last executing test programs: 9.323825083s ago: executing program 1 (id=131): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x4, 0x9}}, @void, @val={0x76, 0x6, {0x0, 0x6, 0x28, 0x924}}}}}}]}, 0x48}}, 0x0) shutdown(0xffffffffffffffff, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x801) write$binfmt_aout(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000004000"], 0x48) getpeername(r3, 0x0, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000cc0)}, 0x20) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 7.500301011s ago: executing program 3 (id=137): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) io_uring_setup(0x65e5, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400"], 0x64}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) listen(r1, 0x400000001ffffffd) 7.126870838s ago: executing program 4 (id=140): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x4044) 6.842547734s ago: executing program 4 (id=141): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) 6.739494253s ago: executing program 4 (id=142): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0xff02, 0x0, 0x0, 0x9, 0x0, "4484af4dd089cb0b"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 6.049776906s ago: executing program 3 (id=144): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3, 0xa53) 5.955200482s ago: executing program 1 (id=145): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000074b16ae0a5000000000000000000ac38907820fc246f00000000000000009a5448484cc5cb17c92cd71c69b498334a72322e095218b606e394d52b7cc0178a397acf60d703e0d23ca4aa0ab41f73a49f82426ac9"], 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000740)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) 5.326510054s ago: executing program 4 (id=147): socket$packet(0x11, 0xa, 0x300) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008666604880000000000010902240001000009210000000122070009058103000000"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x1}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x10, 0x400) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000), 0x0, 0x0, 0x10012, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105b000000000004000000000000e29500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x6, 0x3007, 0x1}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000300)=0x3) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1c) 5.167436542s ago: executing program 0 (id=148): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) pidfd_send_signal(r0, 0x3b, &(0x7f00000000c0)={0x23, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) 5.135948423s ago: executing program 2 (id=149): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x400, 0x210, 0x210, 0x108, 0x318, 0x210, 0x318, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x71000000, {0x15b}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x1d000000}}, {0x28}}}}, 0x450) 4.970857974s ago: executing program 2 (id=150): preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.719480439s ago: executing program 3 (id=151): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x4044) 4.35033159s ago: executing program 1 (id=152): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) 3.908585449s ago: executing program 3 (id=153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="180900"/13, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 3.558109543s ago: executing program 0 (id=154): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) io_uring_setup(0x65e5, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400"], 0x64}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) listen(r1, 0x400000001ffffffd) 2.996620527s ago: executing program 1 (id=155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x20}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, 0x0, 0x0) 2.532002719s ago: executing program 0 (id=156): unshare(0x2a060400) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0xa0a03, 0x0) poll(&(0x7f0000001a80)=[{r1, 0x5514}, {r0, 0x410}], 0x2, 0xfffffff7) 2.355531418s ago: executing program 1 (id=157): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0xff02, 0x0, 0x0, 0x9, 0x0, "4484af4dd089cb0b"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 2.050353939s ago: executing program 3 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x29, 0x0, &(0x7f0000000100)=0x2f) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002300)={'wg0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000018001680140001801000040000abdb89110000e0ffffff00140014"], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000023c0)={'ip6tnl0\x00', &(0x7f0000002340)={'ip6gre0\x00', 0x0, 0x29, 0xa, 0x4, 0x5, 0x45, @rand_addr=' \x01\x00', @empty, 0x7860, 0x7, 0x8ec}}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000002680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002640)={&(0x7f0000002400)={0x218, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x48880}, 0x4040000) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x630}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x68}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x8) write$midi(0xffffffffffffffff, 0x0, 0x0) 1.573072475s ago: executing program 4 (id=159): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x28, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}]}, 0x28}}, 0x0) 1.415446686s ago: executing program 0 (id=160): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x400, 0x210, 0x210, 0x108, 0x318, 0x210, 0x318, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x71000000, {0x15b}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x1d000000}}, {0x28}}}}, 0x450) 1.366528473s ago: executing program 2 (id=161): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3, 0xa53) 1.032787928s ago: executing program 1 (id=162): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000074b16ae0a5000000000000000000ac38907820fc246f00000000000000009a5448484cc5cb17c92cd71c69b498334a72322e095218b606e394d52b7cc0178a397acf60d703e0d23ca4aa0ab41f73a49f82426ac9"], 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000740)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) 802.320467ms ago: executing program 0 (id=163): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2680, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/6, 0x6}], 0x1, 0x0, 0x0) 802.133777ms ago: executing program 4 (id=164): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) 802.007706ms ago: executing program 2 (id=165): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) 636.504832ms ago: executing program 3 (id=166): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) io_uring_setup(0x65e5, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400000011"], 0x64}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) listen(r1, 0x400000001ffffffd) 213.683161ms ago: executing program 0 (id=167): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x80, 0x0, 0x7fffffff}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') readv(r0, 0x0, 0x0) 203.559756ms ago: executing program 2 (id=168): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x58, 0x4) 0s ago: executing program 2 (id=169): socket$inet6_tcp(0xa, 0x1, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000001540)='./file0\x00', 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = dup(r3) ioctl$PPPIOCCONNECT(r4, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000001480)}}, {{0x0, 0x0, &(0x7f0000001cc0)}}], 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 174.207587][ T5178] cgroup: Unknown subsys name 'net' [ 174.350426][ T5178] cgroup: Unknown subsys name 'cpuset' [ 174.365566][ T5178] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 227.621066][ T5178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 229.343828][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.350737][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 231.589816][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.611486][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.622222][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.652715][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.696131][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.708854][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.850725][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.039668][ T5196] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.049334][ T5196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.059647][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.090626][ T5208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.098859][ T5208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.111342][ T5208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.125698][ T5209] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.150032][ T5209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.158439][ T5209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.170335][ T5209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.178956][ T5209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.194791][ T5209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.205928][ T5204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.215085][ T5204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.227050][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.246048][ T4563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.255751][ T5204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.258472][ T4563] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.271688][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.278294][ T4563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.319382][ T4563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.339645][ T4563] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.360212][ T4563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.838083][ T5195] chnl_net:caif_netlink_parms(): no params data found [ 233.808853][ T5208] Bluetooth: hci0: command tx timeout [ 233.986022][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.994786][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.002868][ T5195] bridge_slave_0: entered allmulticast mode [ 234.012625][ T5195] bridge_slave_0: entered promiscuous mode [ 234.081582][ T5211] chnl_net:caif_netlink_parms(): no params data found [ 234.162805][ T5199] chnl_net:caif_netlink_parms(): no params data found [ 234.210684][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.218620][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.226335][ T5195] bridge_slave_1: entered allmulticast mode [ 234.235822][ T5195] bridge_slave_1: entered promiscuous mode [ 234.244672][ T5206] chnl_net:caif_netlink_parms(): no params data found [ 234.368116][ T5208] Bluetooth: hci3: command tx timeout [ 234.373944][ T4563] Bluetooth: hci2: command tx timeout [ 234.383523][ T5196] Bluetooth: hci1: command tx timeout [ 234.449016][ T5208] Bluetooth: hci4: command tx timeout [ 234.525338][ T5195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.564106][ T5195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.690885][ T5202] chnl_net:caif_netlink_parms(): no params data found [ 234.790286][ T5195] team0: Port device team_slave_0 added [ 234.835420][ T5195] team0: Port device team_slave_1 added [ 235.076190][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.083586][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.111611][ T5195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.308215][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.315448][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.341961][ T5195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.433310][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.441648][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.449700][ T5211] bridge_slave_0: entered allmulticast mode [ 235.459370][ T5211] bridge_slave_0: entered promiscuous mode [ 235.631479][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.641394][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.649353][ T5211] bridge_slave_1: entered allmulticast mode [ 235.658660][ T5211] bridge_slave_1: entered promiscuous mode [ 235.704825][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.712874][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.720825][ T5199] bridge_slave_0: entered allmulticast mode [ 235.730297][ T5199] bridge_slave_0: entered promiscuous mode [ 235.802886][ T5195] hsr_slave_0: entered promiscuous mode [ 235.833177][ T5195] hsr_slave_1: entered promiscuous mode [ 235.878569][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.886309][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.894630][ T5199] bridge_slave_1: entered allmulticast mode [ 235.903951][ T5199] bridge_slave_1: entered promiscuous mode [ 235.921525][ T5208] Bluetooth: hci0: command tx timeout [ 235.972877][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.980793][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.988786][ T5206] bridge_slave_0: entered allmulticast mode [ 235.998044][ T5206] bridge_slave_0: entered promiscuous mode [ 236.132734][ T5211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.176527][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.185025][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.193117][ T5206] bridge_slave_1: entered allmulticast mode [ 236.201601][ T5206] bridge_slave_1: entered promiscuous mode [ 236.247139][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.255070][ T5202] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.263121][ T5202] bridge_slave_0: entered allmulticast mode [ 236.271642][ T5202] bridge_slave_0: entered promiscuous mode [ 236.292650][ T5211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.312728][ T5199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.332420][ T5199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.391412][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.399240][ T5202] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.406809][ T5202] bridge_slave_1: entered allmulticast mode [ 236.416328][ T5202] bridge_slave_1: entered promiscuous mode [ 236.448989][ T5208] Bluetooth: hci3: command tx timeout [ 236.454683][ T5208] Bluetooth: hci2: command tx timeout [ 236.460683][ T4563] Bluetooth: hci1: command tx timeout [ 236.528469][ T5208] Bluetooth: hci4: command tx timeout [ 236.642030][ T5211] team0: Port device team_slave_0 added [ 236.728198][ T5206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.751362][ T5206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.781699][ T5211] team0: Port device team_slave_1 added [ 236.813772][ T5202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.830848][ T5199] team0: Port device team_slave_0 added [ 236.962571][ T5202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.979259][ T5199] team0: Port device team_slave_1 added [ 237.036011][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.043898][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.070368][ T5211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.169675][ T5206] team0: Port device team_slave_0 added [ 237.213203][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.220745][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.247129][ T5211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.329342][ T5206] team0: Port device team_slave_1 added [ 237.338679][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.345893][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.372436][ T5199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.391359][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.398982][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.425373][ T5199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.461238][ T5202] team0: Port device team_slave_0 added [ 237.590259][ T5202] team0: Port device team_slave_1 added [ 237.660981][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.668876][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.695320][ T5206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.886273][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.893777][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.921539][ T5206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.946519][ T5199] hsr_slave_0: entered promiscuous mode [ 237.957522][ T5199] hsr_slave_1: entered promiscuous mode [ 237.965841][ T5199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.973944][ T5199] Cannot create hsr debugfs directory [ 237.981051][ T5208] Bluetooth: hci0: command tx timeout [ 238.003690][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.011090][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.037640][ T5202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.070853][ T5211] hsr_slave_0: entered promiscuous mode [ 238.081337][ T5211] hsr_slave_1: entered promiscuous mode [ 238.090735][ T5211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.098640][ T5211] Cannot create hsr debugfs directory [ 238.164917][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.172356][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.198806][ T5202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.447344][ T5206] hsr_slave_0: entered promiscuous mode [ 238.460546][ T5206] hsr_slave_1: entered promiscuous mode [ 238.472872][ T5206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.482662][ T5206] Cannot create hsr debugfs directory [ 238.532992][ T5208] Bluetooth: hci2: command tx timeout [ 238.538885][ T5196] Bluetooth: hci1: command tx timeout [ 238.544519][ T5196] Bluetooth: hci3: command tx timeout [ 238.618239][ T5208] Bluetooth: hci4: command tx timeout [ 238.785203][ T5202] hsr_slave_0: entered promiscuous mode [ 238.796277][ T5202] hsr_slave_1: entered promiscuous mode [ 238.805893][ T5202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.813984][ T5202] Cannot create hsr debugfs directory [ 238.872013][ T5195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.984017][ T5195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.101088][ T5195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.188135][ T5195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.768812][ T5211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.849473][ T5211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.935791][ T5211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.990534][ T5211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.094243][ T5208] Bluetooth: hci0: command tx timeout [ 240.235217][ T5199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.401770][ T5199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.454280][ T5206] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.504224][ T5202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.528956][ T5202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.555288][ T5199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.580514][ T5206] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.601631][ T5206] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.618511][ T5208] Bluetooth: hci2: command tx timeout [ 240.624304][ T5196] Bluetooth: hci3: command tx timeout [ 240.651668][ T5202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.660325][ T4563] Bluetooth: hci1: command tx timeout [ 240.684664][ T5199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.689716][ T4563] Bluetooth: hci4: command tx timeout [ 240.724010][ T5206] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.767113][ T5202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.052821][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.289904][ T5195] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.433612][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.441482][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.512911][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.520783][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.677481][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.936738][ T5199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.011472][ T5211] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.089958][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.097651][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.212830][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.220758][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.291537][ T5199] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.333035][ T5195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.487088][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.494919][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.584381][ T5206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.659099][ T5202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.696094][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.703966][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.892205][ T5202] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.967395][ T5206] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.011565][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.019459][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.145083][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.152914][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.314655][ T5199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.325732][ T5199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.362758][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.370722][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.394962][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.402808][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.773750][ T5206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.561396][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.073430][ T5195] veth0_vlan: entered promiscuous mode [ 245.207116][ T5211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.239952][ T5195] veth1_vlan: entered promiscuous mode [ 245.659484][ T5199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.720129][ T5195] veth0_macvtap: entered promiscuous mode [ 245.833624][ T5195] veth1_macvtap: entered promiscuous mode [ 246.009958][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.053873][ T5202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.097087][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.240215][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.306067][ T5199] veth0_vlan: entered promiscuous mode [ 246.372251][ T5195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.383316][ T5195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.394710][ T5195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.404814][ T5195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.507826][ T5199] veth1_vlan: entered promiscuous mode [ 246.676878][ T5202] veth0_vlan: entered promiscuous mode [ 246.806035][ T5202] veth1_vlan: entered promiscuous mode [ 246.929499][ T5199] veth0_macvtap: entered promiscuous mode [ 246.952804][ T5206] veth0_vlan: entered promiscuous mode [ 247.036574][ T5199] veth1_macvtap: entered promiscuous mode [ 247.087633][ T5206] veth1_vlan: entered promiscuous mode [ 247.351110][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.362157][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.377362][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.434248][ T5202] veth0_macvtap: entered promiscuous mode [ 247.499663][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.512228][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.527455][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.562443][ T5202] veth1_macvtap: entered promiscuous mode [ 247.617076][ T5199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.626750][ T5199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.635998][ T5199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.645180][ T5199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.666627][ T5206] veth0_macvtap: entered promiscuous mode [ 247.729064][ T5206] veth1_macvtap: entered promiscuous mode [ 247.871490][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.883796][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.895364][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.907502][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.923088][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.004630][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.017077][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.028956][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.041589][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.054512][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.066962][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.084222][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.146127][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.157070][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.167497][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.178424][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.193565][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.316892][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.327958][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.338409][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.349163][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.359341][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.376566][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.395098][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.465969][ T5202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.475415][ T5202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.484714][ T5202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.493966][ T5202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.534086][ T5206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.543375][ T5206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.552702][ T5206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.562092][ T5206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.901969][ T5211] veth0_vlan: entered promiscuous mode [ 249.037879][ T5211] veth1_vlan: entered promiscuous mode [ 249.366561][ T5211] veth0_macvtap: entered promiscuous mode [ 249.532023][ T5211] veth1_macvtap: entered promiscuous mode [ 249.725792][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.738392][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.750076][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.761383][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.771576][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.782460][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.792688][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.803533][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.819910][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.858079][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.869193][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.879387][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.890978][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.903013][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.913813][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.923964][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.934748][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.949853][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.133893][ T5211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.143121][ T5211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.152309][ T5211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.161505][ T5211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.969980][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.978144][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.248085][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.256221][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.521451][ T5195] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 254.538507][ T2538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.546588][ T2538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.697176][ T3192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.706187][ T3192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.295191][ T3192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.304339][ T3192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.472071][ T5376] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 255.636895][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.645338][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.790068][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 256.006404][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.015764][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.165480][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.174169][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.594085][ T3192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.602443][ T3192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.972154][ T2501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.980485][ T2501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.234859][ T5255] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 258.428110][ T5255] usb 2-1: Using ep0 maxpacket: 32 [ 258.485216][ T5255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.500851][ T5255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.512866][ T5255] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.522479][ T5255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.630126][ T5255] usb 2-1: config 0 descriptor?? [ 258.672732][ T5255] hub 2-1:0.0: USB hub found [ 258.957297][ T5255] hub 2-1:0.0: 1 port detected [ 259.049987][ T29] audit: type=1400 audit(1727661004.819:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5417 comm="syz.0.18" [ 259.269815][ T5255] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 259.276497][ T5255] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 259.867832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 260.008906][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.027889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 260.041016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 260.055523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 260.065480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.196032][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.331044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.523631][ T5436] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24'. [ 260.617846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 260.747815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 261.063273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 261.165201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 263.559076][ T5463] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 263.818432][ T5255] usbhid 2-1:0.0: can't add hid device: -71 [ 263.830886][ T5255] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.932125][ T5255] usb 2-1: USB disconnect, device number 2 [ 264.206548][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 264.794505][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 266.016288][ T5490] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.019262][ T5515] netlink: 'syz.3.47': attribute type 10 has an invalid length. [ 267.056482][ T5515] batman_adv: batadv0: Adding interface: team0 [ 267.063221][ T5515] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.090525][ T5515] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 267.218690][ T5515] netlink: 'syz.3.47': attribute type 10 has an invalid length. [ 267.226738][ T5515] netlink: 2 bytes leftover after parsing attributes in process `syz.3.47'. [ 267.236304][ T5515] team0: entered promiscuous mode [ 267.241754][ T5515] team_slave_0: entered promiscuous mode [ 267.248824][ T5515] team_slave_1: entered promiscuous mode [ 267.262105][ T5515] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.270055][ T5515] batman_adv: batadv0: Interface activated: team0 [ 267.276912][ T5515] batman_adv: batadv0: Interface deactivated: team0 [ 267.283988][ T5515] batman_adv: batadv0: Removing interface: team0 [ 267.294670][ T4563] Bluetooth: hci1: SCO packet for unknown connection handle 1481 [ 267.385274][ T5515] bridge0: port 3(team0) entered blocking state [ 267.401201][ T5515] bridge0: port 3(team0) entered disabled state [ 267.414230][ T5515] team0: entered allmulticast mode [ 267.419877][ T5515] team_slave_0: entered allmulticast mode [ 267.425906][ T5515] team_slave_1: entered allmulticast mode [ 267.440196][ T5515] bridge0: port 3(team0) entered blocking state [ 267.447167][ T5515] bridge0: port 3(team0) entered forwarding state [ 267.626398][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 269.108202][ T5531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'. [ 269.678508][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 269.842539][ T5546] mmap: syz.0.59 (5546) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 269.990285][ T5541] team0 (unregistering): Port device team_slave_0 removed [ 270.074069][ T5541] team0 (unregistering): Failed to send options change via netlink (err -105) [ 270.087611][ T5541] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 270.101106][ T5541] team0 (unregistering): Port device team_slave_1 removed [ 270.259180][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 271.635591][ T5569] Zero length message leads to an empty skb [ 272.008118][ T5278] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.361781][ T5278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.372516][ T5278] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.407262][ T5278] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 272.417845][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 272.429785][ T5278] usb 4-1: Product: syz [ 272.555186][ T5278] usb 4-1: config 0 descriptor?? [ 273.159178][ T5278] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 273.259975][ T5593] netlink: 'syz.1.74': attribute type 11 has an invalid length. [ 273.349978][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 273.379668][ T5278] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.388643][ T5278] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.397555][ T5278] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.409859][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.420033][ T5278] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.430207][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.443813][ T5278] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 273.456502][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.483088][ T5278] usb 5-1: config 0 descriptor?? [ 273.812251][ T5278] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 273.866627][ T5278] usb 5-1: USB disconnect, device number 2 [ 273.891338][ T5278] usblp0: removed [ 274.373177][ T5278] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 274.538459][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 274.562244][ T5278] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 274.571837][ T5278] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 274.587300][ T5278] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 274.600449][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.610860][ T5278] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 274.621012][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 274.634543][ T5278] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 274.644056][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.735866][ T5610] process 'syz.0.79' launched './file1' with NULL argv: empty string added [ 274.781004][ T5278] usb 5-1: config 0 descriptor?? [ 275.042594][ T5278] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 275.126297][ T5278] usb 4-1: USB disconnect, device number 2 [ 275.350911][ T5257] usb 5-1: USB disconnect, device number 3 [ 275.404390][ T5257] usblp0: removed [ 278.558744][ T5655] loop3: detected capacity change from 0 to 512 [ 278.649982][ T5655] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 278.663828][ T5655] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.812245][ T5655] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 278.892535][ T5667] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 278.898647][ T5655] EXT4-fs (loop3): 1 truncate cleaned up [ 278.916781][ T5655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.229595][ T5199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.407284][ T5684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.107'. [ 281.046042][ T5700] loop6: detected capacity change from 0 to 524287999 [ 281.088046][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.098120][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.152312][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.161910][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.177452][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.187242][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.197582][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.207401][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.254410][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.264254][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.277611][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.287632][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.302075][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.311725][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.343055][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.352809][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.369914][ T5700] ldm_validate_partition_table(): Disk read failed. [ 281.388311][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.398279][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.445205][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.455058][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 281.495085][ T5700] Dev loop6: unable to read RDB block 0 [ 281.574421][ T5700] loop6: unable to read partition table [ 281.649019][ T5700] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 282.608380][ T5715] loop2: detected capacity change from 0 to 512 [ 282.702539][ T5715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 282.903540][ T5715] EXT4-fs (loop2): 1 truncate cleaned up [ 282.939753][ T5715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.091032][ T5725] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 283.151263][ T5206] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.332244][ T5731] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 284.809212][ T5302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 285.030820][ T5302] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.043803][ T5302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 285.055187][ T5302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 285.065297][ T5302] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.078844][ T5302] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.088261][ T5302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.345505][ T5302] usb 1-1: config 0 descriptor?? [ 285.888958][ T5302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 285.932901][ T5302] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 285.994311][ T5302] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 286.217478][ T5762] loop4: detected capacity change from 0 to 512 [ 286.225632][ T5302] usb 1-1: USB disconnect, device number 2 [ 286.261222][ T5762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 286.325888][ T5762] EXT4-fs (loop4): 1 truncate cleaned up [ 286.334885][ T5762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.078556][ T5211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.250399][ T1699] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 287.452752][ T1699] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.464345][ T1699] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.475048][ T1699] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.491689][ T1699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.601089][ T5769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.659002][ T1699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.145099][ T5764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.337378][ T5302] usb 2-1: USB disconnect, device number 3 [ 289.150972][ T5805] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 289.639967][ T5810] loop6: detected capacity change from 0 to 524287999 [ 289.690233][ C0] blk_print_req_error: 7 callbacks suppressed [ 289.690319][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.706233][ C0] buffer_io_error: 7 callbacks suppressed [ 289.706308][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.727564][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.737183][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.777935][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.787438][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.797911][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.808005][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.835609][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.845279][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.870685][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.880312][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.899186][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.909055][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.926085][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.935866][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.954539][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.964233][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.975111][ T5810] ldm_validate_partition_table(): Disk read failed. [ 289.984141][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.993889][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.054804][ T5810] Dev loop6: unable to read RDB block 0 [ 290.088115][ T5810] loop6: unable to read partition table [ 290.116932][ T5810] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 290.239159][ T5811] loop1: detected capacity change from 0 to 512 [ 290.460879][ T5811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 290.673737][ T5811] EXT4-fs (loop1): 1 truncate cleaned up [ 290.681292][ T5811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.846885][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.858972][ T5257] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 291.114389][ T5195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.157966][ T5257] usb 5-1: Using ep0 maxpacket: 8 [ 291.179755][ T5257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.190454][ T5257] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.200059][ T5257] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 291.209404][ T5257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.281724][ T5257] usb 5-1: config 0 descriptor?? [ 291.942632][ T5817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'. [ 292.607268][ T5257] usb 5-1: USB disconnect, device number 4 [ 293.662453][ T5856] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 294.827131][ T5866] loop1: detected capacity change from 0 to 512 [ 294.893414][ T5866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 295.108458][ T5866] EXT4-fs (loop1): 1 truncate cleaned up [ 295.116256][ T5866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.955883][ T5883] ===================================================== [ 295.963426][ T5883] BUG: KMSAN: uninit-value in ppp_async_push+0xb4f/0x2660 [ 295.971134][ T5883] ppp_async_push+0xb4f/0x2660 [ 295.976188][ T5883] ppp_async_send+0x130/0x1b0 [ 295.981222][ T5883] ppp_input+0x1f1/0xe60 [ 295.985692][ T5883] pppoe_rcv_core+0x1d3/0x720 [ 295.990873][ T5883] sk_backlog_rcv+0x13b/0x420 [ 295.995759][ T5883] __release_sock+0x1da/0x330 [ 296.000880][ T5883] release_sock+0x6b/0x250 [ 296.005669][ T5883] pppoe_sendmsg+0x2b8/0xb90 [ 296.010660][ T5883] __sock_sendmsg+0x30f/0x380 [ 296.015605][ T5883] ____sys_sendmsg+0x903/0xb60 [ 296.020764][ T5883] ___sys_sendmsg+0x28d/0x3c0 [ 296.025691][ T5883] __sys_sendmmsg+0x3c1/0x960 [ 296.030721][ T5883] __x64_sys_sendmmsg+0xbc/0x120 [ 296.035962][ T5883] x64_sys_call+0xb6e/0x3ba0 [ 296.040906][ T5883] do_syscall_64+0xcd/0x1e0 [ 296.045673][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.051947][ T5883] [ 296.054449][ T5883] Uninit was created at: [ 296.059110][ T5883] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 296.065273][ T5883] kmalloc_reserve+0x13d/0x4a0 [ 296.070416][ T5883] __alloc_skb+0x363/0x7b0 [ 296.075129][ T5883] sock_wmalloc+0xfe/0x1a0 [ 296.079881][ T5883] pppoe_sendmsg+0x3a7/0xb90 [ 296.084695][ T5883] __sock_sendmsg+0x30f/0x380 [ 296.089779][ T5883] ____sys_sendmsg+0x903/0xb60 [ 296.094774][ T5883] ___sys_sendmsg+0x28d/0x3c0 [ 296.099784][ T5883] __sys_sendmmsg+0x3c1/0x960 [ 296.104792][ T5883] __x64_sys_sendmmsg+0xbc/0x120 [ 296.110083][ T5883] x64_sys_call+0xb6e/0x3ba0 [ 296.114915][ T5883] do_syscall_64+0xcd/0x1e0 [ 296.119809][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.125985][ T5883] [ 296.128560][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.2.169 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 296.139221][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.149589][ T5883] ===================================================== [ 296.156733][ T5883] Disabling lock debugging due to kernel taint [ 296.163171][ T5883] Kernel panic - not syncing: kmsan.panic set ... [ 296.169765][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.2.169 Tainted: G B 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 296.181759][ T5883] Tainted: [B]=BAD_PAGE [ 296.186041][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.196272][ T5883] Call Trace: [ 296.199679][ T5883] [ 296.202725][ T5883] dump_stack_lvl+0x216/0x2d0 [ 296.207614][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 296.213622][ T5883] dump_stack+0x1e/0x30 [ 296.217967][ T5883] panic+0x4e2/0xcf0 [ 296.222058][ T5883] ? kmsan_get_metadata+0x41/0x1c0 [ 296.227376][ T5883] kmsan_report+0x2c7/0x2d0 [ 296.232052][ T5883] ? __module_address+0x4d/0x630 [ 296.237201][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.242573][ T5883] ? __msan_warning+0x95/0x120 [ 296.247551][ T5883] ? ppp_async_push+0xb4f/0x2660 [ 296.252732][ T5883] ? ppp_async_send+0x130/0x1b0 [ 296.257812][ T5883] ? ppp_input+0x1f1/0xe60 [ 296.262420][ T5883] ? pppoe_rcv_core+0x1d3/0x720 [ 296.267472][ T5883] ? sk_backlog_rcv+0x13b/0x420 [ 296.272499][ T5883] ? __release_sock+0x1da/0x330 [ 296.277560][ T5883] ? release_sock+0x6b/0x250 [ 296.282329][ T5883] ? pppoe_sendmsg+0x2b8/0xb90 [ 296.287320][ T5883] ? __sock_sendmsg+0x30f/0x380 [ 296.292426][ T5883] ? ____sys_sendmsg+0x903/0xb60 [ 296.297564][ T5883] ? ___sys_sendmsg+0x28d/0x3c0 [ 296.302628][ T5883] ? __sys_sendmmsg+0x3c1/0x960 [ 296.307724][ T5883] ? __x64_sys_sendmmsg+0xbc/0x120 [ 296.313049][ T5883] ? x64_sys_call+0xb6e/0x3ba0 [ 296.318027][ T5883] ? do_syscall_64+0xcd/0x1e0 [ 296.322908][ T5883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.329210][ T5883] ? filter_irq_stacks+0x60/0x1a0 [ 296.334501][ T5883] ? __raise_softirq_irqoff+0x37/0x130 [ 296.340201][ T5883] ? __napi_schedule_irqoff+0x2ec/0x3d0 [ 296.345947][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.351325][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.356702][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.362082][ T5883] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 296.368656][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.374034][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 296.380036][ T5883] __msan_warning+0x95/0x120 [ 296.384864][ T5883] ppp_async_push+0xb4f/0x2660 [ 296.389948][ T5883] ppp_async_send+0x130/0x1b0 [ 296.394866][ T5883] ? __pfx_ppp_async_send+0x10/0x10 [ 296.400308][ T5883] ppp_input+0x1f1/0xe60 [ 296.404770][ T5883] pppoe_rcv_core+0x1d3/0x720 [ 296.409646][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 296.415656][ T5883] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 296.421051][ T5883] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 296.426386][ T5883] sk_backlog_rcv+0x13b/0x420 [ 296.431236][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 296.437270][ T5883] __release_sock+0x1da/0x330 [ 296.442180][ T5883] release_sock+0x6b/0x250 [ 296.446774][ T5883] pppoe_sendmsg+0x2b8/0xb90 [ 296.451582][ T5883] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 296.456927][ T5883] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 296.462245][ T5883] __sock_sendmsg+0x30f/0x380 [ 296.467146][ T5883] ____sys_sendmsg+0x903/0xb60 [ 296.472124][ T5883] ___sys_sendmsg+0x28d/0x3c0 [ 296.476997][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.482365][ T5883] ? __rcu_read_unlock+0x7b/0xe0 [ 296.487492][ T5883] ? __fget_files+0x4f5/0x5c0 [ 296.492379][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.497744][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 296.503758][ T5883] __sys_sendmmsg+0x3c1/0x960 [ 296.508630][ T5883] ? do_futex+0x380/0x4a0 [ 296.513161][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 296.518584][ T5883] __x64_sys_sendmmsg+0xbc/0x120 [ 296.523737][ T5883] x64_sys_call+0xb6e/0x3ba0 [ 296.528532][ T5883] do_syscall_64+0xcd/0x1e0 [ 296.533237][ T5883] ? clear_bhb_loop+0x25/0x80 [ 296.538131][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.544356][ T5883] RIP: 0033:0x7fe96357dff9 [ 296.548920][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.568989][ T5883] RSP: 002b:00007fe964334038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.577616][ T5883] RAX: ffffffffffffffda RBX: 00007fe963735f80 RCX: 00007fe96357dff9 [ 296.585779][ T5883] RDX: 0000000000000002 RSI: 0000000020009140 RDI: 0000000000000004 [ 296.593911][ T5883] RBP: 00007fe9635f0296 R08: 0000000000000000 R09: 0000000000000000 [ 296.602160][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.610280][ T5883] R13: 0000000000000000 R14: 00007fe963735f80 R15: 00007ffd58366598 [ 296.618449][ T5883] [ 296.621909][ T5883] Kernel Offset: disabled [ 296.626329][ T5883] Rebooting in 86400 seconds..