last executing test programs: 21.99408661s ago: executing program 1 (id=293): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 17.970860679s ago: executing program 2 (id=302): r0 = socket(0x10, 0x803, 0x2) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x20202, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x2c) mlockall(0x2) io_setup(0x3ff, 0x0) r3 = socket$inet(0x2, 0x800, 0x9) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c00001300034700bb5be1c3e4feff06000000010000004500e03fd8d207a5000025000000190004000400ad000200000000000006040000", 0x39}], 0x1) 15.632164058s ago: executing program 2 (id=305): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x5, 0x17, 0x0, 0x0, @binary="91"}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioperm(0x7, 0x81, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) r4 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r5, r3, 0x0, 0x578410eb) sendfile(r5, r3, 0x0, 0x100000000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) sendfile(r6, r0, 0x0, 0x10000a007) 14.648851518s ago: executing program 0 (id=307): syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x80042, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = mq_open(0x0, 0x42, 0xe2, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 14.563370042s ago: executing program 2 (id=308): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x0, @mcast1, 0xa}, {0xa, 0x4e21, 0xdfde, @dev={0xfe, 0x80, '\x00', 0x37}}, 0xffffffffffffffff, {[0x5, 0x26171dcb, 0x6, 0xb, 0xdc0d, 0x94f5, 0x8, 0x5]}}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 12.70885732s ago: executing program 1 (id=309): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000017010000040000000900000000005000000000000000170100000200000038000000ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad000000001800000000000000170100000300000000000000000000004001000000000000170100000200000028010000526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd84430400f736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ccbc39669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d0000000018000000000000001701000004000000ed0e000000000000"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe0"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 11.824405147s ago: executing program 0 (id=312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x12) flock(r6, 0x2) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d11, &(0x7f0000000040)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000340)=""/132, 0x84, 0x41) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x48) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 10.609239324s ago: executing program 2 (id=314): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x40, r5, 0x8001}, 0xc) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000002c0)={0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 10.291478405s ago: executing program 0 (id=315): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) 10.099254219s ago: executing program 3 (id=316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x0, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = eventfd2(0x40000000, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = io_uring_setup(0x637f, &(0x7f0000000180)={0x0, 0x568a, 0x20, 0x1, 0x6c}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000003c0)={r3, &(0x7f0000000000)='$]\x00', 0x200c0, &(0x7f0000000280)={@align=0x5, {0x3, 0x7, 0x5, 0xa}}, 0x3, &(0x7f00000002c0), &(0x7f0000000380)=0x101}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000400)={r4, 0x0, 0x1000000, 0x10000}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000040)=0x200000000) r7 = dup2(r6, r6) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) read$FUSE(r7, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r7, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 9.709296687s ago: executing program 1 (id=317): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 8.512796957s ago: executing program 1 (id=318): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000004480)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x7, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 7.907074706s ago: executing program 3 (id=319): socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) writev(r0, &(0x7f00000024c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0xb7f, 0x0, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 7.473054526s ago: executing program 0 (id=320): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x136, &(0x7f00000004c0)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x128, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}, {{0x0, 0x8080, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) 7.264810218s ago: executing program 3 (id=321): gettid() r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfe7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x1003, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpgrp(0xffffffffffffffff) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) waitid(0x2, 0x0, &(0x7f0000000600), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.022491744s ago: executing program 0 (id=322): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0xd, 0x4c07, 0xffff, 0x8000000000080001, 0x2, 0x5, 0x6, 0x1, 0x3, 0xff, 0x8, 0x8000000000000001, 0x8000, 0xfffffffffffffff3, 0x3]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0xca64, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 4.754544265s ago: executing program 2 (id=323): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x0, @mcast1, 0xa}, {0xa, 0x4e21, 0xdfde, @dev={0xfe, 0x80, '\x00', 0x37}}, 0xffffffffffffffff, {[0x5, 0x26171dcb, 0x6, 0xb, 0xdc0d, 0x94f5, 0x8, 0x5]}}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 2.667862231s ago: executing program 3 (id=324): r0 = socket(0x10, 0x803, 0x2) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x20202, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x2c) mlockall(0x2) io_setup(0x3ff, 0x0) r3 = socket$inet(0x2, 0x800, 0x9) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c00001300034700bb5be1c3e4feff06000000010000004500e03fd8d207a5000025000000190004000400ad000200000000000006040000", 0x39}], 0x1) 2.503125561s ago: executing program 2 (id=325): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe0"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 1.688823071s ago: executing program 1 (id=326): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 1.512598958s ago: executing program 0 (id=327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x0, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = eventfd2(0x40000000, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = io_uring_setup(0x637f, &(0x7f0000000180)={0x0, 0x568a, 0x20, 0x1, 0x6c}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000003c0)={r3, &(0x7f0000000000)='$]\x00', 0x200c0, &(0x7f0000000280)={@align=0x5, {0x3, 0x7, 0x5, 0xa}}, 0x3, &(0x7f00000002c0), &(0x7f0000000380)=0x101}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000400)={r4, 0x0, 0x1000000, 0x10000}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000040)=0x200000000) r7 = dup2(r6, r6) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) read$FUSE(r7, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r7, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 544.0079ms ago: executing program 1 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 512.519304ms ago: executing program 3 (id=329): socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) writev(r0, &(0x7f00000024c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0xb7f, 0x0, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 0s ago: executing program 3 (id=330): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 72.052684][ T5754] cgroup: Unknown subsys name 'net' [ 72.213964][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.705519][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.751665][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.759652][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.768714][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.787977][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.795813][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.807220][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.827324][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.837252][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.838631][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.851982][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.857769][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.863312][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.869071][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.877953][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.884670][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.887677][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.901875][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.901942][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.916170][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.923358][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.924430][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.938161][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.943282][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.952420][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.377243][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 76.444618][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.473334][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.531361][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 76.590872][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.598178][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.605464][ T5767] bridge_slave_0: entered allmulticast mode [ 76.613046][ T5767] bridge_slave_0: entered promiscuous mode [ 76.651909][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.659076][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.666176][ T5767] bridge_slave_1: entered allmulticast mode [ 76.673414][ T5767] bridge_slave_1: entered promiscuous mode [ 76.752185][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.759561][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.766664][ T5768] bridge_slave_0: entered allmulticast mode [ 76.773855][ T5768] bridge_slave_0: entered promiscuous mode [ 76.782564][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.789961][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.797246][ T5768] bridge_slave_1: entered allmulticast mode [ 76.804654][ T5768] bridge_slave_1: entered promiscuous mode [ 76.822967][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.857972][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.865260][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.872991][ T5770] bridge_slave_0: entered allmulticast mode [ 76.880211][ T5770] bridge_slave_0: entered promiscuous mode [ 76.889999][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.921567][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.931402][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.940978][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.948236][ T5770] bridge_slave_1: entered allmulticast mode [ 76.955181][ T5770] bridge_slave_1: entered promiscuous mode [ 76.984396][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.006322][ T5767] team0: Port device team_slave_0 added [ 77.015061][ T5767] team0: Port device team_slave_1 added [ 77.023542][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.031070][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.038346][ T5766] bridge_slave_0: entered allmulticast mode [ 77.045317][ T5766] bridge_slave_0: entered promiscuous mode [ 77.063215][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071746][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.078943][ T5766] bridge_slave_1: entered allmulticast mode [ 77.086012][ T5766] bridge_slave_1: entered promiscuous mode [ 77.141155][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.154877][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.176622][ T5768] team0: Port device team_slave_0 added [ 77.185417][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.204693][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.212236][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.238728][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.252055][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.259099][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.285087][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.300210][ T5768] team0: Port device team_slave_1 added [ 77.308338][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.344271][ T5770] team0: Port device team_slave_0 added [ 77.380212][ T5766] team0: Port device team_slave_0 added [ 77.388738][ T5766] team0: Port device team_slave_1 added [ 77.395866][ T5770] team0: Port device team_slave_1 added [ 77.421590][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.428723][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.454717][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.501389][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.508594][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.534853][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.573134][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.580155][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.606490][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.619765][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.626716][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.653365][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.671935][ T5767] hsr_slave_0: entered promiscuous mode [ 77.678660][ T5767] hsr_slave_1: entered promiscuous mode [ 77.685980][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.694813][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.723322][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.735708][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.742828][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.768814][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.815296][ T5768] hsr_slave_0: entered promiscuous mode [ 77.821672][ T5768] hsr_slave_1: entered promiscuous mode [ 77.828007][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.835783][ T5768] Cannot create hsr debugfs directory [ 77.898402][ T5770] hsr_slave_0: entered promiscuous mode [ 77.904979][ T5770] hsr_slave_1: entered promiscuous mode [ 77.911564][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.919271][ T5770] Cannot create hsr debugfs directory [ 77.948160][ T5766] hsr_slave_0: entered promiscuous mode [ 77.954421][ T5766] hsr_slave_1: entered promiscuous mode [ 77.962983][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.970645][ T5766] Cannot create hsr debugfs directory [ 78.027932][ T51] Bluetooth: hci2: command tx timeout [ 78.037377][ T5784] Bluetooth: hci1: command tx timeout [ 78.043008][ T5784] Bluetooth: hci3: command tx timeout [ 78.049592][ T51] Bluetooth: hci0: command tx timeout [ 78.362936][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.375475][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.390235][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.402497][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.471116][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.486364][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.517442][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.538322][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.583446][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.602843][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.612804][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.625339][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.686896][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.708863][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.720077][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.730842][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.816907][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.899630][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.915940][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.944915][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.952269][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.966072][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.989683][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.996769][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.014316][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.033885][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.041058][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.062039][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.069183][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.091222][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.113121][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.134025][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.141192][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.175717][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.197371][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.204569][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.248817][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.276667][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.283844][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.305651][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.312830][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.740482][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.813616][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.838498][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.881773][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.931263][ T5768] veth0_vlan: entered promiscuous mode [ 79.945130][ T5768] veth1_vlan: entered promiscuous mode [ 79.965008][ T5770] veth0_vlan: entered promiscuous mode [ 80.001862][ T5770] veth1_vlan: entered promiscuous mode [ 80.011939][ T5767] veth0_vlan: entered promiscuous mode [ 80.036447][ T5766] veth0_vlan: entered promiscuous mode [ 80.051963][ T5766] veth1_vlan: entered promiscuous mode [ 80.076519][ T5767] veth1_vlan: entered promiscuous mode [ 80.103535][ T5768] veth0_macvtap: entered promiscuous mode [ 80.117162][ T51] Bluetooth: hci0: command tx timeout [ 80.122223][ T5766] veth0_macvtap: entered promiscuous mode [ 80.122626][ T51] Bluetooth: hci3: command tx timeout [ 80.134042][ T5777] Bluetooth: hci2: command tx timeout [ 80.140256][ T5784] Bluetooth: hci1: command tx timeout [ 80.149830][ T5766] veth1_macvtap: entered promiscuous mode [ 80.163975][ T5768] veth1_macvtap: entered promiscuous mode [ 80.182305][ T5770] veth0_macvtap: entered promiscuous mode [ 80.203731][ T5770] veth1_macvtap: entered promiscuous mode [ 80.230136][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.241678][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.254933][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.268789][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.282348][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.291461][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.302796][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.312780][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.323607][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.335880][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.356877][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.367533][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.381527][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.392837][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.404566][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.415431][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.429398][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.440964][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.452095][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.461384][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.470453][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.479337][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.511871][ T5767] veth0_macvtap: entered promiscuous mode [ 80.522090][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.532563][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.541927][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.552340][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.565639][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.574992][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.584137][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.598558][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.619473][ T5767] veth1_macvtap: entered promiscuous mode [ 80.690328][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.704325][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.715109][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.725941][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.736258][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.746746][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.761093][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.794827][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.805442][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.819238][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.830407][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.841475][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.852372][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.863786][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.903259][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.912979][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.922007][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930999][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.951608][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.986237][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.021954][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.038049][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.050109][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.062063][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.177497][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.185361][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.223610][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.257049][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.314792][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.327811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.467056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 81.547288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.556504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.571227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.617097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.927208][ T5777] Bluetooth: hci2: command tx timeout [ 83.932670][ T5777] Bluetooth: hci1: command tx timeout [ 83.939192][ T5777] Bluetooth: hci3: command tx timeout [ 83.944643][ T5777] Bluetooth: hci0: command tx timeout [ 83.953857][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.985379][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.047793][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.156288][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.185016][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.427596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.037897][ T5849] Zero length message leads to an empty skb [ 85.068127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.198684][ T5851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.177356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 86.279798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.280331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.293525][ T51] Bluetooth: hci0: command tx timeout [ 87.293598][ T5784] Bluetooth: hci1: command tx timeout [ 87.299037][ T51] Bluetooth: hci2: command tx timeout [ 87.305967][ T5777] Bluetooth: hci3: command tx timeout [ 87.316096][ T788] cfg80211: failed to load regulatory.db [ 88.425135][ T5866] syz.1.9[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.139130][ T5896] sctp: failed to load transform for md5: -2 [ 96.554597][ T5907] input: syz0 as /devices/virtual/input/input7 [ 96.979283][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 98.592383][ T5919] loop7: detected capacity change from 0 to 1 [ 98.647552][ T5919] loop7: detected capacity change from 1 to 0 [ 101.402215][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.864145][ T5957] loop7: detected capacity change from 0 to 1 [ 105.697170][ T5957] loop7: detected capacity change from 1 to 0 [ 112.837201][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'. [ 113.457124][ T5995] orangefs_mount: mount request failed with -4 [ 116.556670][ T6021] loop7: detected capacity change from 0 to 1 [ 116.957645][ T6021] loop7: detected capacity change from 1 to 0 [ 122.726381][ T6058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.59'. [ 122.797584][ T6059] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.806567][ T6059] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.815368][ T6059] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.824172][ T6059] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.001591][ T6059] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.010783][ T6059] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.019936][ T6059] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.029012][ T6059] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.295510][ T6060] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.304360][ T6060] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.313104][ T6060] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.321838][ T6060] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.409407][ T6060] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.418447][ T6060] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.428509][ T6060] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.437761][ T6060] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.596602][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'. [ 125.828449][ T6065] orangefs_mount: mount request failed with -4 [ 132.771518][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 132.840214][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847064][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.948425][ T6115] orangefs_mount: mount request failed with -4 [ 157.373398][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.109'. [ 165.810776][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.120'. [ 173.347264][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.130'. [ 194.417803][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424280][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.348001][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 202.354250][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 202.360663][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 202.366699][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 207.976294][ T6445] input: syz0 as /devices/virtual/input/input14 [ 208.189197][ T6446] netlink: 32 bytes leftover after parsing attributes in process `syz.0.169'. [ 209.884184][ T6457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.166'. [ 209.939347][ T6457] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.948113][ T6457] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.956798][ T6457] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.965598][ T6457] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.413289][ T6457] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.422257][ T6457] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.431233][ T6457] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.440161][ T6457] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.591717][ T6462] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.600518][ T6462] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.609228][ T6462] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.618620][ T6462] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.659295][ T6462] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.668352][ T6462] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.677301][ T6462] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.686187][ T6462] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.968785][ T6466] orangefs_mount: mount request failed with -4 [ 215.855617][ T6479] input: syz0 as /devices/virtual/input/input15 [ 216.309780][ T6480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.178'. [ 223.877355][ T6510] orangefs_mount: mount request failed with -4 [ 225.828588][ T6522] input: syz0 as /devices/virtual/input/input17 [ 226.057738][ T6523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.189'. [ 226.602521][ T6526] loop7: detected capacity change from 0 to 1 [ 227.397143][ T6526] loop7: detected capacity change from 1 to 0 [ 234.137666][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.156268][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.230505][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.957240][ T6610] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 244.770244][ T6636] process 'syz.3.218' launched '/dev/fd/-1' with NULL argv: empty string added [ 251.581627][ T6681] loop7: detected capacity change from 0 to 1 [ 251.637045][ T6681] loop7: detected capacity change from 1 to 0 [ 256.042712][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.057227][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.109255][ T6716] loop7: detected capacity change from 0 to 1 [ 258.947454][ T6716] loop7: detected capacity change from 1 to 0 [ 261.917445][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 262.149888][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 262.164265][ T8] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 262.177194][ T8] usb 4-1: config 0 has no interface number 0 [ 262.210317][ T8] usb 4-1: config 0 interface 184 has no altsetting 0 [ 262.239978][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.263458][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.325722][ T8] usb 4-1: Product: syz [ 262.367063][ T8] usb 4-1: Manufacturer: syz [ 262.371717][ T8] usb 4-1: SerialNumber: syz [ 262.411089][ T8] usb 4-1: config 0 descriptor?? [ 262.444793][ T8] smsc75xx v1.0.0 [ 262.639072][ T6740] overlayfs: failed to clone upperpath [ 263.118982][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 263.141265][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 264.316971][ C1] sched: RT throttling activated [ 265.148711][ T6745] syz.0.250 (6745) used greatest stack depth: 18736 bytes left [ 265.305727][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 265.339001][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 265.387211][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 265.414999][ T8] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 265.501478][ T8] usb 4-1: USB disconnect, device number 2 [ 269.925519][ T6777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.008719][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 270.125917][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.259'. [ 270.460193][ T6782] loop7: detected capacity change from 0 to 1 [ 271.749027][ T6782] loop7: detected capacity change from 1 to 0 [ 275.939143][ T6807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.267'. [ 276.103635][ T6810] ufs: You didn't specify the type of your ufs filesystem [ 276.103635][ T6810] [ 276.103635][ T6810] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 276.103635][ T6810] [ 276.103635][ T6810] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 276.135534][ T6810] ufs: ufstype=old is supported read-only [ 276.660334][ T6810] ufs: ufs_fill_super(): bad magic number [ 282.927345][ T6847] kernel profiling enabled (shift: 9) [ 283.333994][ T6851] loop7: detected capacity change from 0 to 1 [ 284.215978][ T6851] loop7: detected capacity change from 1 to 0 [ 290.297362][ T6881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.318046][ T6901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 300.005973][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 302.573528][ T6951] mmap: syz.0.307 (6951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 303.288122][ T6966] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 314.931077][ T7048] ================================================================== [ 314.939289][ T7048] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 314.947070][ T7048] Read of size 8 at addr ffff88814166ce18 by task syz.3.330/7048 [ 314.954822][ T7048] [ 314.957185][ T7048] CPU: 1 PID: 7048 Comm: syz.3.330 Not tainted syzkaller #0 [ 314.964500][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.974605][ T7048] Call Trace: [ 314.977917][ T7048] [ 314.980865][ T7048] dump_stack_lvl+0x18c/0x250 [ 314.985582][ T7048] ? __lock_acquire+0x7d40/0x7d40 [ 314.990644][ T7048] ? show_regs_print_info+0x20/0x20 [ 314.995883][ T7048] ? load_image+0x400/0x400 [ 315.000411][ T7048] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 315.005900][ T7048] ? __virt_addr_valid+0x18c/0x540 [ 315.011042][ T7048] ? __virt_addr_valid+0x469/0x540 [ 315.016180][ T7048] print_report+0xa8/0x210 [ 315.020632][ T7048] ? dvb_device_open+0xca/0x370 [ 315.025517][ T7048] kasan_report+0x117/0x150 [ 315.030070][ T7048] ? chrdev_open+0x3e3/0x6a0 [ 315.034689][ T7048] ? dvb_device_open+0xca/0x370 [ 315.039580][ T7048] dvb_device_open+0xca/0x370 [ 315.044284][ T7048] ? do_raw_spin_unlock+0x121/0x230 [ 315.049527][ T7048] chrdev_open+0x5cc/0x6a0 [ 315.053986][ T7048] ? cd_forget+0x160/0x160 [ 315.058434][ T7048] ? fsnotify_perm+0x3ed/0x5e0 [ 315.063232][ T7048] ? cd_forget+0x160/0x160 [ 315.067681][ T7048] do_dentry_open+0x8c6/0x1500 [ 315.072491][ T7048] path_openat+0x27f1/0x3230 [ 315.077113][ T7048] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.083131][ T7048] ? lock_chain_count+0x20/0x20 [ 315.088014][ T7048] ? do_filp_open+0x430/0x430 [ 315.092725][ T7048] ? asan.module_dtor+0x20/0x20 [ 315.097603][ T7048] ? lockdep_hardirqs_on+0x98/0x150 [ 315.102837][ T7048] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 315.108534][ T7048] do_filp_open+0x1f5/0x430 [ 315.113064][ T7048] ? vfs_tmpfile+0x490/0x490 [ 315.117679][ T7048] ? preempt_schedule_common+0x82/0xc0 [ 315.123199][ T7048] ? _raw_spin_unlock+0x3a/0x40 [ 315.128097][ T7048] ? alloc_fd+0x58f/0x630 [ 315.132484][ T7048] do_sys_openat2+0x134/0x1d0 [ 315.137192][ T7048] ? do_sys_open+0xe0/0xe0 [ 315.141633][ T7048] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.147661][ T7048] ? lock_chain_count+0x20/0x20 [ 315.152560][ T7048] __x64_sys_openat+0x139/0x160 [ 315.157475][ T7048] do_syscall_64+0x55/0xa0 [ 315.161946][ T7048] ? clear_bhb_loop+0x40/0x90 [ 315.166656][ T7048] ? clear_bhb_loop+0x40/0x90 [ 315.171363][ T7048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.177286][ T7048] RIP: 0033:0x7f5c3515cfce [ 315.181729][ T7048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.201362][ T7048] RSP: 002b:00007f5c333f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.209814][ T7048] RAX: ffffffffffffffda RBX: 00007f5c333f66c0 RCX: 00007f5c3515cfce [ 315.217812][ T7048] RDX: 0000000000000e82 RSI: 00007f5c333f5c00 RDI: ffffffffffffff9c [ 315.225813][ T7048] RBP: 00007f5c333f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 315.233803][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 315.241803][ T7048] R13: 00007f5c35416128 R14: 00007f5c35416090 R15: 00007ffcf4a6e928 [ 315.249814][ T7048] [ 315.252890][ T7048] [ 315.255239][ T7048] Allocated by task 1: [ 315.259391][ T7048] kasan_set_track+0x4e/0x70 [ 315.264012][ T7048] __kasan_kmalloc+0x8f/0xa0 [ 315.268664][ T7048] dvb_register_device+0x2fd/0x2210 [ 315.273893][ T7048] dvb_register_frontend+0x649/0x930 [ 315.279208][ T7048] vidtv_bridge_probe+0x9ab/0xf80 [ 315.284278][ T7048] platform_probe+0x13b/0x1c0 [ 315.288984][ T7048] really_probe+0x25b/0xb20 [ 315.293504][ T7048] __driver_probe_device+0x18c/0x330 [ 315.298818][ T7048] driver_probe_device+0x4f/0x420 [ 315.303862][ T7048] __driver_attach+0x44e/0x6e0 [ 315.308646][ T7048] bus_for_each_dev+0x235/0x2b0 [ 315.313529][ T7048] bus_add_driver+0x340/0x630 [ 315.318239][ T7048] driver_register+0x23a/0x310 [ 315.323040][ T7048] vidtv_bridge_init+0x3d/0x70 [ 315.327921][ T7048] do_one_initcall+0x242/0x790 [ 315.332764][ T7048] do_initcall_level+0x137/0x1f0 [ 315.337744][ T7048] do_initcalls+0x69/0xd0 [ 315.342102][ T7048] kernel_init_freeable+0x3ed/0x580 [ 315.347335][ T7048] kernel_init+0x1d/0x1c0 [ 315.351706][ T7048] ret_from_fork+0x48/0x80 [ 315.356151][ T7048] ret_from_fork_asm+0x11/0x20 [ 315.360988][ T7048] [ 315.363329][ T7048] Freed by task 6966: [ 315.367330][ T7048] kasan_set_track+0x4e/0x70 [ 315.371956][ T7048] kasan_save_free_info+0x2e/0x50 [ 315.377002][ T7048] ____kasan_slab_free+0x126/0x1e0 [ 315.382151][ T7048] slab_free_freelist_hook+0x130/0x1a0 [ 315.387639][ T7048] __kmem_cache_free+0xba/0x1e0 [ 315.392529][ T7048] dvb_device_open+0x2ee/0x370 [ 315.397320][ T7048] chrdev_open+0x5cc/0x6a0 [ 315.401775][ T7048] do_dentry_open+0x8c6/0x1500 [ 315.406575][ T7048] path_openat+0x27f1/0x3230 [ 315.411193][ T7048] do_filp_open+0x1f5/0x430 [ 315.415729][ T7048] do_sys_openat2+0x134/0x1d0 [ 315.420431][ T7048] __x64_sys_openat+0x139/0x160 [ 315.425320][ T7048] do_syscall_64+0x55/0xa0 [ 315.429785][ T7048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.435703][ T7048] [ 315.438047][ T7048] The buggy address belongs to the object at ffff88814166ce00 [ 315.438047][ T7048] which belongs to the cache kmalloc-256 of size 256 [ 315.452124][ T7048] The buggy address is located 24 bytes inside of [ 315.452124][ T7048] freed 256-byte region [ffff88814166ce00, ffff88814166cf00) [ 315.465876][ T7048] [ 315.468229][ T7048] The buggy address belongs to the physical page: [ 315.474673][ T7048] page:ffffea0005059b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14166c [ 315.484943][ T7048] head:ffffea0005059b00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 315.493906][ T7048] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 315.502016][ T7048] page_type: 0xffffffff() [ 315.506374][ T7048] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 315.514992][ T7048] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 315.523602][ T7048] page dumped because: kasan: bad access detected [ 315.530042][ T7048] page_owner tracks the page as allocated [ 315.535865][ T7048] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14903506595, free_ts 0 [ 315.555678][ T7048] post_alloc_hook+0x1c1/0x200 [ 315.560504][ T7048] get_page_from_freelist+0x1951/0x19e0 [ 315.566145][ T7048] __alloc_pages+0x1f0/0x460 [ 315.570849][ T7048] alloc_page_interleave+0x24/0x1e0 [ 315.576084][ T7048] alloc_slab_page+0x5d/0x160 [ 315.580793][ T7048] new_slab+0x87/0x2d0 [ 315.584926][ T7048] ___slab_alloc+0xc5d/0x12f0 [ 315.589646][ T7048] __kmem_cache_alloc_node+0x19e/0x250 [ 315.595225][ T7048] kmalloc_trace+0x2a/0xe0 [ 315.599677][ T7048] bus_add_driver+0x162/0x630 [ 315.604409][ T7048] driver_register+0x23a/0x310 [ 315.609217][ T7048] usb_register_driver+0x206/0x3d0 [ 315.614364][ T7048] pvr_init+0x7b/0x130 [ 315.618475][ T7048] do_one_initcall+0x242/0x790 [ 315.623282][ T7048] do_initcall_level+0x137/0x1f0 [ 315.628250][ T7048] do_initcalls+0x69/0xd0 [ 315.632619][ T7048] page_owner free stack trace missing [ 315.638019][ T7048] [ 315.640373][ T7048] Memory state around the buggy address: [ 315.646051][ T7048] ffff88814166cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.654227][ T7048] ffff88814166cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.662316][ T7048] >ffff88814166ce00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 315.670392][ T7048] ^ [ 315.675260][ T7048] ffff88814166ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 315.683344][ T7048] ffff88814166cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.691433][ T7048] ================================================================== [ 315.700558][ T7048] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 315.707781][ T7048] CPU: 1 PID: 7048 Comm: syz.3.330 Not tainted syzkaller #0 [ 315.715100][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.725188][ T7048] Call Trace: [ 315.728493][ T7048] [ 315.731438][ T7048] dump_stack_lvl+0x18c/0x250 [ 315.736150][ T7048] ? show_regs_print_info+0x20/0x20 [ 315.741377][ T7048] ? load_image+0x400/0x400 [ 315.745911][ T7048] panic+0x2dc/0x730 [ 315.749830][ T7048] ? bpf_jit_dump+0xd0/0xd0 [ 315.754362][ T7048] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 315.760063][ T7048] ? dvb_device_open+0xca/0x370 [ 315.764946][ T7048] ? check_panic_on_warn+0x70/0xa0 [ 315.770101][ T7048] ? dvb_device_open+0xca/0x370 [ 315.775011][ T7048] check_panic_on_warn+0x84/0xa0 [ 315.780002][ T7048] ? dvb_device_open+0xca/0x370 [ 315.784886][ T7048] end_report+0x6f/0x130 [ 315.789159][ T7048] kasan_report+0x128/0x150 [ 315.793682][ T7048] ? chrdev_open+0x3e3/0x6a0 [ 315.798302][ T7048] ? dvb_device_open+0xca/0x370 [ 315.803180][ T7048] dvb_device_open+0xca/0x370 [ 315.807883][ T7048] ? do_raw_spin_unlock+0x121/0x230 [ 315.813123][ T7048] chrdev_open+0x5cc/0x6a0 [ 315.817563][ T7048] ? cd_forget+0x160/0x160 [ 315.822012][ T7048] ? fsnotify_perm+0x3ed/0x5e0 [ 315.826809][ T7048] ? cd_forget+0x160/0x160 [ 315.831225][ T7048] do_dentry_open+0x8c6/0x1500 [ 315.835994][ T7048] path_openat+0x27f1/0x3230 [ 315.840633][ T7048] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.846634][ T7048] ? lock_chain_count+0x20/0x20 [ 315.851503][ T7048] ? do_filp_open+0x430/0x430 [ 315.856193][ T7048] ? asan.module_dtor+0x20/0x20 [ 315.861058][ T7048] ? lockdep_hardirqs_on+0x98/0x150 [ 315.866270][ T7048] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 315.871908][ T7048] do_filp_open+0x1f5/0x430 [ 315.876421][ T7048] ? vfs_tmpfile+0x490/0x490 [ 315.881001][ T7048] ? preempt_schedule_common+0x82/0xc0 [ 315.886465][ T7048] ? _raw_spin_unlock+0x3a/0x40 [ 315.891396][ T7048] ? alloc_fd+0x58f/0x630 [ 315.895725][ T7048] do_sys_openat2+0x134/0x1d0 [ 315.900402][ T7048] ? do_sys_open+0xe0/0xe0 [ 315.904818][ T7048] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.910803][ T7048] ? lock_chain_count+0x20/0x20 [ 315.915666][ T7048] __x64_sys_openat+0x139/0x160 [ 315.920535][ T7048] do_syscall_64+0x55/0xa0 [ 315.924978][ T7048] ? clear_bhb_loop+0x40/0x90 [ 315.929672][ T7048] ? clear_bhb_loop+0x40/0x90 [ 315.934346][ T7048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.940241][ T7048] RIP: 0033:0x7f5c3515cfce [ 315.944676][ T7048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.964290][ T7048] RSP: 002b:00007f5c333f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.972744][ T7048] RAX: ffffffffffffffda RBX: 00007f5c333f66c0 RCX: 00007f5c3515cfce [ 315.980710][ T7048] RDX: 0000000000000e82 RSI: 00007f5c333f5c00 RDI: ffffffffffffff9c [ 315.988680][ T7048] RBP: 00007f5c333f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 315.996661][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 316.004642][ T7048] R13: 00007f5c35416128 R14: 00007f5c35416090 R15: 00007ffcf4a6e928 [ 316.012654][ T7048] [ 316.016277][ T7048] Kernel Offset: disabled [ 316.020606][ T7048] Rebooting in 86400 seconds..