949][ T5183] ? kasan_save_stack+0x4b/0x60 [ 137.829777][ T5183] ? kasan_save_stack+0x35/0x60 [ 137.834597][ T5183] ? kasan_record_aux_stack+0xb8/0x100 [ 137.840027][ T5183] ? task_work_add+0x2f/0x1d0 [ 137.844678][ T5183] ? fput_many+0xde/0x1a0 [ 137.848996][ T5183] ? poll_freewait+0xba/0x210 [ 137.853686][ T5183] ? do_select+0x1629/0x16f0 [ 137.858249][ T5183] ? __se_sys_pselect6+0x2ed/0x3a0 [ 137.863347][ T5183] ? do_syscall_64+0x4c/0xa0 [ 137.867940][ T5183] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.873996][ T5183] lock_acquire+0x197/0x3f0 [ 137.878480][ T5183] ? remove_wait_queue+0x20/0x120 [ 137.883483][ T5183] ? read_lock_is_recursive+0x10/0x10 [ 137.888828][ T5183] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 137.894173][ T5183] ? lockdep_hardirqs_off+0x70/0x100 [ 137.899430][ T5183] _raw_spin_lock_irqsave+0xa4/0xf0 [ 137.904628][ T5183] ? remove_wait_queue+0x20/0x120 [ 137.909625][ T5183] ? _raw_spin_lock+0x40/0x40 [ 137.914290][ T5183] ? kick_process+0xd4/0x140 [ 137.918856][ T5183] ? task_work_add+0x1a7/0x1d0 [ 137.923593][ T5183] remove_wait_queue+0x20/0x120 [ 137.928415][ T5183] poll_freewait+0x99/0x210 [ 137.932892][ T5183] do_select+0x1629/0x16f0 [ 137.937368][ T5183] ? do_select+0xbc1/0x16f0 [ 137.941868][ T5183] ? core_sys_select+0x860/0x860 [ 137.946782][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.953002][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.959228][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.965440][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.971655][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.977870][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.984091][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.990319][ T5183] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 137.996534][ T5183] ? __lock_acquire+0x7c60/0x7c60 [ 138.001548][ T5183] ? __lock_acquire+0x7c60/0x7c60 [ 138.006559][ T5183] ? __might_fault+0xb3/0x110 [ 138.011230][ T5183] core_sys_select+0x65c/0x860 [ 138.015968][ T5183] ? poll_select_set_timeout+0x150/0x150 [ 138.021577][ T5183] ? sigprocmask+0x190/0x190 [ 138.026244][ T5183] ? __lock_acquire+0x7c60/0x7c60 [ 138.031253][ T5183] __se_sys_pselect6+0x2ed/0x3a0 [ 138.036193][ T5183] ? __x64_sys_pselect6+0xf0/0xf0 [ 138.041201][ T5183] ? __x64_sys_pselect6+0x1d/0xf0 [ 138.046214][ T5183] do_syscall_64+0x4c/0xa0 [ 138.050612][ T5183] ? clear_bhb_loop+0x30/0x80 [ 138.055264][ T5183] ? clear_bhb_loop+0x30/0x80 [ 138.059914][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.066133][ T5183] RIP: 0033:0x7f308b06bbe9 [ 138.070528][ T5183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.090107][ T5183] RSP: 002b:00007f30892d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 138.098496][ T5183] RAX: ffffffffffffffda RBX: 00007f308b292fa0 RCX: 00007f308b06bbe9 [ 138.106442][ T5183] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 138.114387][ T5183] RBP: 00007f308b0eee19 R08: 0000000000000000 R09: 0000000000000000 [ 138.122328][ T5183] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 138.130272][ T5183] R13: 00007f308b293038 R14: 00007f308b292fa0 R15: 00007ffebcab6838 [ 138.138221][ T5183] [ 138.141413][ T5183] Kernel Offset: disabled [ 138.145742][ T5183] Rebooting in 86400 seconds..