last executing test programs: 9.927472303s ago: executing program 2 (id=3): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r0, 0x0, &(0x7f0000000140)={0x2000000000000048, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x8001, @local, 0xe9f0}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000290000000b00000040000a8f00000000140000000000008a578d44a4beeba1f4715deafb75000000001400000000000000290000003e000000073000"/86], 0x48}}], 0x1, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r7, 0x89f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x802, 0xd, "5dee0000005940090000000f00"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0) unshare(0x62040200) 9.662971078s ago: executing program 0 (id=7): msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x2, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9}) 8.317499603s ago: executing program 1 (id=12): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) 5.878044699s ago: executing program 0 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 5.447411998s ago: executing program 1 (id=19): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, 0x0) 5.400379238s ago: executing program 0 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054) 1.949822734s ago: executing program 4 (id=26): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x5, 0x2cc, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) 1.64404004s ago: executing program 4 (id=29): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sigaltstack(0x0, 0x0) 1.643906329s ago: executing program 3 (id=30): r0 = io_uring_setup(0x4272, &(0x7f0000000080)={0x0, 0xb49, 0x400, 0x2, 0x298}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000780)={0x8001, 0x2, 0xff}, 0x0) 1.59127087s ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.554448161s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) lremovexattr(0x0, 0x0) 1.531335871s ago: executing program 1 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c51400030069703667726530ee3900"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.403106514s ago: executing program 4 (id=34): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001009a"], 0x0) 1.324012425s ago: executing program 3 (id=35): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 1.322508316s ago: executing program 1 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x400, 0x3, 0x17}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0x0, 0x0, 0x0) dup3(r4, r2, 0x80000) 1.305168526s ago: executing program 0 (id=37): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc100c6, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@errors_remount}, {@debug}, {@inlinecrypt}]}, 0x6, 0x610, &(0x7f0000002300)="$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") 1.215505848s ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f00000006c0)="5810235a8c132d765b", 0x9, 0x1}]) 1.160046298s ago: executing program 3 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x80000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') pread64(r2, &(0x7f0000000080)=""/220, 0xdc, 0x4009) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.140839459s ago: executing program 1 (id=40): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003900070125"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007600"], 0xfe33) 947.316623ms ago: executing program 4 (id=41): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) syz_read_part_table(0x1053, &(0x7f00000008c0)="$eJzszzGqwkAUhtH/PRMSsHEL1q4ittqmchPuQMHGjdi4MVchkTEWCrYiwjnVfMPMhRu+6u+lhiRtOdRvnk6fY3XdNsl+Ms+h+0/aoblfd7OclouU2JReD6NdnWr8eOkfE45Nlf78kaUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MfcAgAA///KhRGw") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x1, 0x0, 0x0, 0x0, 0x1) 902.804063ms ago: executing program 1 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=r0], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f00000010c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) r4 = epoll_create(0xf) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000007c0)={0x0, "39a0ad0b034162fe8e7c4ce914db211ccb64df2e9934a27b618a1da73a1a6fff3a2313f1ce39da7db811f1a0b4fffcf496945bceef4f1d1343d056883b493c7d", 0x39}, 0x48, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 355.855844ms ago: executing program 0 (id=43): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000040), &(0x7f0000000180)='%-010d \x00'}, 0x20) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='rxrpc_propose_ack\x00'}, 0x18) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r6, r6, 0x0, 0x40000f63c) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200e1090f8f00000000000080000000"], 0x26}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}}, 0x4008090) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) 257.954866ms ago: executing program 4 (id=44): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$FITHAW(r4, 0xc0045878) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000002209000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b62, 0x8000000000001) 226.920166ms ago: executing program 3 (id=45): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000026c0)={0x34, r1, 0x21, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1e}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x0) 0s ago: executing program 3 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="3502000081280000180012800e000100776972656775617264"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. syzkaller login: [ 57.894649][ T4171] cgroup: Unknown subsys name 'net' [ 58.059731][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.519020][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.919861][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.044652][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.093633][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 61.126497][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.187859][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.208177][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.215937][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.224660][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.254993][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.262115][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.273237][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.292637][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.299723][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.311480][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.319789][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.327041][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.335080][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.421418][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.446870][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.456486][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.464479][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.472534][ T4196] device bridge_slave_0 entered promiscuous mode [ 61.481765][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.499461][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.506993][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.515569][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.524844][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.534409][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.541587][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.549755][ T4196] device bridge_slave_1 entered promiscuous mode [ 61.573992][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.581092][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.590116][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.619886][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.627359][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.635778][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.672161][ T4184] team0: Port device team_slave_0 added [ 61.680098][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.690814][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.698139][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.706129][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.723691][ T4191] team0: Port device team_slave_0 added [ 61.731421][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.741874][ T4184] team0: Port device team_slave_1 added [ 61.758808][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.769700][ T4191] team0: Port device team_slave_1 added [ 61.806924][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.824488][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.831483][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.857788][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.886366][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.896800][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.904132][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.930307][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.950584][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.957812][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.984660][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.998567][ T4196] team0: Port device team_slave_0 added [ 62.013231][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.023727][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.030727][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.057197][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.084685][ T4196] team0: Port device team_slave_1 added [ 62.118227][ T4183] team0: Port device team_slave_0 added [ 62.126792][ T4183] team0: Port device team_slave_1 added [ 62.186076][ T4193] team0: Port device team_slave_0 added [ 62.196441][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.203655][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.213580][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.220343][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.227428][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.235485][ T4184] Cannot create hsr debugfs directory [ 62.241655][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.248836][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.275384][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.296399][ T4193] team0: Port device team_slave_1 added [ 62.313741][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.320762][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.347056][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.373911][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.380976][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.407143][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.422519][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.429531][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.455546][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.514145][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.521127][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.547848][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.560668][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.567866][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.593920][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.613163][ T4185] Bluetooth: hci0: command 0x0409 tx timeout [ 62.619640][ T4185] Bluetooth: hci1: command 0x0409 tx timeout [ 62.656064][ T4196] device hsr_slave_0 entered promiscuous mode [ 62.663486][ T4196] device hsr_slave_1 entered promiscuous mode [ 62.670254][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.678022][ T4196] Cannot create hsr debugfs directory [ 62.702367][ T4185] Bluetooth: hci4: command 0x0409 tx timeout [ 62.703274][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 62.708864][ T4185] Bluetooth: hci3: command 0x0409 tx timeout [ 62.755672][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.763017][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.769679][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.777568][ T4183] Cannot create hsr debugfs directory [ 62.808550][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.817128][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.824057][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.831655][ T4193] Cannot create hsr debugfs directory [ 63.099686][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.111375][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.121173][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.135191][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.214446][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.224588][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.246086][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.269531][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.291204][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.311370][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.323849][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.348267][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.376650][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.394825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.408635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.420160][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.440498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.450210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.459713][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.467101][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.477319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.488498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.497756][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.505483][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.513440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.527606][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.537304][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.550794][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.564268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.585767][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.619404][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.670445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.680651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.690833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.700323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.722605][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.733413][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.761094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.769450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.778429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.788116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.796997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.806344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.826765][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.839213][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.854436][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.897778][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.931948][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.946845][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.994316][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.010092][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.018722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.032778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.067364][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.074415][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.085361][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.095202][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.102425][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.110227][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.118445][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.126967][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.136721][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.146245][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.153372][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.161123][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.183771][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.211522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.221780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.230064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.240444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.249718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.258620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.267187][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.274301][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.282166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.292222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.301008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.309420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.330412][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.340323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.350332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.360662][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.367834][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.376487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.385095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.392724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.401514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.410719][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.418023][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.433951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.442141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.454493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.465594][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.472745][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.480581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.498524][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.508386][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.548071][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.555808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.567653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.577634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.586902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.596945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.606104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.616123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.624973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.633801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.642356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.652153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.660937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.669767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.678741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.698529][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.709168][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 64.715759][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 64.719143][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.733954][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.752861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.761535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.770923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.779707][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 64.785961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.786752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.794776][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 64.808618][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 64.812179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.829105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.844296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.880912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.899523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.914953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.936411][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.948182][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.958317][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.981327][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.012671][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.036995][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.053496][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.062061][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.083377][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.099800][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.106952][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.115587][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.124982][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.134104][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.141293][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.149307][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.160284][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.170026][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.203712][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.219541][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.228876][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.237205][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.245616][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.255031][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.273029][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.292796][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.301524][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.310559][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.320046][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.330686][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.339559][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.348177][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.356949][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.367833][ T4184] device veth0_vlan entered promiscuous mode [ 65.380819][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.396604][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.409134][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.425713][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.451746][ T4184] device veth1_vlan entered promiscuous mode [ 65.460424][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.490039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.500227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.510053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.519284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.558498][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.569617][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.610852][ T4184] device veth0_macvtap entered promiscuous mode [ 65.631497][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.644685][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.654554][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.662066][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.670853][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.682100][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.691524][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.703186][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.711177][ T4184] device veth1_macvtap entered promiscuous mode [ 65.725431][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.739589][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.750191][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.764937][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.773937][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.783354][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.791274][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.813605][ T4191] device veth0_vlan entered promiscuous mode [ 65.834674][ T4183] device veth0_vlan entered promiscuous mode [ 65.849637][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.859186][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.879659][ T4191] device veth1_vlan entered promiscuous mode [ 65.889886][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.900904][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.909202][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.920299][ T4183] device veth1_vlan entered promiscuous mode [ 65.936938][ T4193] device veth0_vlan entered promiscuous mode [ 65.949074][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.961637][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.970318][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.980720][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.989383][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.998356][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.007229][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.016412][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.025013][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.039439][ T4193] device veth1_vlan entered promiscuous mode [ 66.049631][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.065934][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.112530][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.121337][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.133873][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.142128][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.152140][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.169245][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.178750][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.187822][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.196930][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.224429][ T4191] device veth0_macvtap entered promiscuous mode [ 66.232080][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.248673][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.261353][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.276611][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.288185][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.306812][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.316519][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.335587][ T4191] device veth1_macvtap entered promiscuous mode [ 66.358065][ T4193] device veth0_macvtap entered promiscuous mode [ 66.371792][ T4183] device veth0_macvtap entered promiscuous mode [ 66.401573][ T4193] device veth1_macvtap entered promiscuous mode [ 66.415292][ T4183] device veth1_macvtap entered promiscuous mode [ 66.466057][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.487747][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.499147][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.513760][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.525461][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.538274][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.547657][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.556765][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.565193][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.573569][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.582743][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.591458][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.600195][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.614934][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.628256][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.638688][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.649441][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.661044][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.679813][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.691476][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.703233][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.714490][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.724649][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.735423][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.747306][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.755333][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.764343][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.774084][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.783050][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 66.783560][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.792741][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 66.800428][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.817140][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.827668][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.838210][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.849674][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.858574][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 66.865132][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 66.867318][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.872417][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 66.887239][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.896074][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905354][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.934936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.944198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.953496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.962993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.974239][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.983440][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.992842][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.001667][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.039379][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.050048][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.060370][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.071829][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.081904][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.093574][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.105444][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.133390][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.141427][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.162640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.170648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.181454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.194313][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.204251][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.213419][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222653][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.280469][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.289464][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.302165][ T4196] device veth0_vlan entered promiscuous mode [ 67.325880][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.328026][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.345848][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.354393][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.365202][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.395308][ T4196] device veth1_vlan entered promiscuous mode [ 67.426316][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.466549][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.471699][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.495567][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.519586][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.561585][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.569799][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.580022][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.601374][ T4196] device veth0_macvtap entered promiscuous mode [ 67.608845][ T534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.630315][ T534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.640413][ T4196] device veth1_macvtap entered promiscuous mode [ 67.660338][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.669104][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.678578][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.687569][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.711979][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.721552][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.735074][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.765527][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.781706][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.792695][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.803691][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.816597][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.827337][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.837978][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.852011][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.867454][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.880037][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.891345][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.903890][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.914657][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.927346][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.950592][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.960771][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.973166][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.984961][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.994062][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.009416][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.017749][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.028840][ T4291] loop0: detected capacity change from 0 to 4096 [ 68.036346][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.047659][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.057770][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.078587][ T4289] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 68.084317][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.097244][ T4291] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 68.105261][ T4289] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 68.134952][ T4291] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 68.136741][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.160038][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169075][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.253601][ T534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.301662][ T534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.365799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.383239][ T534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.421372][ T534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.445847][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.474168][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.476923][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.515237][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.862396][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 68.873079][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 68.884862][ T4296] infiniband syz!: set active [ 68.911629][ T4296] infiniband syz!: added team_slave_0 [ 68.932644][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 68.945219][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 68.975885][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 69.156514][ T26] audit: type=1326 audit(1759398781.927:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.209397][ T4240] kernel write not supported for file /5/clear_refs (pid: 4240 comm: kworker/0:5) [ 69.247654][ T4311] loop1: detected capacity change from 0 to 1024 [ 69.255888][ T4296] RDS/IB: syz!: added [ 69.260711][ T4296] smc: adding ib device syz! with port count 1 [ 69.267483][ T26] audit: type=1326 audit(1759398781.927:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.297155][ T4296] smc: ib device syz! port 1 has pnetid [ 69.323173][ T26] audit: type=1326 audit(1759398781.927:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.355600][ T4311] ======================================================= [ 69.355600][ T4311] WARNING: The mand mount option has been deprecated and [ 69.355600][ T4311] and is ignored by this kernel. Remove the mand [ 69.355600][ T4311] option from the mount to silence this warning. [ 69.355600][ T4311] ======================================================= [ 69.451997][ T26] audit: type=1326 audit(1759398781.947:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.540498][ T26] audit: type=1326 audit(1759398781.947:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.578290][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,nodioread_nolock,noquota,barrier,errors=remount-ro,nodioread_nolock,. Quota mode: none. [ 69.612885][ T26] audit: type=1326 audit(1759398781.967:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.641026][ T4311] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.757388][ T26] audit: type=1326 audit(1759398781.967:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.847860][ T4311] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 4: comm syz.1.10: lblock 4 mapped to illegal pblock 4 (length 1) [ 69.897534][ T26] audit: type=1326 audit(1759398781.967:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 69.942732][ T4311] EXT4-fs (loop1): Remounting filesystem read-only [ 69.958840][ T26] audit: type=1326 audit(1759398781.967:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 70.058995][ T26] audit: type=1326 audit(1759398781.967:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca5988ec9 code=0x7ffc0000 [ 70.272635][ T4329] process '+}[@' launched './file1' with NULL argv: empty string added [ 70.361365][ T4335] netlink: 'syz.4.13': attribute type 10 has an invalid length. [ 70.458960][ T4335] team0: Port device dummy0 added [ 70.734063][ T4343] loop4: detected capacity change from 0 to 512 [ 70.790388][ T4343] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 70.990099][ T4349] device syzkaller0 entered promiscuous mode [ 71.337697][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344546][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.074221][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.125946][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.178407][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.207953][ T4371] device bridge_slave_0 left promiscuous mode [ 72.261222][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.289740][ T4371] device bridge_slave_1 left promiscuous mode [ 72.318835][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.349312][ T4371] bond0: (slave bond_slave_0): Releasing backup interface [ 72.417449][ T4371] bond0: (slave bond_slave_1): Releasing backup interface [ 72.449637][ T4371] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 72.475025][ T4371] rdma_rxe: ignoring netdev event = 26 for team_slave_0 [ 72.498207][ T4371] rdma_rxe: ignoring netdev event = 21 for team_slave_0 [ 72.515742][ T4371] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 72.567900][ T4371] infiniband syz!: set down [ 72.601002][ T4371] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 72.629568][ T4371] rdma_rxe: ignoring netdev event = 9 for team_slave_0 [ 72.661041][ T4371] rdma_rxe: ignoring netdev event = 8 for team_slave_0 [ 72.678915][ T4371] team0: Port device team_slave_0 removed [ 72.701289][ T4371] team0: Port device team_slave_1 removed [ 72.737283][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.758862][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.781685][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.799792][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.848747][ T4373] team0: Mode changed to "random" [ 72.912520][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 72.942325][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 73.162113][ T4380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.542657][ T4389] loop3: detected capacity change from 0 to 512 [ 73.826948][ T4389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.840188][ T4389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.020539][ T4389] EXT4-fs (loop3): 1 truncate cleaned up [ 74.026352][ T4389] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 75.172242][ C0] sched: RT throttling activated [ 75.267320][ T4380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.009096][ T13] kernel write not supported for file /23/clear_refs (pid: 13 comm: kworker/0:1) [ 76.169619][ T4380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.299853][ T4380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.525208][ T4407] loop4: detected capacity change from 0 to 256 [ 76.620638][ T4380] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.633072][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 76.633089][ T26] audit: type=1800 audit(1759398789.397:75): pid=4407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.26" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 76.694735][ T4380] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.710275][ T4380] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.745851][ T4380] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.908818][ T26] audit: type=1326 audit(1759398789.677:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24540ec9 code=0x7ffc0000 [ 77.024289][ T26] audit: type=1326 audit(1759398789.717:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd24540ec9 code=0x7ffc0000 [ 77.125914][ T26] audit: type=1326 audit(1759398789.717:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24540ec9 code=0x7ffc0000 [ 77.210967][ T4431] loop0: detected capacity change from 0 to 1024 [ 77.223465][ T26] audit: type=1326 audit(1759398789.717:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24540ec9 code=0x7ffc0000 [ 77.301013][ T26] audit: type=1326 audit(1759398789.717:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdd24540ec9 code=0x7ffc0000 [ 77.323768][ T4431] EXT4-fs (loop0): Ignoring removed bh option [ 77.329895][ T4431] EXT4-fs (loop0): inline encryption not supported [ 77.363978][ T4431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce028, mo2=0000] [ 77.382349][ T26] audit: type=1326 audit(1759398789.717:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24540ec9 code=0x7ffc0000 [ 77.427449][ T26] audit: type=1326 audit(1759398789.777:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.0.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade4931ec9 code=0x7ffc0000 [ 77.483116][ T26] audit: type=1326 audit(1759398789.777:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.0.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade4931ec9 code=0x7ffc0000 [ 77.516825][ T4431] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.37: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.585265][ T4431] EXT4-fs (loop0): Remounting filesystem read-only [ 77.591838][ T4431] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 77.632426][ T4431] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.37: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.660454][ T4431] EXT4-fs (loop0): Remounting filesystem read-only [ 77.678938][ T4431] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.37: Failed to acquire dquot type 0 [ 77.710218][ T4431] EXT4-fs (loop0): Remounting filesystem read-only [ 77.718767][ T4443] loop4: detected capacity change from 0 to 8192 [ 77.725990][ T4431] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 77.754413][ T4431] EXT4-fs (loop0): Remounting filesystem read-only [ 77.761196][ T4431] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.37: mark_inode_dirty error [ 77.780495][ T4431] EXT4-fs (loop0): Remounting filesystem read-only [ 77.787420][ T4431] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 77.806645][ T4431] EXT4-fs (loop0): 1 orphan inode deleted [ 77.818938][ T4443] loop4: p2 p3 p4[EZD] [ 77.829539][ T4431] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,errors=remount-ro,debug,inlinecrypt,. Quota mode: writeback. [ 77.850470][ T4443] loop4: p3 start 360447 is beyond EOD, truncated [ 77.852613][ T144] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.881773][ T4443] loop4: p4 size 264072 extends beyond EOD, truncated [ 77.899089][ T144] EXT4-fs (loop0): Remounting filesystem read-only [ 77.941284][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 0 [ 78.008541][ T144] EXT4-fs (loop0): Remounting filesystem read-only [ 78.041073][ T4191] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 78.055795][ T4445] loop1: detected capacity change from 0 to 8192 [ 78.101884][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 78.115143][ T4191] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 78.179954][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 78.219878][ T4191] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 78.249701][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 78.472443][ C0] ------------[ cut here ]------------ [ 78.478203][ C0] WARNING: CPU: 0 PID: 4308 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 78.487746][ C0] Modules linked in: [ 78.491696][ C0] CPU: 0 PID: 4308 Comm: syz.2.3 Not tainted syzkaller #0 [ 78.498900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.509047][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 78.515318][ C0] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 78.535223][ C0] RSP: 0018:ffffc90000007970 EFLAGS: 00010246 [ 78.541365][ C0] RAX: ffffffff819ed760 RBX: 0000000000000000 RCX: ffff88801daa0000 [ 78.549544][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.557701][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1003b54001 [ 78.565868][ C0] R10: ffffed1003b54001 R11: 1ffff11003b54000 R12: ffff88801daa1788 [ 78.573936][ C0] R13: 00007ffffffff000 R14: ffffc900000079e8 R15: 0000000000000000 [ 78.581957][ C0] FS: 00007f0c9d6966c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 78.590988][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.597649][ C0] CR2: 000000110c386026 CR3: 000000007cce8000 CR4: 00000000003506f0 [ 78.605696][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.613734][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.621731][ C0] Call Trace: [ 78.625138][ C0] [ 78.628009][ C0] bpf_probe_read_compat+0xdd/0x170 [ 78.633315][ C0] bpf_prog_03eebc38237b138e+0x34/0xde4 [ 78.638895][ C0] bpf_trace_run2+0x15b/0x2d0 [ 78.643643][ C0] ? mark_lock+0x94/0x320 [ 78.648004][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 78.652918][ C0] ? ip6_dst_destroy+0x96/0x240 [ 78.657807][ C0] ? ip6_dst_destroy+0x96/0x240 [ 78.662728][ C0] __bpf_trace_kfree+0x6e/0x90 [ 78.667526][ C0] ? ip6_dst_destroy+0x96/0x240 [ 78.672449][ C0] kfree+0x25f/0x2a0 [ 78.676384][ C0] ? read_lock_is_recursive+0x10/0x10 [ 78.681818][ C0] ip6_dst_destroy+0x96/0x240 [ 78.686573][ C0] ? ip6_default_advmss+0x2a0/0x2a0 [ 78.691801][ C0] dst_destroy+0xc0/0x2e0 [ 78.696210][ C0] rcu_core+0x962/0x15d0 [ 78.700502][ C0] ? local_bh_disable+0x20/0x20 [ 78.705415][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 78.710498][ C0] ? rebalance_domains+0xa56/0xb80 [ 78.715689][ C0] handle_softirqs+0x328/0x820 [ 78.720487][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 78.725416][ C0] ? do_softirq+0x200/0x200 [ 78.729951][ C0] __irq_exit_rcu+0x12f/0x220 [ 78.734682][ C0] ? irq_exit_rcu+0x20/0x20 [ 78.739356][ C0] irq_exit_rcu+0x5/0x20 [ 78.743660][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 78.749319][ C0] [ 78.752315][ C0] [ 78.755271][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.761282][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 78.767070][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 78.786833][ C0] RSP: 0018:ffffc900011ff938 EFLAGS: 00000206 [ 78.792961][ C0] RAX: 70b91ff45318f800 RBX: ffff88801daa0000 RCX: 70b91ff45318f800 [ 78.800961][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2ac0 RDI: ffffffff8a59a480 [ 78.809021][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad323e [ 78.817168][ C0] R10: fffffbfff1ad323e R11: 1ffffffff1ad323d R12: 0000000000000001 [ 78.825196][ C0] R13: 0000000000000246 R14: ffffffff8c11c720 R15: ffff88801daa0b18 [ 78.833435][ C0] ___might_sleep+0xf2/0x600 [ 78.838063][ C0] ? rcu_lock_release+0x5/0x20 [ 78.842892][ C0] ? __might_sleep+0xf0/0xf0 [ 78.847503][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 78.852609][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 78.858635][ C0] inet_twsk_purge+0x10a/0x810 [ 78.863511][ C0] ? __might_sleep+0xf0/0xf0 [ 78.868126][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 78.873553][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 78.878784][ C0] tcp_sk_exit_batch+0x28/0x90 [ 78.883599][ C0] ? tcp_sk_exit+0xa0/0xa0 [ 78.888036][ C0] setup_net+0x822/0x9f0 [ 78.892330][ C0] ? copy_net_ns+0x5b0/0x5b0 [ 78.896958][ C0] ? preempt_count_add+0x8d/0x190 [ 78.902005][ C0] ? down_read_killable+0x1ce/0x340 [ 78.907270][ C0] copy_net_ns+0x348/0x5b0 [ 78.911756][ C0] create_new_namespaces+0x3d3/0x6f0 [ 78.917119][ C0] unshare_nsproxy_namespaces+0x116/0x160 [ 78.922899][ C0] ksys_unshare+0x4bc/0x890 [ 78.927431][ C0] ? sighand_ctor+0x40/0x40 [ 78.931961][ C0] ? lock_chain_count+0x20/0x20 [ 78.936875][ C0] ? vtime_user_exit+0x2dc/0x400 [ 78.941841][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 78.947802][ C0] __x64_sys_unshare+0x34/0x40 [ 78.952617][ C0] do_syscall_64+0x4c/0xa0 [ 78.957059][ C0] ? clear_bhb_loop+0x30/0x80 [ 78.961757][ C0] ? clear_bhb_loop+0x30/0x80 [ 78.966502][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.972467][ C0] RIP: 0033:0x7f0c9f44fec9 [ 78.976902][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.996852][ C0] RSP: 002b:00007f0c9d696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 79.005343][ C0] RAX: ffffffffffffffda RBX: 00007f0c9f6a7090 RCX: 00007f0c9f44fec9 [ 79.013373][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 79.021368][ C0] RBP: 00007f0c9f4d2f91 R08: 0000000000000000 R09: 0000000000000000 [ 79.029405][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.037467][ C0] R13: 00007f0c9f6a7128 R14: 00007f0c9f6a7090 R15: 00007ffe2d306758 [ 79.045595][ C0] [ 79.048657][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.055944][ C0] CPU: 0 PID: 4308 Comm: syz.2.3 Not tainted syzkaller #0 [ 79.063069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.073142][ C0] Call Trace: [ 79.076438][ C0] [ 79.079299][ C0] dump_stack_lvl+0x168/0x230 [ 79.084009][ C0] ? show_regs_print_info+0x20/0x20 [ 79.089235][ C0] ? load_image+0x3b0/0x3b0 [ 79.093771][ C0] panic+0x2c9/0x7f0 [ 79.097690][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 79.102219][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.107779][ C0] __warn+0x248/0x2b0 [ 79.111797][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.117362][ C0] report_bug+0x1b7/0x2e0 [ 79.121742][ C0] handle_bug+0x3a/0x70 [ 79.125929][ C0] exc_invalid_op+0x16/0x40 [ 79.130552][ C0] asm_exc_invalid_op+0x16/0x20 [ 79.135433][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 79.141631][ C0] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 79.161304][ C0] RSP: 0018:ffffc90000007970 EFLAGS: 00010246 [ 79.167426][ C0] RAX: ffffffff819ed760 RBX: 0000000000000000 RCX: ffff88801daa0000 [ 79.175437][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.176141][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.183432][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1003b54001 [ 79.183461][ C0] R10: ffffed1003b54001 R11: 1ffff11003b54000 R12: ffff88801daa1788 [ 79.183476][ C0] R13: 00007ffffffff000 R14: ffffc900000079e8 R15: 0000000000000000 [ 79.183500][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.201542][ T4198] udevd[4198]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 79.209199][ C0] bpf_probe_read_compat+0xdd/0x170 [ 79.209236][ C0] bpf_prog_03eebc38237b138e+0x34/0xde4 [ 79.209258][ C0] bpf_trace_run2+0x15b/0x2d0 [ 79.209277][ C0] ? mark_lock+0x94/0x320 [ 79.209300][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 79.209317][ C0] ? ip6_dst_destroy+0x96/0x240 [ 79.209349][ C0] ? ip6_dst_destroy+0x96/0x240 [ 79.209371][ C0] __bpf_trace_kfree+0x6e/0x90 [ 79.209397][ C0] ? ip6_dst_destroy+0x96/0x240 [ 79.209420][ C0] kfree+0x25f/0x2a0 [ 79.209437][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.209464][ C0] ip6_dst_destroy+0x96/0x240 [ 79.290711][ C0] ? ip6_default_advmss+0x2a0/0x2a0 [ 79.295925][ C0] dst_destroy+0xc0/0x2e0 [ 79.300292][ C0] rcu_core+0x962/0x15d0 [ 79.304556][ C0] ? local_bh_disable+0x20/0x20 [ 79.309418][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 79.314460][ C0] ? rebalance_domains+0xa56/0xb80 [ 79.319604][ C0] handle_softirqs+0x328/0x820 [ 79.324381][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 79.329239][ C0] ? do_softirq+0x200/0x200 [ 79.333750][ C0] __irq_exit_rcu+0x12f/0x220 [ 79.338430][ C0] ? irq_exit_rcu+0x20/0x20 [ 79.342945][ C0] irq_exit_rcu+0x5/0x20 [ 79.347184][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 79.352815][ C0] [ 79.355745][ C0] [ 79.358681][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 79.364672][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 79.370418][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 79.390041][ C0] RSP: 0018:ffffc900011ff938 EFLAGS: 00000206 [ 79.396126][ C0] RAX: 70b91ff45318f800 RBX: ffff88801daa0000 RCX: 70b91ff45318f800 [ 79.404210][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2ac0 RDI: ffffffff8a59a480 [ 79.412190][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad323e [ 79.420167][ C0] R10: fffffbfff1ad323e R11: 1ffffffff1ad323d R12: 0000000000000001 [ 79.428139][ C0] R13: 0000000000000246 R14: ffffffff8c11c720 R15: ffff88801daa0b18 [ 79.436135][ C0] ___might_sleep+0xf2/0x600 [ 79.440763][ C0] ? rcu_lock_release+0x5/0x20 [ 79.445538][ C0] ? __might_sleep+0xf0/0xf0 [ 79.450245][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 79.455273][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 79.461278][ C0] inet_twsk_purge+0x10a/0x810 [ 79.466073][ C0] ? __might_sleep+0xf0/0xf0 [ 79.470669][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 79.476045][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 79.481254][ C0] tcp_sk_exit_batch+0x28/0x90 [ 79.486022][ C0] ? tcp_sk_exit+0xa0/0xa0 [ 79.490441][ C0] setup_net+0x822/0x9f0 [ 79.494688][ C0] ? copy_net_ns+0x5b0/0x5b0 [ 79.499288][ C0] ? preempt_count_add+0x8d/0x190 [ 79.504327][ C0] ? down_read_killable+0x1ce/0x340 [ 79.509736][ C0] copy_net_ns+0x348/0x5b0 [ 79.514163][ C0] create_new_namespaces+0x3d3/0x6f0 [ 79.519476][ C0] unshare_nsproxy_namespaces+0x116/0x160 [ 79.525209][ C0] ksys_unshare+0x4bc/0x890 [ 79.529720][ C0] ? sighand_ctor+0x40/0x40 [ 79.534224][ C0] ? lock_chain_count+0x20/0x20 [ 79.539097][ C0] ? vtime_user_exit+0x2dc/0x400 [ 79.544041][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 79.549944][ C0] __x64_sys_unshare+0x34/0x40 [ 79.554710][ C0] do_syscall_64+0x4c/0xa0 [ 79.559157][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.563868][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.568585][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.574508][ C0] RIP: 0033:0x7f0c9f44fec9 [ 79.578933][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.598633][ C0] RSP: 002b:00007f0c9d696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 79.607055][ C0] RAX: ffffffffffffffda RBX: 00007f0c9f6a7090 RCX: 00007f0c9f44fec9 [ 79.615027][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 79.623008][ C0] RBP: 00007f0c9f4d2f91 R08: 0000000000000000 R09: 0000000000000000 [ 79.630985][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.639045][ C0] R13: 00007f0c9f6a7128 R14: 00007f0c9f6a7090 R15: 00007ffe2d306758 [ 79.647139][ C0] [ 79.650255][ C0] Kernel Offset: disabled [ 79.654746][ C0] Rebooting in 86400 seconds..