last executing test programs: 3m56.464283527s ago: executing program 2 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbdd9, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x1, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x3, 0xd, 0x8, 0x2f, 0x0, 0x10, 0x48, 0x40, 0x0, 0x1a, 0x12, 0x1d, 0x0, 0x86, 0x9}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r7, 0x1, 0xff, 0x6, @remote}, 0x14) 3m50.017393584s ago: executing program 2 (id=361): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r1 = inotify_init() r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) close_range(r1, 0xffffffffffffffff, 0x0) 3m48.305534135s ago: executing program 2 (id=368): signalfd(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8) fsopen(&(0x7f0000000100)='ext4\x00', 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x40, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0xd, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 3m45.758161027s ago: executing program 2 (id=374): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 3m44.429650419s ago: executing program 2 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) inotify_init() socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000440)='\x9d\xfb\xd9\xb3\xb94\x90\x8ev,\x9d{\xf8\x19\x00\xcbl\x97+\xfc\xa9\xbdq\x19&\xf1\xbb\xb1I\x04z(\x9eJk\xcb\xbc.\x15\x88\xf0\xc1\xe3V\xf3\xa3\xde\x90\xd5}\xe2\xd7\xf7\x00\xe6\xcc$S\x17n\a\xf5\v\x87\xee\xd6L:\\a7\xc1\x02Lz\xde\xb7UYW\f\xb1\xec\xddK0G<|\xd7DG\x8f.\xbd\x85\xe6\x1a/\x9d\xa6\xe9\xdd\x9eJJ\xe3\x9d\x18sG\x94\xd1*$x\x00qZP\a\x001\xb2\x87-\xa4=:P${\xd8\xa5<\xba\xf2?\xae\xba\x9f\x1b\xd4\xe3fNhn\xf24\xde\x17\xef', 0x40, 0x15a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m41.210549476s ago: executing program 2 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1, 0x87, 0x3) epoll_create1(0x0) 3m39.3967911s ago: executing program 32 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1, 0x87, 0x3) epoll_create1(0x0) 29.189262824s ago: executing program 3 (id=767): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) fanotify_mark(r2, 0x1, 0x12, r0, &(0x7f0000000000)='./file0\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 23.739729176s ago: executing program 3 (id=780): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x3, 0x0) sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xb33, "490bc5835cf98383e1a169e0d6367c51e44c7666f196d37c6fe1de3903620019c03d63efb2afad4c8e6536fabd0b18d64f0257af10c923fab8b4c1d414fafbf8a3b1a234500b74d2c835cef4e952289cb2ccd6391b2a38dabbedfd4920a954eb209f8cbcc096cc9589df7acfc106fd9ec22bc68fabb31041c843cd4692de8db25521d2ffb109289a6e6903e8fb11d5f2a1062723653f121cf5a9c371782262c698269189685c9faae085ac643e4ad48e187616f4e1964d9ee729bc71f316d9bcc90a6c6f7437d0716a9c62a81794a0b4de0c6c3158c38fced1f3b442390eda48ffcc89d59b6fd84ed510acf4d9094e87dac21a06a2109ca2803803a4b80d13b37d89b6c73407e6acfeac1a095960d6a9e8049196938baaeda34a2ef009ffcdb5f035c36b7ed05f4c2a3969ba416c6a6ad629512981eb31de05d1a47858ace26809845bda12820ad6361d0212ce1722f6c4560d8e4f766c295da9dd49d66dfb1e9b6a35b150a970abbb8c59c57a93d16eab2a7166864134d17b4d4f090d22cc3d85e8797bfc1b466ff4766034411ec0a96643fec02222560e5ae236f18277c00ccd34a8377eb45d6c36e3e1678c9aa008a5d263edfd3e0e452f2cc1cc362225e415dc61a444e8988c526e0f865eac6afa77447a8240339631cfe1afe46f805c48baac370203c2e2c6bc4a78caf6c577e4393026a7811728f4c0ec68e7e9067de2146fdf2c0a3108a94574a8ea6091a3d7221d38a3e05e30214e716f8e47c719702a9e35705bb02bc25ad604be7a9a38a76aa412c46e7fc29bbdcd5ca210512cff6565529ae7788b15aa3598812a95befb8bf7b26b793ac2fa5fda252c7f78736c028ada6a88d2fa4ecac78ab38053bedf6a11d127472325e08d99c55d277aad91ac0f192416338ec336b2480d1425f91b40dd978a442015fe24b64a752f3c17645a09774ecb96f41e4428d72043aa1372d9a46ec362b78e195a342d0210e086c1a7328e2483c9d39724aafb83d334c1e810db6b0d57552960d020b5a265eb5ebf1b49442c8b69cd059bd2caaaf64473fd4fe1d09c4216ded77080bbf1ec598c100bcbba8e0320c108796d50a731be9595582b63c1c258cfefd201e59c003a4e6de18f8caddbb1d09bbeb11a8622e87cf77c97d08d34ea7ffdb60e183ecd55e33874f479ad3347cd98ab69c135ab5ed907c27f6bf5ab841a0b4eadd9518f3e493c8541bee77260e6c0a77ae37e8d55215b7194206df532c09d98f8b794b24d08ae152e7d50f7a7704f19f65407ca92e483bbfe389b0f48129395db2aa1baf68e03a09cb7a90d4ff64b1b27c9188d5233dcba6897c6c538c052c82272ad8d3fc9afdd0e55be6cd26249a5b3f9a796e14f31ec19991466b89b4fe574b309a69f7246d0895668289dc51dd73054f7c02595c503190a664ee27828e7d2c44c22b6514032f7194f509f8215ba52e7488b8d6131e26fb8b7cd1266f1343b3987ca56a2aa72bad0a8a95be5215ee28843486b34c5b25c11cce071e29f7d6d9589077f3136a3b399d45016b13b472ed80f04443a1d689b9cfac55b3b8e841450ab3c2841ee77a2ac7626b32e6080f6973ae233166b59bee59e46a381353116082b46a6c64cfaa6057c1e21f41a749db7322febf5735227f2ebcfba422d1d75996558f69249e80d9820139b5dbcc92e5d553778f219fa530731e3cf4a55264153489100be366694d31f99bf878a1953d6f3004c1f33c0af369de291b2efe36b1021224373fb40053daf48f47cd2012e81c82f9fbbb32367149b883e9cead421a68433d88af0ce7a67d5fd4200bc51bef208f736292ae5a0ba7b06deb8dd49e854f729114f096371933c81a0a98b9c30be0dbc8b3eb286dec727fed2bcb5411484ed2fa72a4f0ff6889d36ae767e7247188bce7a7d80177450dcea2fed21bb0320c568905545e82229a01b8763b5fbd5bc8269d1be9a1ada636fcef6a301616592987531a0f8fae56bc150173e40e74c9d2b13c29d43e3cb3339679d1faa298ddb848812236a68ccd526329c52ee97dfaa44c332fd54c9540343a42da6ac69a37fec9480b4785bb93b7a91ca8ff1d009bfe19eb25c30ca8702c9515a5d1f82d1e7894109fb34623dff2d4552e1cce63872dbb307c72ef979a04df75a8811ad2ccf3bbfbda35b4fdb1021eb7e8ab7119d3a33d666b4455966412d0ebd95c9dfc36c8047c0e506393a5e264d68285e904390ebd978433b22fc85f9f41cf08fff503964ac2fd20f3cdd46f0c5c3f093e6960b4512c56d2e69195cd67faed65e5036933a421fbbaf7730c3a17b6d44a873a34cab53cac237b4a0d9f6b2817998f0355c86d90c7b3154ea830dcbb31701e3eaa9db04a9f752540cb24b3232b6bbad7dd5a5ab45f941f77d9f844f18d967d9019ce0c9c22f8c0504c69a816e2bd603e88be66d042075f775ca29f7d28e26a201de621faaec0d364158821e1300c108d935068764fe57d6cf0421eb4674d1bd39041774367d4d5b5429cee88780ff417f9dcbd14651b03c9299b4e8551751400b8206b4b1d79daf570cf4f035d4b0f865e6cb33959c1bda2c86daec9548ae1db5b66dcc66f4a5b670d840b800570cc9a164b22e4d74834060acceee70eef1bd8118680468e2f6765079ce2e61aec4b48c1a3e1d9db53ca8d1ef5a19806a271d433e8b706b4aa04f32acc980344a8e91c89a75bda2d326a848dd5a975b0c15c8af42191118bf020f1c1281df8769591567d7d9822ff90649dca9e8faa9b12802c508a31f28c510b547598ab33d39956af9c705701e0818af2fa4e222e52326acbf6af5b82c9e3a4f5be599209ad3f08c349a5394c0a2e7f3a102a8995c53e70da50549c824a8e2220a096bbf0af19d5f99be8c2998a1e51a317b5c6b3a7617deecc461fdcf9b1a043fd63de28f0181f5bff8168769293356ead29ebe7f27a4bab846847d90c567a3dcf5d83549b5ca7f053ef776c89a56e3b59e1d939acc3d453b7c18baf67b6efce1ada42976829c1e8cbdd726a7c431d18772644db819bf62efbff0a5d2e20fa2eafefe17ae494aeb89c3854c557284dbae59f932a992dbd121b474ed01ddf6232e41d17788ea0c650213ef48e427fcdf550cd845cf1a4fef21acea9eef5d6320a5b32896d007025e96004bc3dbd73d4179e9d5f7f7e6ad38b6a51bcf3356bdb9882656649b7e145c08454401335df325d368b04d379cb7da35109efd8b13f7f3a5ed35db4f180064e24ab08ec2669f60c28e58839871cb9ffb79874f5925a6e9e0ccfdca961179ff69d331651e449290cf69cd1070b6a483d32218c174766075af6cf0b1be412f7defbecee97ce79c37a7fee11fa91b7304831cb32ef315f6ab0d8386a5139a0ebde3064e5e0ba6b800969695fa40c8c3a7a0927189fe457389de7b629a2169122548baf38642edbc3b29c5eb93605d66ffa2f690ec41fb28f4b3ef12fa89b55b7c36d3e2c162851e56cffd30426579a78e7d6b17582bda9e4d58243b39f394cfdb0960ca87542b05340f00cda801f725459d2270b60e7c276fee43690941867776d32c63bda259ff0596e3beb270b047c39f22575dc1366c0f37544737b690b21eb10f92cdf7925cd49d8ee7df8c781ac66d866ad854d31ce7ba4c4196bd2edcc46701eaa65772d4d68ec3eee2eebdbd396a5f8b5e045994ed75688968e46042d91d27b6d8635b6a017857054c04a64ed5823887f3915f0aa64012bdeb10477a0cc310464ccfd92f272769efc01c2a78fa8144041ef925abf7d7d47825fbc1be82a0b61adbb3319c5e5b7d3ae2c2c623ca6ccc37834baa91993101fa35492add6b3d9a6d588797dedd92d182acc6c7fb97f94e8dd93dd08100037426a6c50297344b5591be1d5dac25bfbd71f453b3f6bf9bfa059c6963cef0320e187cf24be2ae09226ec5289257d5c8e875129c1d57982a481a649b987c2e47685b469d7d1549d68f6b3b84bd15c21c0f991752067fd3cb9bae822a5ab20288c524b8e68ed7b1c7b84a46b0911495d09044397c6b67936a82d01dfc152b5dfce4"}, &(0x7f0000001740)=0xb3b) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 18.320430647s ago: executing program 1 (id=792): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 16.56147154s ago: executing program 4 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_buf(r3, 0x0, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) 16.395451954s ago: executing program 3 (id=795): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setregid(0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400c5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xe0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @loopback}, 'wg1\x00'}) syz_mount_image$fuse(0x0, 0x0, 0x300700b, 0x0, 0x1, 0x0, 0x0) 14.210698757s ago: executing program 4 (id=797): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c4", 0x63}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.06939781s ago: executing program 1 (id=799): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 13.744989898s ago: executing program 3 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb482) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r2, 0x80079a0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x10000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 12.86135252s ago: executing program 1 (id=802): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) recvmsg(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 11.667607968s ago: executing program 0 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f00000000c0)={'veth0_to_bridge\x00', @ifru_addrs=@ethernet={0x1, @random="021122334455"}}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00', @ifru_addrs=@ethernet={0x1, @random="021122334466"}}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000140)={'bridge0\x00', @ifru_ivalue=0x2}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@generic={0x13, 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'bridge0\x00', 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000280)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="0180c200"}, 0x14) sendto$packet(r2, &(0x7f0000000300)="0180c20000000011223344660028424203000000000000000000000000000000000000000000000000000000140002000f0000000000", 0x34, 0x0, &(0x7f0000000400)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="0180c200"}, 0x14) sendto$packet(r2, &(0x7f0000000300)="0180c20000000011223344660028424203000000000000000000000000000000000000000000000000000000140002000f0000000000", 0x34, 0x0, &(0x7f0000000400)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="0180c200"}, 0x14) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 11.582273671s ago: executing program 1 (id=805): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r2, 0x0, 0x20048050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x11a020, &(0x7f0000000080)={[{@gid}]}) 11.329292036s ago: executing program 4 (id=806): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) recvmsg(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 9.93428198s ago: executing program 1 (id=807): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 9.906720501s ago: executing program 5 (id=808): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) listen(r2, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) listen(r4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 9.890214912s ago: executing program 0 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 9.498753351s ago: executing program 4 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) getpgid(r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0xc6, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @tipc={{0x28, 0x4, 0x0, 0x2a, 0xb8, 0x67, 0x0, 0x69, 0x6, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@remote, 0x7fffffff}, {@remote, 0x5}]}, @timestamp={0x44, 0xc, 0x84, 0x0, 0x1, [0x10000, 0x3]}, @timestamp_addr={0x44, 0x4, 0x52}, @timestamp={0x44, 0x24, 0x1e, 0x0, 0x7, [0x4, 0x7, 0x7, 0x18, 0x3ff, 0x8, 0x6, 0x401]}, @timestamp_prespec={0x44, 0x14, 0xea, 0x3, 0x0, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x24, 0xc8, 0x0, 0x2, [0x3, 0x7, 0x0, 0x8, 0x17, 0x9, 0x0, 0x8000]}, @lsrr={0x83, 0xb, 0x16, [@private=0xa010100, @rand_addr=0x64010101]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0x5, 0x4, 0x4, 0x4e23, 0x4e20}}}}}}}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000400)={0x0, 0xea60}, 0x10) setns(0xc9, 0x0) r4 = socket(0x8, 0x3, 0x7f) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 8.70453317s ago: executing program 0 (id=811): madvise(&(0x7f00003c7000/0x1000)=nil, 0x1000, 0x17) creat(&(0x7f0000000080)='./file0\x00', 0x5d) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) capset(&(0x7f0000000000)={0x20080522}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mincore(&(0x7f0000223000/0x2000)=nil, 0x2000, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda8d) accept$inet(r0, 0x0, 0x0) 8.456834596s ago: executing program 5 (id=812): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 7.710424114s ago: executing program 4 (id=813): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97C\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x9a[{;\x91\xdbT\xc0\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\xfd\xaf\xf6(G\r\xb3\x14)v@O\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93EO\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0X\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xef\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\v\x167\xed\xb3J\x012A(?Jl\xe0\xd2\xaa\xbc\x00\xc1\x8d\xeb{\xfa\x12c\xf72T\xf1\xb3\xc9BQ\x9d\xca\x80\t\x82c\x15t\x7f\x8aM\xde\x95\xd0\xb5`\xfe\xd4\xd2\x0fU\xae\x1b\xe8\'\x00J\xa4\x00\x00\x00\x00', 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.6213201s ago: executing program 5 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.23528473s ago: executing program 0 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) 5.211850525s ago: executing program 5 (id=816): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41) 4.229150889s ago: executing program 0 (id=817): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 4.15773057s ago: executing program 3 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 3.189623094s ago: executing program 5 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pause() syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_emit_ethernet(0x15, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(0x0, 0x0) set_mempolicy(0x1, &(0x7f00000001c0)=0x3, 0xb) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)) 3.137340625s ago: executing program 4 (id=820): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 3.098822726s ago: executing program 0 (id=821): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) recvmsg(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 2.827027132s ago: executing program 1 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) unshare(0x22020600) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) 1.993602512s ago: executing program 3 (id=823): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x48, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x3, 0x9]}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x2, 0x0, 0x5a, 0xd22, 0x1, 0x6, '\x00', 0x0, r0, 0x0, 0x4, 0x3}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 0s ago: executing program 5 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000400)="e1c265e436668db73ed71843fc09a234a96c4ba30436", 0x8629, r0}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 76.495217][ T4259] cgroup: Unknown subsys name 'net' [ 76.633956][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.180626][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.134406][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.142759][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.151518][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.159495][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.166916][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.175029][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.183201][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.191209][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.198531][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.206216][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.214141][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.222311][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.230696][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.237453][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.238816][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.250722][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.253420][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.260615][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.266729][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.276320][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.287805][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.288840][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.298627][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.303477][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.316970][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.319392][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.327130][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.341246][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.357419][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.391641][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.778922][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 80.843726][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 80.925134][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.952607][ T4288] chnl_net:caif_netlink_parms(): no params data found [ 81.051999][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.062439][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.071130][ T4272] device bridge_slave_0 entered promiscuous mode [ 81.084320][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 81.098428][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.105583][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.114057][ T4275] device bridge_slave_0 entered promiscuous mode [ 81.128313][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.135475][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.146372][ T4272] device bridge_slave_1 entered promiscuous mode [ 81.164940][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.172157][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.180563][ T4275] device bridge_slave_1 entered promiscuous mode [ 81.243996][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.269673][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.281292][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.302079][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.324723][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.333987][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.344129][ T4273] device bridge_slave_0 entered promiscuous mode [ 81.353284][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.360821][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.369276][ T4288] device bridge_slave_0 entered promiscuous mode [ 81.401206][ T4275] team0: Port device team_slave_0 added [ 81.409396][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.416498][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.426686][ T4273] device bridge_slave_1 entered promiscuous mode [ 81.441415][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.448740][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.456632][ T4288] device bridge_slave_1 entered promiscuous mode [ 81.470159][ T4275] team0: Port device team_slave_1 added [ 81.496069][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.506130][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.514685][ T4281] device bridge_slave_0 entered promiscuous mode [ 81.528248][ T4272] team0: Port device team_slave_0 added [ 81.564351][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.572562][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.602181][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.614117][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.621540][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.629985][ T4281] device bridge_slave_1 entered promiscuous mode [ 81.638361][ T4272] team0: Port device team_slave_1 added [ 81.663866][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.674491][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.682044][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.708399][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.735447][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.748513][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.759340][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.779397][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.826056][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.836162][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.843442][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.869545][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.890772][ T4288] team0: Port device team_slave_0 added [ 81.917773][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.924764][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.951121][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.965396][ T4273] team0: Port device team_slave_0 added [ 81.991011][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.998272][ T4275] device hsr_slave_1 entered promiscuous mode [ 82.008546][ T4288] team0: Port device team_slave_1 added [ 82.019490][ T4273] team0: Port device team_slave_1 added [ 82.028925][ T4281] team0: Port device team_slave_0 added [ 82.067970][ T4281] team0: Port device team_slave_1 added [ 82.096098][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.104343][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.130618][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.155937][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.163887][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.190290][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.213151][ T4272] device hsr_slave_0 entered promiscuous mode [ 82.220241][ T4272] device hsr_slave_1 entered promiscuous mode [ 82.226877][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.235220][ T4272] Cannot create hsr debugfs directory [ 82.242386][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.249665][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.275713][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.293430][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.300565][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.327084][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.355126][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.362440][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.389072][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.399890][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 82.404597][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.406475][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 82.415064][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.445626][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.467323][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 82.477354][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 82.478601][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 82.569059][ T4273] device hsr_slave_0 entered promiscuous mode [ 82.576157][ T4273] device hsr_slave_1 entered promiscuous mode [ 82.583236][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.591027][ T4273] Cannot create hsr debugfs directory [ 82.660655][ T4281] device hsr_slave_0 entered promiscuous mode [ 82.667817][ T4281] device hsr_slave_1 entered promiscuous mode [ 82.675621][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.683432][ T4281] Cannot create hsr debugfs directory [ 82.693110][ T4288] device hsr_slave_0 entered promiscuous mode [ 82.700436][ T4288] device hsr_slave_1 entered promiscuous mode [ 82.707259][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.714881][ T4288] Cannot create hsr debugfs directory [ 82.982435][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.994655][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.037274][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.063795][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.115154][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.128786][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.149395][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.158933][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.236883][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.255203][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.284425][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.308048][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.366246][ T4288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.385206][ T4288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.402058][ T4288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.415140][ T4288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.470718][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.486660][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.508988][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.528236][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.538794][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.552610][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.564160][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.579915][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.588447][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.612025][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.622402][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.636018][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.675247][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.685845][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.696583][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.703932][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.715403][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.724633][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.733612][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.740817][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.748915][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.758089][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.766583][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.773758][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.781921][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.790365][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.803896][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.813038][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.822435][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.829721][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.877136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.889197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.903882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.913201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.923400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.932503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.941445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.950720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.978040][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.987647][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.004719][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.015966][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.025402][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.034804][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.043853][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.053135][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.065961][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.092858][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.102263][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.113328][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.125184][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.143133][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.155050][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.164936][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.180064][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.189472][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.201108][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.210556][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.234602][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.264512][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.319992][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.339019][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.358171][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.365463][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.392620][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.423131][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.441360][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.469529][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.477269][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 84.480132][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.483429][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 84.521784][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.539075][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.548445][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 84.554521][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 84.560887][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 84.568609][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.575752][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.583848][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.593514][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.602397][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.609569][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.623416][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.631572][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.645365][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.654356][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.663577][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.673790][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.681048][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.689805][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.701251][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.725374][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.739792][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.768321][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.777145][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.788599][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.827117][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.836372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.849344][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.856554][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.881968][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.902611][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.924777][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.948409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.967611][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.976440][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.025054][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.038147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.046409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.063144][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.075499][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.084379][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.093750][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.103219][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.113009][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.121901][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.129097][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.136817][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.145733][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.154920][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.167596][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.176130][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.212177][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.228376][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.239932][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.268703][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.309985][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.320937][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.335750][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.343883][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.365006][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.376502][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.389737][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.402674][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.413837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.426455][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.446647][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.490349][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.509999][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.530387][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.604138][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.614475][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.633768][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.651343][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.681620][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.706167][ T4272] device veth0_vlan entered promiscuous mode [ 85.739677][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.776399][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.793260][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.823454][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.865258][ T4272] device veth1_vlan entered promiscuous mode [ 85.915230][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.929896][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.945852][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.969041][ T4275] device veth0_vlan entered promiscuous mode [ 86.025487][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.034946][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.049850][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.063181][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.073602][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.099791][ T4275] device veth1_vlan entered promiscuous mode [ 86.123355][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.143367][ T4272] device veth0_macvtap entered promiscuous mode [ 86.159526][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.169836][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.179445][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.189520][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.221693][ T4272] device veth1_macvtap entered promiscuous mode [ 86.251986][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.284147][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.320233][ T4275] device veth0_macvtap entered promiscuous mode [ 86.351529][ T4275] device veth1_macvtap entered promiscuous mode [ 86.373171][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.399136][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.426190][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.445343][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.456134][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.476523][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.501422][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.516003][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.547831][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 86.553897][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 86.572368][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.603153][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.611123][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.627598][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 86.628695][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 86.639778][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 86.649681][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.663062][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.677328][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.686101][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.736345][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.753924][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.766993][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.845548][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.857480][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.866497][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.875553][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.885242][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.894901][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.908414][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.919740][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.931634][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.008706][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.024359][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.036929][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.058100][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.066872][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.091500][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.126979][ T4273] device veth0_vlan entered promiscuous mode [ 87.151696][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.188618][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.199006][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.223864][ T4273] device veth1_vlan entered promiscuous mode [ 87.299057][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.307146][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.392230][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.404770][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.434727][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.439495][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.455226][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.481650][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.491044][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.502696][ T4273] device veth0_macvtap entered promiscuous mode [ 87.548573][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.560180][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.575181][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.604448][ T4273] device veth1_macvtap entered promiscuous mode [ 87.632184][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.648357][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.658497][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.666307][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.669528][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.691473][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.701261][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.725124][ T4281] device veth0_vlan entered promiscuous mode [ 87.740314][ T4288] device veth0_vlan entered promiscuous mode [ 87.759203][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.768507][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.777522][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.786246][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.799418][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.823410][ T4281] device veth1_vlan entered promiscuous mode [ 87.831095][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.840660][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.856183][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.868569][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.881055][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.891854][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.905947][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.922580][ T4288] device veth1_vlan entered promiscuous mode [ 87.949525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.958504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.966635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.976735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.985114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.995609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.007788][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.025771][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.037091][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.048548][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.061069][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.074289][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.084652][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.098276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.107740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.121132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.143030][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.165595][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.174912][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.184184][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205763][ T4281] device veth0_macvtap entered promiscuous mode [ 88.215713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.225618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.239821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.274742][ T4281] device veth1_macvtap entered promiscuous mode [ 88.297933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.341640][ T4288] device veth0_macvtap entered promiscuous mode [ 88.355540][ T4288] device veth1_macvtap entered promiscuous mode [ 88.390304][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.424137][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.457128][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.478362][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.646990][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 88.647040][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 88.683720][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.757515][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 88.757898][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 88.770683][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 88.992077][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.103463][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.236651][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.337267][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.348117][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.359812][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.380349][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.441578][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.505018][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.534917][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.613570][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.644683][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.675456][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.705156][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.731061][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.802996][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.824334][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.840903][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.894532][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.708017][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.749706][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.786023][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.819645][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.831613][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.845943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.868560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.884973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.914600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.034674][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.058431][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.090840][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.101508][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.112288][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.123153][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.133295][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.143919][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.156111][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.173868][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.183183][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.194739][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.203488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.213649][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.411094][ T4288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.582619][ T4288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.689743][ T4288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.837866][ T4288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.914687][ T954] cfg80211: failed to load regulatory.db [ 91.962191][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.995397][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.010654][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.024209][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.129077][ T4386] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 92.129077][ T4386] The task syz.2.10 (4386) triggered the difference, watch for misbehavior. [ 92.292728][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.301200][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.314243][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.396081][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.405172][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.413874][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.505411][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.529049][ T4386] binder: 4383:4386 ioctl 4018620d 0 returned -22 [ 92.535661][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.564651][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.594219][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.610994][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.620979][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.633566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.633679][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.659224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.038104][ T4398] netlink: 'syz.4.5': attribute type 30 has an invalid length. [ 93.065413][ T4398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.079263][ T4405] device syzkaller0 entered promiscuous mode [ 93.457414][ T4414] loop4: detected capacity change from 0 to 512 [ 93.570584][ T4420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 93.585105][ T4414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.655976][ T26] audit: type=1800 audit(1785812281.221:2): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14" name=09 dev="loop4" ino=18 res=0 errno=0 [ 93.732888][ T4424] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 93.814659][ T4425] device gretap1 entered promiscuous mode [ 94.063912][ T4430] loop1: detected capacity change from 0 to 16 [ 94.085017][ T4430] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.259318][ T4431] process 'syz.3.20' launched './file0' with NULL argv: empty string added [ 94.315020][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 95.826429][ T4445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.088330][ T4447] xt_limit: Overflow, try lower: 324382443/0 [ 96.147226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.157216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.167223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.177209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.187206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.197211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.207206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.217206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.227208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 96.237217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 99.607446][ T4481] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.619383][ T4481] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 102.493091][ T4504] sctp: [Deprecated]: syz.0.36 (pid 4504) Use of int in max_burst socket option deprecated. [ 102.493091][ T4504] Use struct sctp_assoc_value instead [ 106.387188][ C0] sched: RT throttling activated [ 106.463243][ T4537] capability: warning: `syz.1.46' uses 32-bit capabilities (legacy support in use) [ 106.785111][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.814633][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.337430][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.491527][ T4541] device bridge_slave_0 left promiscuous mode [ 107.587930][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.655370][ T4541] device bridge_slave_1 left promiscuous mode [ 108.337811][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.433605][ T4541] bond0: (slave bond_slave_0): Releasing backup interface [ 109.021823][ T4541] bond0: (slave bond_slave_1): Releasing backup interface [ 109.513841][ T4541] team0: Port device team_slave_0 removed [ 109.589974][ T4541] team0: Port device team_slave_1 removed [ 109.619249][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.894571][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.864874][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.927429][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.999563][ T4570] tipc: Started in network mode [ 111.004674][ T4570] tipc: Node identity ce42860488fb, cluster identity 4711 [ 112.542275][ T4570] tipc: Enabled bearer , priority 0 [ 112.563814][ T4573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 112.958721][ T4565] tipc: Resetting bearer [ 113.011631][ T4571] device syzkaller0 entered promiscuous mode [ 113.040086][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 113.891298][ T126] tipc: Node number set to 1186563588 [ 114.064787][ T4571] tipc: Resetting bearer [ 114.135589][ T4571] tipc: Disabling bearer [ 114.340484][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 114.387376][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 114.424868][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 115.327654][ T4619] loop1: detected capacity change from 0 to 256 [ 115.683317][ T4625] loop3: detected capacity change from 0 to 32768 [ 115.833521][ T4625] JBD2: Ignoring recovery information on journal [ 115.974249][ T4625] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.412537][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 117.303683][ T4633] loop2: detected capacity change from 0 to 2048 [ 117.425318][ T4633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.483174][ T4638] using random self ethernet address [ 117.483256][ T4638] using random host ethernet address [ 117.733253][ T4645] device syzkaller0 entered promiscuous mode [ 117.745882][ T4641] tipc: Started in network mode [ 117.745959][ T4641] tipc: Node identity b2a830b940a6, cluster identity 4711 [ 117.746331][ T4641] tipc: Enabled bearer , priority 0 [ 118.339293][ T4640] tipc: Resetting bearer [ 118.510437][ T4653] loop3: detected capacity change from 0 to 256 [ 118.534589][ T4653] exfat: Deprecated parameter 'utf8' [ 118.548411][ T4653] exfat: Deprecated parameter 'utf8' [ 118.585916][ T4653] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 118.736647][ T4640] tipc: Disabling bearer [ 119.635282][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.72'. [ 121.251442][ T4685] capability: warning: `syz.4.76' uses deprecated v2 capabilities in a way that may be insecure [ 121.572117][ T4332] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.824777][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 122.548680][ T4332] usb 2-1: Using ep0 maxpacket: 8 [ 122.576358][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.648220][ T4332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 122.683565][ T4332] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 122.704349][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.760978][ T4332] usb 2-1: config 0 descriptor?? [ 124.455767][ T4720] netlink: 'syz.0.86': attribute type 4 has an invalid length. [ 124.475381][ T4332] usbhid 2-1:0.0: can't add hid device: -71 [ 124.495709][ T4332] usbhid: probe of 2-1:0.0 failed with error -71 [ 124.828735][ T4332] usb 2-1: USB disconnect, device number 2 [ 125.328731][ T4733] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.584440][ T4751] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 126.631549][ T4755] mmap: syz.1.91 (4755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.907096][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 128.943621][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 128.991494][ T4786] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.001111][ T4786] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.010244][ T4786] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.019074][ T4786] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.840816][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'. [ 130.306476][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.317262][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.324856][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.379857][ T4819] netlink: 165 bytes leftover after parsing attributes in process `syz.4.106'. [ 132.262649][ T4827] device syzkaller0 entered promiscuous mode [ 132.878203][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.885935][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.658656][ T4830] PKCS8: Unsupported PKCS#8 version [ 134.550033][ T4852] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 137.109123][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 137.148392][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.155610][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.222440][ T4882] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 137.272638][ T4882] udc dummy_udc.0: failed to start g1: -19 [ 137.312022][ T4882] UDC core: g1: couldn't find an available UDC or it's busy [ 137.346097][ T4880] loop3: detected capacity change from 0 to 512 [ 137.366042][ T4880] ======================================================= [ 137.366042][ T4880] WARNING: The mand mount option has been deprecated and [ 137.366042][ T4880] and is ignored by this kernel. Remove the mand [ 137.366042][ T4880] option from the mount to silence this warning. [ 137.366042][ T4880] ======================================================= [ 138.322787][ T4880] EXT4-fs: Ignoring removed nobh option [ 138.357541][ T4880] EXT4-fs: Ignoring removed nobh option [ 138.365234][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 138.392738][ T4880] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 138.469501][ T4880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 138.487423][ T4880] System zones: 1-12 [ 138.529469][ T4880] EXT4-fs (loop3): orphan cleanup on readonly fs [ 138.555478][ T4898] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 138.589623][ T4880] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 1042: comm syz.3.119: invalid block [ 138.638164][ T4898] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 138.668827][ T4880] EXT4-fs (loop3): Remounting filesystem read-only [ 138.675516][ T4880] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.119: couldn't read orphan inode 11 (err -117) [ 138.771561][ T4880] EXT4-fs (loop3): Remounting filesystem read-only [ 138.780653][ T4894] bond1 (unregistering): Released all slaves [ 138.784526][ T4880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.896553][ T4903] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 139.108989][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 140.227665][ T4917] device syzkaller0 entered promiscuous mode [ 140.449956][ T4925] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 140.636114][ T4930] Bluetooth: MGMT ver 1.22 [ 140.721977][ T4930] Zero length message leads to an empty skb [ 144.796970][ T4969] tmpfs: Unknown parameter 'quota' [ 154.232973][ T5051] netlink: 'syz.2.161': attribute type 4 has an invalid length. [ 155.984417][ T5074] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 156.283688][ T5074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.318741][ T5080] device vlan2 entered promiscuous mode [ 157.685933][ T5080] device bond1 entered promiscuous mode [ 158.465671][ T5074] bond1: (slave bridge1): making interface the new active one [ 158.526117][ T5074] device bridge1 entered promiscuous mode [ 158.613182][ T5074] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 158.750340][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.788412][ T5093] tipc: Enabling of bearer rejected, failed to enable media [ 158.846146][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 160.514325][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 162.894328][ T4291] Bluetooth: hci3: command 0x201b tx timeout [ 162.979392][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 162.986354][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 163.001659][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.016706][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.031159][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.057194][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.129569][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.233166][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.274878][ T14] usb 2-1: can't set config #16, error -71 [ 163.374665][ T14] usb 2-1: USB disconnect, device number 3 [ 165.472080][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.189'. [ 169.936781][ T5184] syz.4.193 (5184): drop_caches: 2 [ 170.332099][ T5204] No such timeout policy "syz1" [ 170.358586][ T5204] loop2: detected capacity change from 0 to 256 [ 170.756341][ T5204] vfat filesystem being mounted at /39/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 171.590820][ T5209] loop1: detected capacity change from 0 to 1024 [ 171.854747][ T5209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.018595][ T5209] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.774731][ T5223] device syzkaller0 entered promiscuous mode [ 172.795656][ T5209] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.199: Freeing blocks not in datazone - block = 0, count = 16 [ 173.039786][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 173.814576][ T5236] loop3: detected capacity change from 0 to 8 [ 173.929047][ T5236] cramfs: empty filesystem [ 173.942765][ T5242] loop4: detected capacity change from 0 to 512 [ 174.092394][ T5242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.177286][ T5239] device syzkaller0 entered promiscuous mode [ 174.198107][ T5242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.079564][ T5242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 175.143932][ T5242] System zones: 1-12 [ 175.154052][ T5242] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.210: bad orphan inode 16 [ 175.169133][ T5242] ext4_test_bit(bit=15, block=4) = 0 [ 175.174490][ T5242] EXT4-fs (loop4): 1 orphan inode deleted [ 175.182563][ T5242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 176.743800][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 176.845826][ T5269] device syzkaller0 entered promiscuous mode [ 177.066575][ T5277] "syz.3.217" (5277) uses obsolete ecb(arc4) skcipher [ 177.343358][ T5281] syz.3.217 sent an empty control message without MSG_MORE. [ 178.109693][ T5283] device syzkaller0 entered promiscuous mode [ 181.508367][ T5313] device syzkaller0 entered promiscuous mode [ 184.410464][ T5340] tmpfs: Unknown parameter 'quota' [ 185.486764][ T5354] netlink: 'syz.1.236': attribute type 11 has an invalid length. [ 185.728818][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.736027][ T5354] bridge0: port 2(bridge_slave_1) entered listening state [ 185.743550][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.750778][ T5354] bridge0: port 1(bridge_slave_0) entered listening state [ 186.626734][ T5354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.670913][ T5354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.826338][ T5355] device wlan0 entered promiscuous mode [ 192.319908][ T5428] futex_wake_op: syz.3.252 tries to shift op by 144; fix this program [ 193.496795][ T5434] loop2: detected capacity change from 0 to 1024 [ 193.534101][ T5434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 193.584867][ T5434] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.864862][ T5434] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.254: Freeing blocks not in datazone - block = 0, count = 16 [ 194.229675][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.236377][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.831558][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 196.135754][ T5464] loop2: detected capacity change from 0 to 64 [ 198.149155][ T5480] loop4: detected capacity change from 0 to 8 [ 198.213861][ T5480] cramfs: empty filesystem [ 198.364586][ T5477] kvm [5476]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 198.380005][ T5483] tipc: Started in network mode [ 198.396831][ T5483] tipc: Node identity 1259ae5a32b1, cluster identity 4711 [ 198.417424][ T5483] tipc: Enabled bearer , priority 0 [ 198.426462][ T5477] kvm [5476]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 198.473237][ T5483] device syzkaller0 entered promiscuous mode [ 198.536584][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 198.593344][ T5483] tipc: Resetting bearer [ 198.629240][ T5482] tipc: Resetting bearer [ 198.690066][ T5482] tipc: Disabling bearer [ 200.470126][ T5499] device syzkaller0 entered promiscuous mode [ 202.522089][ T5521] netlink: 128 bytes leftover after parsing attributes in process `syz.0.279'. [ 202.531441][ T5521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 202.541852][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 202.550873][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 204.375740][ T5532] loop2: detected capacity change from 0 to 8 [ 204.492928][ T5532] cramfs: empty filesystem [ 204.720209][ T5536] No such timeout policy "syz1" [ 206.557470][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 206.557627][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 206.563691][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 206.569975][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 206.578727][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 213.901494][ T5613] No such timeout policy "syz1" [ 213.924942][ T5613] loop4: detected capacity change from 0 to 256 [ 213.958964][ T5613] vfat filesystem being mounted at /56/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 214.869646][ T5615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 215.846618][ T5615] device veth3 entered promiscuous mode [ 215.997855][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 216.006554][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 219.303450][ T5659] o2cb: This node has not been configured. [ 219.309816][ T5659] o2cb: Cluster check failed. Fix errors before retrying. [ 219.317951][ T5659] (syz.1.310,5659,0):user_dlm_register:674 ERROR: status = -22 [ 219.325877][ T5659] (syz.1.310,5659,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 222.578636][ T5685] device syzkaller0 entered promiscuous mode [ 226.047257][ T4332] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 226.266167][ T4332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.277982][ T4332] usb 5-1: config 0 has no interfaces? [ 226.298285][ T4332] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 226.883445][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.892354][ T4332] usb 5-1: Product: syz [ 226.896585][ T4332] usb 5-1: Manufacturer: syz [ 226.929634][ T4332] usb 5-1: SerialNumber: syz [ 227.059039][ T4332] usb 5-1: config 0 descriptor?? [ 228.122121][ T5716] loop4: detected capacity change from 0 to 256 [ 228.211106][ T5716] vfat filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 228.442745][ T27] usb 5-1: USB disconnect, device number 2 [ 230.109832][ T5761] No such timeout policy "syz1" [ 230.135742][ T5761] loop3: detected capacity change from 0 to 256 [ 234.615125][ T5761] vfat filesystem being mounted at /74/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 235.460851][ T5796] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 237.458598][ T5811] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 237.492326][ T5811] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 237.579088][ T5819] device syzkaller0 entered promiscuous mode [ 238.974326][ T5831] device bond_slave_0 entered promiscuous mode [ 238.980945][ T5831] device bond_slave_1 entered promiscuous mode [ 238.987299][ T5831] device wlan1 entered promiscuous mode [ 239.146737][ T5831] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.194495][ T5831] bond1: (slave macvlan2): making interface the new active one [ 240.153835][ T5831] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 240.478632][ T5831] syz.4.352 (5831) used greatest stack depth: 19424 bytes left [ 240.984588][ T5853] No such timeout policy "syz1" [ 241.008250][ T5853] loop1: detected capacity change from 0 to 256 [ 241.345336][ T5853] vfat filesystem being mounted at /65/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 242.743150][ T5844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.751136][ T5844] IPv6: NLM_F_CREATE should be set when creating new route [ 243.444066][ T5923] tipc: Enabling of bearer rejected, failed to enable media [ 244.498275][ T5943] device syzkaller0 entered promiscuous mode [ 245.876924][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.052218][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.206761][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.609473][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.617021][ C1] bridge0: topology change detected, propagating [ 246.624642][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.631954][ C1] bridge0: topology change detected, propagating [ 246.688104][ T5965] device bridge_slave_0 left promiscuous mode [ 246.694464][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.782066][ T5965] device bridge_slave_1 left promiscuous mode [ 246.861812][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.279440][ T5965] bond0: (slave bond_slave_0): Releasing backup interface [ 247.645133][ T5965] bond0: (slave bond_slave_1): Releasing backup interface [ 247.825031][ T5965] team0: Port device team_slave_0 removed [ 247.878185][ T5965] team0: Port device team_slave_1 removed [ 247.889140][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.896635][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.915764][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.925282][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.948188][ T5968] team0: Mode changed to "activebackup" [ 247.955300][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.022218][ T5986] smc: net device lo applied user defined pnetid SYZ0 [ 248.127266][ T5984] syz.4.372 (5984) used obsolete PPPIOCDETACH ioctl [ 248.214571][ T5995] loop2: detected capacity change from 0 to 64 [ 248.275950][ T5995] bfs filesystem being mounted at /74/bus supports timestamps until 2106-02-07 (0xffffffff) [ 249.409123][ T4272] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02 [ 249.458465][ T4272] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02 [ 250.893569][ T6024] No such timeout policy "syz1" [ 251.382045][ T6011] loop3: detected capacity change from 0 to 128 [ 251.581578][ T6011] FAT-fs (loop3): Unrecognized mount option "time_offset=0y0000400000000161" or missing value [ 251.648503][ T4291] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 254.360617][ T5921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.416496][ T5921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.568225][ T6044] loop3: detected capacity change from 0 to 512 [ 254.569070][ T5921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.621583][ T6044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.679380][ T5921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.777782][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 254.794216][ T6044] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 254.812199][ T6044] EXT4-fs (loop3): 1 truncate cleaned up [ 254.818521][ T6044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 255.669628][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.675999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.985912][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 256.314254][ T5921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.338305][ T5921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.540279][ T5921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.641269][ T5921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.618370][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.637397][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.648661][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.656916][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.665088][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 257.672862][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.952372][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 259.832608][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 259.947047][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.956175][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.172193][ T6080] device bond_slave_0 left promiscuous mode [ 260.178818][ T6080] device bond_slave_1 left promiscuous mode [ 260.184962][ T6080] device wlan1 left promiscuous mode [ 262.174749][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 262.924899][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.975995][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.434001][ T6080] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.443749][ T6080] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.453623][ T6080] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.462641][ T6080] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.601952][ T6066] chnl_net:caif_netlink_parms(): no params data found [ 263.787666][ T5921] tipc: Left network mode [ 263.788968][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.800216][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.817279][ T6066] device bridge_slave_0 entered promiscuous mode [ 263.828690][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.835923][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.845090][ T6066] device bridge_slave_1 entered promiscuous mode [ 263.950587][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.964048][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.002480][ T6066] team0: Port device team_slave_0 added [ 264.042726][ T6066] team0: Port device team_slave_1 added [ 264.086150][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.100589][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.133233][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.235041][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 264.246474][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.260538][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.287695][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.334402][ T6066] device hsr_slave_0 entered promiscuous mode [ 264.341500][ T6066] device hsr_slave_1 entered promiscuous mode [ 264.348414][ T6066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.356034][ T6066] Cannot create hsr debugfs directory [ 264.606700][ T6066] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.617029][ T6066] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.661254][ T6066] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.671601][ T6066] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.852284][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.876428][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.885958][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.904380][ T6066] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.010190][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.023407][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.034562][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.041770][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.064409][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.161532][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.170668][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.182044][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.189273][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.215100][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.233273][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.305418][ T5921] device hsr_slave_0 left promiscuous mode [ 265.314182][ T5921] device hsr_slave_1 left promiscuous mode [ 265.368303][ T5921] device veth1_macvtap left promiscuous mode [ 265.375066][ T5921] device veth0_macvtap left promiscuous mode [ 265.387653][ T5921] device veth1_vlan left promiscuous mode [ 265.394474][ T5921] device veth0_vlan left promiscuous mode [ 266.311479][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 266.472155][ T5921] bond0 (unregistering): Released all slaves [ 266.579074][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.588619][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.597395][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.606304][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.621958][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.634928][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.644131][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.654103][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.664290][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.676237][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.189047][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.197005][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.214757][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.691149][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.702339][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.744738][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.755247][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.774514][ T6066] device veth0_vlan entered promiscuous mode [ 267.782471][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.791840][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.810972][ T6066] device veth1_vlan entered promiscuous mode [ 267.836868][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.846729][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.855903][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.865412][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.880641][ T6066] device veth0_macvtap entered promiscuous mode [ 267.899385][ T6066] device veth1_macvtap entered promiscuous mode [ 267.920173][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.931243][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.941537][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.953953][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.965725][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.976812][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.994065][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.006101][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.022311][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.034149][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.045740][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.055918][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.069204][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.078852][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.088467][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.101237][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.122368][ T6066] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.136367][ T6066] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.147150][ T6066] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.156763][ T6066] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.266072][ T5928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.289708][ T5928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.301190][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.343430][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.351511][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.363006][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.370261][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'. [ 269.379959][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'. [ 269.389304][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'. [ 269.436663][ T6196] device syzkaller0 entered promiscuous mode [ 270.341937][ T6220] No such timeout policy "syz1" [ 270.351924][ T6220] loop5: detected capacity change from 0 to 256 [ 270.529131][ T6220] vfat filesystem being mounted at /1/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 273.161268][ T6230] loop5: detected capacity change from 0 to 128 [ 273.312771][ T6235] syz.0.414 uses obsolete (PF_INET,SOCK_PACKET) [ 273.438677][ T6230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 273.614217][ T6230] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.526484][ T6246] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 275.006904][ T6066] EXT4-fs (loop5): unmounting filesystem. [ 276.985032][ T6287] MPTCP: kernel_bind error, err=-99 [ 283.500288][ T26] audit: type=1804 audit(3933296375.134:3): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.437" name="bus" dev="ramfs" ino=39628 res=1 errno=0 [ 283.899088][ T26] audit: type=1804 audit(3933296375.194:4): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.437" name="bus" dev="ramfs" ino=39628 res=1 errno=0 [ 292.621442][ T6438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.238665][ T6485] loop4: detected capacity change from 0 to 4096 [ 296.842536][ T6485] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 300.904319][ T6519] device syzkaller0 entered promiscuous mode [ 302.229425][ T6541] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by ""[6541] [ 307.013369][ T6583] loop5: detected capacity change from 0 to 1024 [ 307.049458][ T6583] EXT4-fs: Mount option(s) incompatible with ext3 [ 317.171391][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 317.185037][ T6704] device erspan1 entered promiscuous mode [ 317.798274][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 317.811358][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 317.818976][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.829076][ T4291] Workqueue: hci1 hci_rx_work [ 317.833846][ T4291] Call Trace: [ 317.837173][ T4291] [ 317.840136][ T4291] dump_stack_lvl+0x188/0x24e [ 317.844879][ T4291] ? show_regs_print_info+0x12/0x12 [ 317.850129][ T4291] ? load_image+0x410/0x410 [ 317.854701][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 317.859871][ T4291] ? __lock_acquire+0x7c40/0x7c40 [ 317.864950][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 317.869683][ T4291] ? do_raw_spin_unlock+0x11d/0x230 [ 317.874938][ T4291] kobject_add_internal+0x617/0xca0 [ 317.880196][ T4291] kobject_add+0x160/0x230 [ 317.884676][ T4291] ? kobject_init+0x1c0/0x1c0 [ 317.889404][ T4291] ? __raw_spin_lock_init+0x41/0x100 [ 317.894750][ T4291] ? klist_children_get+0x50/0x50 [ 317.899830][ T4291] ? get_device_parent+0x121/0x3e0 [ 317.905003][ T4291] device_add+0x470/0x1050 [ 317.909479][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 317.914480][ T4291] le_conn_complete_evt+0xfac/0x15c0 [ 317.919834][ T4291] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 317.926139][ T4291] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 317.931830][ T4291] ? mutex_unlock+0x10/0x10 [ 317.936390][ T4291] ? skb_pull_data+0xec/0x1f0 [ 317.941115][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 317.946719][ T4291] ? hci_remote_host_features_evt+0x230/0x230 [ 317.952837][ T4291] hci_event_packet+0x7b3/0x1290 [ 317.957845][ T4291] ? __lock_acquire+0x7c40/0x7c40 [ 317.962930][ T4291] ? bis_list+0x280/0x280 [ 317.967317][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 317.973268][ T4291] ? kcov_remote_start+0x4b0/0x7e0 [ 317.978430][ T4291] ? do_machine_check+0x380/0x750 [ 317.983516][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 317.988773][ T4291] hci_rx_work+0x3eb/0xd40 [ 317.993237][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 317.998143][ T4291] ? process_one_work+0x7b4/0x1160 [ 318.003303][ T4291] process_one_work+0x8ab/0x1160 [ 318.008303][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 318.013987][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 318.019055][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 318.024678][ T4291] ? wq_worker_running+0x97/0x190 [ 318.029758][ T4291] worker_thread+0xaf5/0x12a0 [ 318.034518][ T4291] kthread+0x29d/0x330 [ 318.038635][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 318.043711][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 318.048360][ T4291] ret_from_fork+0x1f/0x30 [ 318.052848][ T4291] [ 318.080229][ T4291] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 318.094488][ T4291] Bluetooth: hci1: failed to register connection device [ 318.173525][ T6716] loop5: detected capacity change from 0 to 32768 [ 318.281871][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.293245][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.366001][ T6716] XFS (loop5): Mounting V5 Filesystem [ 318.714700][ T6716] XFS (loop5): Ending clean mount [ 318.740101][ T6716] XFS (loop5): Quotacheck needed: Please wait. [ 319.557706][ T6716] XFS (loop5): Quotacheck: Done. [ 320.597063][ T6742] netlink: 14 bytes leftover after parsing attributes in process `syz.3.514'. [ 320.627488][ T6749] loop4: detected capacity change from 0 to 1024 [ 320.645539][ T6066] XFS (loop5): Unmounting Filesystem [ 320.678688][ T6749] EXT4-fs: Mount option(s) incompatible with ext3 [ 324.681261][ T6768] device syzkaller0 entered promiscuous mode [ 325.618900][ T6788] netlink: 'syz.3.526': attribute type 11 has an invalid length. [ 325.982972][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 325.992523][ T6788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.332005][ T6788] device wlan0 entered promiscuous mode [ 328.980888][ T6834] kvm [6817]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff800000000000 [ 331.478017][ T6873] device syzkaller0 entered promiscuous mode [ 335.023992][ T6904] tipc: Started in network mode [ 335.029026][ T6904] tipc: Node identity 862795018f1f, cluster identity 4711 [ 335.037827][ T6904] tipc: Enabled bearer , priority 0 [ 335.064609][ T6904] device syzkaller0 entered promiscuous mode [ 335.093489][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.549'. [ 335.332460][ T6904] tipc: Resetting bearer [ 335.393208][ T6903] tipc: Resetting bearer [ 335.520414][ T6903] tipc: Disabling bearer [ 335.705967][ T6929] dlm: non-version read from control device 0 [ 342.010990][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 342.130229][ T6962] ksmbd: Unknown IPC event: 0, ignore. [ 342.484560][ T6968] loop3: detected capacity change from 0 to 64 [ 344.127183][ T6989] device syzkaller0 entered promiscuous mode [ 344.429554][ T6992] tipc: Enabled bearer , priority 0 [ 344.468039][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 344.538142][ T6994] tipc: Resetting bearer [ 344.979770][ T7006] loop5: detected capacity change from 0 to 512 [ 345.065871][ T7006] EXT4-fs: inline encryption not supported [ 345.191037][ T7006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.902562][ T7006] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 346.097047][ T7006] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.570: invalid indirect mapped block 2683928664 (level 1) [ 346.431999][ T7006] EXT4-fs (loop5): 1 truncate cleaned up [ 346.800703][ T7006] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 348.327690][ T26] audit: type=1800 audit(3933296436.163:5): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.570" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 348.391966][ T6066] EXT4-fs (loop5): unmounting filesystem. [ 348.476513][ T7019] netlink: 14 bytes leftover after parsing attributes in process `syz.4.573'. [ 350.805389][ T7050] device syzkaller0 entered promiscuous mode [ 350.922386][ T7053] tipc: Started in network mode [ 350.939627][ T7053] tipc: Node identity 3ab7ca31858c, cluster identity 4711 [ 350.986448][ T7053] tipc: Enabled bearer , priority 0 [ 352.138585][ T7062] device syzkaller0 entered promiscuous mode [ 352.156441][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'. [ 352.213042][ T7072] tipc: Resetting bearer [ 352.236348][ T7051] tipc: Resetting bearer [ 352.330191][ T7051] tipc: Disabling bearer [ 352.385963][ T4872] tipc: Node number set to 3208366641 [ 353.287190][ T7061] o2cb: This node has not been configured. [ 353.561229][ T7061] o2cb: Cluster check failed. Fix errors before retrying. [ 353.777624][ T7061] (syz.0.583,7061,1):user_dlm_register:674 ERROR: status = -22 [ 353.781733][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 353.852763][ T7061] (syz.0.583,7061,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 353.888330][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 362.888480][ T7192] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 367.262345][ T7226] loop5: detected capacity change from 0 to 131072 [ 367.294772][ T7226] F2FS-fs (loop5): invalid crc value [ 367.545626][ T7226] F2FS-fs (loop5): Found nat_bits in checkpoint [ 367.728317][ T7226] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 368.032958][ T7226] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 370.176799][ T7252] o2cb: This node has not been configured. [ 370.183062][ T7252] o2cb: Cluster check failed. Fix errors before retrying. [ 370.190408][ T7252] (syz.3.617,7252,0):user_dlm_register:674 ERROR: status = -22 [ 370.198333][ T7252] (syz.3.617,7252,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 379.544359][ T7309] loop4: detected capacity change from 0 to 512 [ 380.287960][ T7309] msdos filesystem being mounted at /128/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 380.395000][ T7327] netlink: 'syz.3.636': attribute type 49 has an invalid length. [ 380.795683][ T26] audit: type=1326 audit(3933296467.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 381.639530][ T26] audit: type=1326 audit(3933296467.268:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 381.762213][ T7327] device ip6gretap0 entered promiscuous mode [ 381.780565][ T26] audit: type=1326 audit(3933296467.278:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 381.843777][ T26] audit: type=1326 audit(3933296467.278:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 381.905901][ T26] audit: type=1326 audit(3933296467.278:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67cb95e84e code=0x7ffc0000 [ 382.031297][ T26] audit: type=1326 audit(3933296467.278:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 382.142334][ T7332] kvm [7330]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000008b [ 382.157695][ T26] audit: type=1326 audit(3933296467.278:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 382.219299][ T7332] kvm [7330]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100002785 [ 383.264489][ T26] audit: type=1326 audit(3933296467.278:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 383.282507][ T7332] kvm [7330]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000388e [ 383.345825][ T26] audit: type=1326 audit(3933296467.278:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 383.428086][ T26] audit: type=1326 audit(3933296467.278:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67cb99e019 code=0x7ffc0000 [ 383.717996][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.647'. [ 383.862200][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.647'. [ 384.068938][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.084372][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.927772][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.077626][ T7388] device bridge_slave_0 left promiscuous mode [ 385.084081][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.367621][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 386.639205][ T7388] device bridge_slave_1 left promiscuous mode [ 386.653433][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.982161][ T7410] loop5: detected capacity change from 0 to 8 [ 388.071085][ T7410] SQUASHFS error: zlib decompression failed, data probably corrupt [ 388.079660][ T7410] SQUASHFS error: Failed to read block 0x9b: -5 [ 388.085951][ T7410] SQUASHFS error: Unable to read metadata cache entry [99] [ 388.093597][ T7410] SQUASHFS error: Unable to read inode 0x127 [ 388.257713][ T7388] bond0: (slave bond_slave_0): Releasing backup interface [ 388.315332][ T7388] bond0: (slave bond_slave_1): Releasing backup interface [ 388.481070][ T7388] team0: Failed to send options change via netlink (err -105) [ 388.512313][ T7388] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 388.555536][ T7388] team0: Port device team_slave_0 removed [ 388.636099][ T7388] team0: Failed to send options change via netlink (err -105) [ 388.676865][ T7388] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 388.698540][ T7388] team0: Port device team_slave_1 removed [ 388.726502][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.743650][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.783712][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.791316][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.850944][ T7388] bond1: (slave bridge1): Releasing active interface [ 388.879292][ T7388] device bridge1 left promiscuous mode [ 389.131306][ T5149] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.150583][ T7399] team0: Failed to send options change via netlink (err -105) [ 389.667477][ T7399] team0: Mode changed to "activebackup" [ 394.425508][ T7441] kvm [7440]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000008b [ 394.444778][ T7441] kvm [7440]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100002785 [ 394.644936][ T7441] kvm [7440]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000388e [ 395.648182][ T7476] loop5: detected capacity change from 0 to 2048 [ 395.673375][ T7476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.648301][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 397.685544][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 398.888048][ T7501] netlink: 'syz.3.672': attribute type 11 has an invalid length. [ 401.702143][ T7522] autofs4:pid:7522:autofs_fill_super: called with bogus options [ 401.767624][ T7530] netlink: 'syz.4.677': attribute type 11 has an invalid length. [ 401.999793][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.063284][ T7530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.128333][ T7530] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.156586][ T7530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.048517][ T7558] netlink: 'syz.3.684': attribute type 11 has an invalid length. [ 407.074845][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 407.223615][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 408.634520][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 409.031363][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 409.031459][ T26] audit: type=1800 audit(3933296493.658:84): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.699" name="bus" dev="ramfs" ino=43530 res=0 errno=0 [ 410.367650][ T7624] netlink: 'syz.4.696': attribute type 11 has an invalid length. [ 411.801435][ T7640] futex_wake_op: syz.4.702 tries to shift op by 144; fix this program [ 414.222441][ T7653] loop4: detected capacity change from 0 to 128 [ 414.348129][ T7653] FAT-fs (loop4): Unrecognized mount option "time_offset=0y0000400000000161" or missing value [ 417.892098][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 417.983215][ T7696] netlink: 'syz.0.713': attribute type 11 has an invalid length. [ 422.995720][ T7734] device syzkaller0 entered promiscuous mode [ 423.188996][ T26] audit: type=1804 audit(3933296506.918:85): pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.724" name="bus" dev="ramfs" ino=43706 res=1 errno=0 [ 423.315541][ T26] audit: type=1804 audit(3933296506.937:86): pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.724" name="bus" dev="ramfs" ino=43706 res=1 errno=0 [ 423.494088][ T7747] loop1: detected capacity change from 0 to 8 [ 423.586756][ T7747] SQUASHFS error: zlib decompression failed, data probably corrupt [ 423.595232][ T7747] SQUASHFS error: Failed to read block 0x9b: -5 [ 423.601893][ T7747] SQUASHFS error: Unable to read metadata cache entry [99] [ 423.609273][ T7747] SQUASHFS error: Unable to read inode 0x127 [ 425.484060][ T7760] netlink: 'syz.1.728': attribute type 11 has an invalid length. [ 426.198365][ T7770] netlink: 'syz.0.731': attribute type 11 has an invalid length. [ 427.039343][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.166085][ T7774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.279645][ T7828] netlink: 'syz.4.743': attribute type 11 has an invalid length. [ 431.288055][ T26] audit: type=1804 audit(3933296514.480:87): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.744" name="bus" dev="ramfs" ino=44751 res=1 errno=0 [ 431.337199][ T26] audit: type=1804 audit(3933296514.480:88): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.744" name="bus" dev="ramfs" ino=44751 res=1 errno=0 [ 431.487997][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.524902][ T7828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.029614][ T7838] netlink: 'syz.4.746': attribute type 11 has an invalid length. [ 432.500759][ T7842] device wlan0 entered promiscuous mode [ 434.061838][ T26] audit: type=1800 audit(3933296517.081:89): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.748" name="UDC" dev="configfs" ino=44780 res=0 errno=0 [ 434.315792][ T7849] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 434.388173][ T7849] udc dummy_udc.0: failed to start g1: -19 [ 434.452691][ T7849] UDC core: g1: couldn't find an available UDC or it's busy [ 439.277619][ T7910] loop3: detected capacity change from 0 to 8 [ 440.813999][ T7910] SQUASHFS error: zlib decompression failed, data probably corrupt [ 440.822544][ T7910] SQUASHFS error: Failed to read block 0x9b: -5 [ 440.828922][ T7910] SQUASHFS error: Unable to read metadata cache entry [99] [ 440.836464][ T7910] SQUASHFS error: Unable to read inode 0x127 [ 441.867667][ T26] audit: type=1804 audit(3933296524.390:90): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.761" name="bus" dev="ramfs" ino=44878 res=1 errno=0 [ 442.276645][ T26] audit: type=1804 audit(3933296524.633:91): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.761" name="bus" dev="ramfs" ino=44878 res=1 errno=0 [ 442.584705][ T7930] netlink: 'syz.5.763': attribute type 11 has an invalid length. [ 442.768585][ T7930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 442.898403][ T7930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.960368][ T7934] loop1: detected capacity change from 0 to 1764 [ 443.014806][ T7934] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 444.782214][ T7943] loop5: detected capacity change from 0 to 2048 [ 445.113522][ T7943] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 446.635334][ T7957] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 447.428062][ T7945] loop3: detected capacity change from 0 to 8192 [ 447.438202][ T6066] EXT4-fs (loop5): unmounting filesystem. [ 447.495959][ T7945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.578300][ T7945] vfat filesystem being mounted at /160/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 448.243903][ T7976] netlink: 'syz.0.774': attribute type 11 has an invalid length. [ 448.313218][ T7976] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 448.410917][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.682761][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.700430][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.414601][ T8003] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 451.156121][ T8003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.377883][ T8005] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 451.459768][ T8020] sctp: [Deprecated]: syz.4.781 (pid 8020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.459768][ T8020] Use struct sctp_sack_info instead [ 452.663977][ T8032] loop4: detected capacity change from 0 to 512 [ 453.240495][ T8032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 453.437606][ T8042] device syzkaller0 entered promiscuous mode [ 453.470505][ T8032] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.741189][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 461.069118][ T8117] netlink: 'syz.1.802': attribute type 11 has an invalid length. [ 464.015318][ T8145] netlink: 'syz.4.806': attribute type 11 has an invalid length. [ 464.079950][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.099854][ T8145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.289513][ T26] audit: type=1326 audit(3933296547.242:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 467.164760][ T26] audit: type=1326 audit(3933296547.242:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 467.216262][ T26] audit: type=1326 audit(3933296547.242:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 467.295440][ T26] audit: type=1326 audit(3933296547.242:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 467.393483][ T26] audit: type=1326 audit(3933296547.242:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 467.640373][ T26] audit: type=1326 audit(3933296547.242:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 468.364391][ T26] audit: type=1326 audit(3933296547.242:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 468.402416][ T26] audit: type=1326 audit(3933296547.242:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 468.744421][ T26] audit: type=1326 audit(3933296547.242:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 468.835305][ T26] audit: type=1326 audit(3933296547.270:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0c1ad9e019 code=0x7ffc0000 [ 471.388847][ T8204] netlink: 'syz.0.821': attribute type 11 has an invalid length. [ 472.098620][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.967659][ T8222] loop3: detected capacity change from 0 to 512 [ 474.212504][ C0] ------------[ cut here ]------------ [ 474.218485][ C0] WARNING: CPU: 0 PID: 0 at net/core/flow_dissector.c:1027 __skb_flow_dissect+0xade/0x6d50 [ 474.228721][ C0] Modules linked in: [ 474.232701][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 474.239829][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.249969][ C0] RIP: 0010:__skb_flow_dissect+0xade/0x6d50 [ 474.255999][ C0] Code: c6 e8 f6 22 4f f9 85 db 0f 84 5b 06 00 00 80 3d 72 7e d9 05 01 0f 85 81 06 00 00 e8 7c 1f 4f f9 e9 e7 f9 ff ff e8 72 1f 4f f9 <0f> 0b e8 6b 0f fd 01 89 c3 31 ff 89 c6 e8 c0 22 4f f9 85 db 74 18 [ 474.275756][ C0] RSP: 0018:ffffc900000060a0 EFLAGS: 00010246 [ 474.281923][ C0] RAX: ffffffff88330eae RBX: 0000000000000000 RCX: ffffffff8c8bc740 [ 474.289975][ C0] RDX: 0000000000000100 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 474.298029][ C0] RBP: ffffc90000006668 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 474.306170][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: ffffffff8e217c3c [ 474.314206][ C0] R13: 1ffffffff1c42f88 R14: ffffffff8e217c42 R15: dffffc0000000000 [ 474.322263][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 474.331267][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.338010][ C0] CR2: 000055556935e4e8 CR3: 000000002a500000 CR4: 00000000003506f0 [ 474.346032][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.354077][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.362125][ C0] Call Trace: [ 474.365516][ C0] [ 474.368452][ C0] ? __skb_flow_dissect+0x407/0x6d50 [ 474.373877][ C0] ? mark_lock+0x94/0x320 [ 474.378283][ C0] ? mark_lock+0x94/0x320 [ 474.382696][ C0] ? mark_lock+0x94/0x320 [ 474.387089][ C0] ? hlock_conflict+0x59/0x1f0 [ 474.391939][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 474.397018][ C0] ? __bfs+0x27a/0x560 [ 474.401153][ C0] ? check_path+0x40/0x40 [ 474.405569][ C0] ? check_path+0x21/0x40 [ 474.409993][ C0] ? check_noncircular+0x189/0x330 [ 474.415203][ C0] ? add_chain_block+0x9b0/0x9b0 [ 474.420198][ C0] ? lockdep_lock+0xf1/0x1f0 [ 474.424869][ C0] ? lockdep_unlock+0x142/0x2e0 [ 474.429797][ C0] ? lockdep_lock+0x1f0/0x1f0 [ 474.434735][ C0] ? __lock_acquire+0x28d6/0x7c40 [ 474.439827][ C0] ? verify_lock_unused+0x140/0x140 [ 474.445117][ C0] ? verify_lock_unused+0x140/0x140 [ 474.450391][ C0] ? mark_lock+0x94/0x320 [ 474.454795][ C0] ___skb_get_hash+0x55/0x6e0 [ 474.459591][ C0] __skb_get_hash+0xd2/0x270 [ 474.464245][ C0] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 474.470054][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 474.476096][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 474.481407][ C0] nft_trace_init+0x1e0/0x430 [ 474.486215][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 474.491854][ C0] nft_do_chain+0x1612/0x16d0 [ 474.496590][ C0] ? hrtimer_interrupt+0x557/0x980 [ 474.501834][ C0] ? ktime_get+0x7b/0x270 [ 474.506217][ C0] ? ktime_get+0x7b/0x270 [ 474.510645][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 474.516589][ C0] ? mark_lock+0x94/0x320 [ 474.521083][ C0] nft_do_chain_inet+0x25c/0x340 [ 474.526115][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 474.531056][ C0] ? ipt_do_table+0x2c1/0x1580 [ 474.535951][ C0] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 474.541464][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 474.546371][ C0] nf_hook_slow+0xb9/0x200 [ 474.550908][ C0] ? nf_hook+0x390/0x390 [ 474.555279][ C0] nf_hook+0x224/0x390 [ 474.559416][ C0] ? nf_hook+0x9e/0x390 [ 474.563666][ C0] ? __ip_local_out+0x5d0/0x5d0 [ 474.568581][ C0] ? nf_hook+0x390/0x390 [ 474.572904][ C0] ? nf_ct_set_closing+0x1f/0x230 [ 474.577988][ C0] ? ip_fast_csum+0x1ea/0x2b0 [ 474.582826][ C0] __ip_local_out+0x49c/0x5d0 [ 474.587582][ C0] ? nf_hook+0x390/0x390 [ 474.591888][ C0] ip_local_out+0x26/0x120 [ 474.596385][ C0] nf_send_reset+0xea7/0x1690 [ 474.601193][ C0] ? skb_put_data+0x30/0x30 [ 474.605782][ C0] ? wq_worker_last_func+0x40/0x40 [ 474.611008][ C0] ? once_disable_jump+0x150/0x1a0 [ 474.616236][ C0] ? siphash_3u32+0x21/0x240 [ 474.620934][ C0] ? nft_trace_init+0x240/0x430 [ 474.625885][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 474.631487][ C0] nft_reject_inet_eval+0x3a9/0x680 [ 474.636881][ C0] nft_do_chain+0x4b2/0x16d0 [ 474.641543][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 474.647513][ C0] ? mark_lock+0x94/0x320 [ 474.651916][ C0] ? ipt_do_table+0x1371/0x1580 [ 474.656951][ C0] ? nf_nat_inet_fn+0x8c7/0xb30 [ 474.661913][ C0] nft_do_chain_inet+0x25c/0x340 [ 474.666913][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 474.671850][ C0] ? ipt_do_table+0x2c1/0x1580 [ 474.676672][ C0] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 474.682147][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 474.687063][ C0] nf_hook_slow+0xb9/0x200 [ 474.691569][ C0] ? nf_hook+0x390/0x390 [ 474.695865][ C0] nf_hook+0x224/0x390 [ 474.700291][ C0] ? nf_hook+0x9e/0x390 [ 474.704537][ C0] ? __ip_local_out+0x5d0/0x5d0 [ 474.709444][ C0] ? nf_hook+0x390/0x390 [ 474.713765][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 474.718892][ C0] __ip_local_out+0x49c/0x5d0 [ 474.723679][ C0] ? nf_hook+0x390/0x390 [ 474.728015][ C0] __ip_queue_xmit+0x1003/0x1c10 [ 474.733036][ C0] ? tcp_push_one+0xf0/0xf0 [ 474.737617][ C0] ? __ip_queue_xmit+0x59/0x1c10 [ 474.742616][ C0] __tcp_transmit_skb+0x1cc4/0x31e0 [ 474.747924][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 474.752823][ C0] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 474.759177][ C0] tcp_write_wakeup+0x817/0xd30 [ 474.764085][ C0] tcp_send_probe0+0x4c/0x520 [ 474.768853][ C0] tcp_write_timer+0x126/0x280 [ 474.773688][ C0] call_timer_fn+0x1ac/0x670 [ 474.778365][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 474.783613][ C0] ? call_timer_fn+0xcf/0x670 [ 474.788371][ C0] ? __run_timers+0x810/0x810 [ 474.793198][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 474.798476][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 474.803720][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 474.809092][ C0] __run_timers+0x56c/0x810 [ 474.813706][ C0] ? detach_timer+0x350/0x350 [ 474.818471][ C0] ? lock_chain_count+0x20/0x20 [ 474.823565][ C0] run_timer_softirq+0x63/0xf0 [ 474.828421][ C0] handle_softirqs+0x291/0x910 [ 474.833325][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 474.838229][ C0] ? do_softirq+0x210/0x210 [ 474.842804][ C0] ? hrtimer_interrupt+0x775/0x980 [ 474.848009][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 474.853354][ C0] __irq_exit_rcu+0x13b/0x230 [ 474.858165][ C0] ? irq_exit_rcu+0x20/0x20 [ 474.862850][ C0] irq_exit_rcu+0x5/0x20 [ 474.867173][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 474.872888][ C0] [ 474.875861][ C0] [ 474.879159][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 474.885358][ C0] RIP: 0010:default_idle+0xb/0x10 [ 474.890435][ C0] Code: 48 89 df e8 17 47 99 f7 e9 44 ff ff ff e8 fd 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 93 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 474.910123][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 474.916271][ C0] RAX: c7690326b8665000 RBX: ffffffff8a3a18b7 RCX: c7690326b8665000 [ 474.924291][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 474.932344][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 474.940395][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 474.948437][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 474.956466][ C0] ? default_idle_call+0x77/0xc0 [ 474.961499][ C0] default_idle_call+0x84/0xc0 [ 474.966310][ C0] do_idle+0x3a2/0x680 [ 474.970531][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 474.975801][ C0] ? schedule_idle+0x57/0x90 [ 474.980477][ C0] ? do_idle+0x667/0x680 [ 474.984789][ C0] cpu_startup_entry+0x3f/0x60 [ 474.989637][ C0] rest_init+0x2dc/0x300 [ 474.993929][ C0] ? time_init+0x33/0x33 [ 474.998300][ C0] arch_call_rest_init+0xa/0xa [ 475.003200][ C0] start_kernel+0x493/0x53c [ 475.007774][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 475.013821][ C0] [ 475.016888][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 475.024202][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 475.031255][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.041403][ C0] Call Trace: [ 475.044748][ C0] [ 475.047631][ C0] dump_stack_lvl+0x188/0x24e [ 475.052385][ C0] ? memcpy+0x3c/0x60 [ 475.056464][ C0] ? show_regs_print_info+0x12/0x12 [ 475.061715][ C0] ? load_image+0x410/0x410 [ 475.066306][ C0] panic+0x2d3/0x710 [ 475.070249][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 475.074799][ C0] ? secondary_startup_64_no_verify+0xcf/0xdb [ 475.080978][ C0] __warn+0x2f8/0x4f0 [ 475.085001][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 475.090436][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 475.095770][ C0] report_bug+0x2ba/0x4f0 [ 475.100155][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 475.105517][ C0] handle_bug+0x3a/0x70 [ 475.109725][ C0] exc_invalid_op+0x16/0x40 [ 475.114281][ C0] asm_exc_invalid_op+0x16/0x20 [ 475.119179][ C0] RIP: 0010:__skb_flow_dissect+0xade/0x6d50 [ 475.125126][ C0] Code: c6 e8 f6 22 4f f9 85 db 0f 84 5b 06 00 00 80 3d 72 7e d9 05 01 0f 85 81 06 00 00 e8 7c 1f 4f f9 e9 e7 f9 ff ff e8 72 1f 4f f9 <0f> 0b e8 6b 0f fd 01 89 c3 31 ff 89 c6 e8 c0 22 4f f9 85 db 74 18 [ 475.144773][ C0] RSP: 0018:ffffc900000060a0 EFLAGS: 00010246 [ 475.150883][ C0] RAX: ffffffff88330eae RBX: 0000000000000000 RCX: ffffffff8c8bc740 [ 475.158893][ C0] RDX: 0000000000000100 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 475.166902][ C0] RBP: ffffc90000006668 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 475.174922][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: ffffffff8e217c3c [ 475.182938][ C0] R13: 1ffffffff1c42f88 R14: ffffffff8e217c42 R15: dffffc0000000000 [ 475.191085][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 475.196452][ C0] ? __skb_flow_dissect+0x407/0x6d50 [ 475.201808][ C0] ? mark_lock+0x94/0x320 [ 475.206224][ C0] ? mark_lock+0x94/0x320 [ 475.210625][ C0] ? mark_lock+0x94/0x320 [ 475.215013][ C0] ? hlock_conflict+0x59/0x1f0 [ 475.219851][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 475.224938][ C0] ? __bfs+0x27a/0x560 [ 475.229071][ C0] ? check_path+0x40/0x40 [ 475.233475][ C0] ? check_path+0x21/0x40 [ 475.237895][ C0] ? check_noncircular+0x189/0x330 [ 475.243083][ C0] ? add_chain_block+0x9b0/0x9b0 [ 475.248088][ C0] ? lockdep_lock+0xf1/0x1f0 [ 475.252735][ C0] ? lockdep_unlock+0x142/0x2e0 [ 475.257645][ C0] ? lockdep_lock+0x1f0/0x1f0 [ 475.262389][ C0] ? __lock_acquire+0x28d6/0x7c40 [ 475.267494][ C0] ? verify_lock_unused+0x140/0x140 [ 475.272769][ C0] ? verify_lock_unused+0x140/0x140 [ 475.278082][ C0] ? mark_lock+0x94/0x320 [ 475.282533][ C0] ___skb_get_hash+0x55/0x6e0 [ 475.287461][ C0] __skb_get_hash+0xd2/0x270 [ 475.292133][ C0] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 475.297927][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 475.303897][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 475.309199][ C0] nft_trace_init+0x1e0/0x430 [ 475.313965][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 475.319607][ C0] nft_do_chain+0x1612/0x16d0 [ 475.324359][ C0] ? hrtimer_interrupt+0x557/0x980 [ 475.329535][ C0] ? ktime_get+0x7b/0x270 [ 475.334023][ C0] ? ktime_get+0x7b/0x270 [ 475.338438][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 475.344394][ C0] ? mark_lock+0x94/0x320 [ 475.348858][ C0] nft_do_chain_inet+0x25c/0x340 [ 475.353854][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 475.358796][ C0] ? ipt_do_table+0x2c1/0x1580 [ 475.363626][ C0] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 475.369066][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 475.373979][ C0] nf_hook_slow+0xb9/0x200 [ 475.378450][ C0] ? nf_hook+0x390/0x390 [ 475.382751][ C0] nf_hook+0x224/0x390 [ 475.386880][ C0] ? nf_hook+0x9e/0x390 [ 475.391183][ C0] ? __ip_local_out+0x5d0/0x5d0 [ 475.396088][ C0] ? nf_hook+0x390/0x390 [ 475.400412][ C0] ? nf_ct_set_closing+0x1f/0x230 [ 475.405489][ C0] ? ip_fast_csum+0x1ea/0x2b0 [ 475.410236][ C0] __ip_local_out+0x49c/0x5d0 [ 475.414961][ C0] ? nf_hook+0x390/0x390 [ 475.419253][ C0] ip_local_out+0x26/0x120 [ 475.423716][ C0] nf_send_reset+0xea7/0x1690 [ 475.428468][ C0] ? skb_put_data+0x30/0x30 [ 475.433024][ C0] ? wq_worker_last_func+0x40/0x40 [ 475.438189][ C0] ? once_disable_jump+0x150/0x1a0 [ 475.443351][ C0] ? siphash_3u32+0x21/0x240 [ 475.448031][ C0] ? nft_trace_init+0x240/0x430 [ 475.452942][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 475.458555][ C0] nft_reject_inet_eval+0x3a9/0x680 [ 475.463810][ C0] nft_do_chain+0x4b2/0x16d0 [ 475.468481][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 475.474432][ C0] ? mark_lock+0x94/0x320 [ 475.478849][ C0] ? ipt_do_table+0x1371/0x1580 [ 475.483811][ C0] ? nf_nat_inet_fn+0x8c7/0xb30 [ 475.488758][ C0] nft_do_chain_inet+0x25c/0x340 [ 475.493748][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 475.498747][ C0] ? ipt_do_table+0x2c1/0x1580 [ 475.503562][ C0] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 475.508988][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 475.513933][ C0] nf_hook_slow+0xb9/0x200 [ 475.518400][ C0] ? nf_hook+0x390/0x390 [ 475.522724][ C0] nf_hook+0x224/0x390 [ 475.526842][ C0] ? nf_hook+0x9e/0x390 [ 475.531070][ C0] ? __ip_local_out+0x5d0/0x5d0 [ 475.536862][ C0] ? nf_hook+0x390/0x390 [ 475.541169][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 475.546280][ C0] __ip_local_out+0x49c/0x5d0 [ 475.551031][ C0] ? nf_hook+0x390/0x390 [ 475.555436][ C0] __ip_queue_xmit+0x1003/0x1c10 [ 475.560438][ C0] ? tcp_push_one+0xf0/0xf0 [ 475.565001][ C0] ? __ip_queue_xmit+0x59/0x1c10 [ 475.570024][ C0] __tcp_transmit_skb+0x1cc4/0x31e0 [ 475.575327][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 475.580245][ C0] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 475.586584][ C0] tcp_write_wakeup+0x817/0xd30 [ 475.592212][ C0] tcp_send_probe0+0x4c/0x520 [ 475.596962][ C0] tcp_write_timer+0x126/0x280 [ 475.601925][ C0] call_timer_fn+0x1ac/0x670 [ 475.606579][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 475.611847][ C0] ? call_timer_fn+0xcf/0x670 [ 475.616596][ C0] ? __run_timers+0x810/0x810 [ 475.621348][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 475.626614][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 475.632316][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 475.637576][ C0] __run_timers+0x56c/0x810 [ 475.642149][ C0] ? detach_timer+0x350/0x350 [ 475.646882][ C0] ? lock_chain_count+0x20/0x20 [ 475.651829][ C0] run_timer_softirq+0x63/0xf0 [ 475.656646][ C0] handle_softirqs+0x291/0x910 [ 475.661466][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 475.666377][ C0] ? do_softirq+0x210/0x210 [ 475.670925][ C0] ? hrtimer_interrupt+0x775/0x980 [ 475.676098][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 475.681347][ C0] __irq_exit_rcu+0x13b/0x230 [ 475.686071][ C0] ? irq_exit_rcu+0x20/0x20 [ 475.690635][ C0] irq_exit_rcu+0x5/0x20 [ 475.694916][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 475.700600][ C0] [ 475.703570][ C0] [ 475.706574][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 475.712659][ C0] RIP: 0010:default_idle+0xb/0x10 [ 475.717744][ C0] Code: 48 89 df e8 17 47 99 f7 e9 44 ff ff ff e8 fd 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 93 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 475.737578][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 475.743696][ C0] RAX: c7690326b8665000 RBX: ffffffff8a3a18b7 RCX: c7690326b8665000 [ 475.751708][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 475.759717][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 475.767735][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 475.775753][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 475.783774][ C0] ? default_idle_call+0x77/0xc0 [ 475.788768][ C0] default_idle_call+0x84/0xc0 [ 475.793573][ C0] do_idle+0x3a2/0x680 [ 475.797701][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 475.803000][ C0] ? schedule_idle+0x57/0x90 [ 475.807664][ C0] ? do_idle+0x667/0x680 [ 475.811968][ C0] cpu_startup_entry+0x3f/0x60 [ 475.816794][ C0] rest_init+0x2dc/0x300 [ 475.821090][ C0] ? time_init+0x33/0x33 [ 475.825393][ C0] arch_call_rest_init+0xa/0xa [ 475.830215][ C0] start_kernel+0x493/0x53c [ 475.834791][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 475.840748][ C0] [ 475.844391][ C0] Kernel Offset: disabled [ 475.848836][ C0] Rebooting in 86400 seconds..