last executing test programs: 4m44.978719481s ago: executing program 2 (id=64): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x84, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_bpf={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 4m44.924460534s ago: executing program 2 (id=68): socket$kcm(0x10, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) 4m44.897811115s ago: executing program 2 (id=69): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) 4m44.808061551s ago: executing program 2 (id=70): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 4m44.689008648s ago: executing program 2 (id=71): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 4m40.690169772s ago: executing program 2 (id=74): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close(0x4) 4m25.501822674s ago: executing program 32 (id=74): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close(0x4) 7.65854312s ago: executing program 5 (id=934): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r3, &(0x7f0000000000)=':', 0x1, 0x4fed0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 6.719678725s ago: executing program 5 (id=937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 6.551219075s ago: executing program 3 (id=940): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a3", 0x5, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x400010f0, 0x0, 0x0) 5.732012053s ago: executing program 5 (id=942): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061182b000000000095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0xfffffd15, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 5.731396483s ago: executing program 0 (id=944): socket$netlink(0x10, 0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(r0, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) 5.667248977s ago: executing program 0 (id=945): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) 4.987897907s ago: executing program 5 (id=947): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7ffffbff}]}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, r0, 0x0) 4.93572206s ago: executing program 3 (id=948): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061182b000000000095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffd15, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 4.860187114s ago: executing program 5 (id=949): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6e09, 0x0, 0x0}], 0x2}) 4.740063021s ago: executing program 0 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4.224175472s ago: executing program 4 (id=952): socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = dup(r0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 3.90872125s ago: executing program 3 (id=953): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 3.343990353s ago: executing program 1 (id=954): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 3.340742443s ago: executing program 3 (id=955): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 3.291379517s ago: executing program 1 (id=956): syz_emit_ethernet(0x4e, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "efdf22", 0x18, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2f, 0x0, 0x4, 0x0, 0x11, 0x8, 0x6}], {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}}}}}}}}, 0x0) 3.282496897s ago: executing program 4 (id=957): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x10, 0x7fff0000}]}) shmdt(0x0) 3.280948227s ago: executing program 0 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 3.200196681s ago: executing program 1 (id=959): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) 3.170160504s ago: executing program 3 (id=960): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) 3.148416635s ago: executing program 4 (id=961): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.080166159s ago: executing program 0 (id=962): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6(0xa, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9) 3.079830038s ago: executing program 1 (id=963): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061182b000000000095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffd15, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 2.499280773s ago: executing program 1 (id=964): memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 2.488698624s ago: executing program 4 (id=965): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 2.264459087s ago: executing program 3 (id=966): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 162.26583ms ago: executing program 0 (id=967): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0x3, 0x4) 149.105131ms ago: executing program 1 (id=968): socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = dup(r0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 130.914571ms ago: executing program 5 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 130.182262ms ago: executing program 4 (id=970): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) getpgid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=971): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4866, 0x0, 0xb, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 49.075683][ T4172] cgroup: Unknown subsys name 'net' [ 49.208976][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.440078][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.824739][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.868310][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.927495][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 51.941359][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.951718][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.959864][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.968022][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.001578][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.008818][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.016927][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.034514][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 52.092617][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.118424][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.153599][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.160667][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.168734][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.176444][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.183954][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.191765][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.220708][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.227922][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.236141][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.243817][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.250869][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.259257][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.266193][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.273770][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.281478][ T4196] device bridge_slave_0 entered promiscuous mode [ 52.291002][ T4186] team0: Port device team_slave_0 added [ 52.297352][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.304502][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.312131][ T4195] device bridge_slave_0 entered promiscuous mode [ 52.326727][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.334116][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.341743][ T4195] device bridge_slave_1 entered promiscuous mode [ 52.355357][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.362415][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.370713][ T4196] device bridge_slave_1 entered promiscuous mode [ 52.379291][ T4186] team0: Port device team_slave_1 added [ 52.427594][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.438653][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.449894][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.460676][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.471523][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.489615][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.511542][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.522248][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.532134][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.539247][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.565546][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.589959][ T4193] team0: Port device team_slave_0 added [ 52.609050][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.616389][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.642770][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.655855][ T4195] team0: Port device team_slave_0 added [ 52.664337][ T4193] team0: Port device team_slave_1 added [ 52.684390][ T4195] team0: Port device team_slave_1 added [ 52.697468][ T4196] team0: Port device team_slave_0 added [ 52.705565][ T4185] team0: Port device team_slave_0 added [ 52.712647][ T4196] team0: Port device team_slave_1 added [ 52.744545][ T4185] team0: Port device team_slave_1 added [ 52.755613][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.762582][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.788806][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.800393][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.807568][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.833693][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.846007][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.852947][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.880139][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.906860][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.913933][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.940313][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.970128][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.977546][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.991692][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.999193][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.025603][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.059351][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.066698][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.092766][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.104892][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.111846][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.138034][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.156173][ T4195] device hsr_slave_0 entered promiscuous mode [ 53.163908][ T4195] device hsr_slave_1 entered promiscuous mode [ 53.170679][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.178547][ T4195] Cannot create hsr debugfs directory [ 53.188848][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.196199][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.222242][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.274632][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.281342][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.288372][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.296268][ T4193] Cannot create hsr debugfs directory [ 53.314436][ T4196] device hsr_slave_0 entered promiscuous mode [ 53.321393][ T4196] device hsr_slave_1 entered promiscuous mode [ 53.327932][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.335646][ T4196] Cannot create hsr debugfs directory [ 53.388731][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.396273][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.402801][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.410450][ T4185] Cannot create hsr debugfs directory [ 53.514468][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 53.522385][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 53.593441][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 53.604570][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 53.610653][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.678151][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.690559][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.699864][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.712498][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.771229][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.779933][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.801218][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.809773][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.850186][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.871458][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.891983][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.901206][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.923741][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.933149][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.952765][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.960631][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.979366][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.022259][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.037241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.046615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.088529][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.097965][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.107643][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.115003][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.125653][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.137453][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.154879][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.164073][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.174133][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.182245][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.191534][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.201833][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.209056][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.217328][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.246898][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.265983][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.276520][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.286955][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.298003][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.325037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.333042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.342075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.352458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.372295][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.385753][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.401829][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.426662][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.435898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.445187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.454800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.462453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.477713][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.489566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.498993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.507642][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.514748][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.524612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.532324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.540759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.550407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.559188][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.566273][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.574950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.583910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.592266][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.599362][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.616747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.625438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.634012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.642540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.660792][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.669784][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.678526][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.686078][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.694946][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.704165][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.727338][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.754854][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.762927][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.772902][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.785051][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.792115][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.801055][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.810003][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.818753][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.828517][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.837873][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.847497][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.856453][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.865134][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.873892][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.882449][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.891132][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.898237][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.906281][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.915189][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.923748][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.932231][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.941743][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.951051][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.960907][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.969427][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.977944][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.986254][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.995982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.004636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.025681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.041767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.056477][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.089946][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.098346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.109257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.119380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.145553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.175574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.193814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.204812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.230457][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.242051][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.258912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.272458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.289368][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.308943][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.321496][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.336622][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.361612][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.378942][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.397369][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.408849][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.438482][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.451382][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.479213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.489088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.501425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.511709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.527754][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.535045][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.543632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.552180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.560752][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.567928][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.576459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.585832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.593915][ T2240] Bluetooth: hci1: command 0x041b tx timeout [ 55.594022][ T2240] Bluetooth: hci0: command 0x041b tx timeout [ 55.608289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.630640][ T4186] device veth0_vlan entered promiscuous mode [ 55.642965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.653131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.662165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.673860][ T2240] Bluetooth: hci2: command 0x041b tx timeout [ 55.679964][ T2240] Bluetooth: hci4: command 0x041b tx timeout [ 55.688911][ T2240] Bluetooth: hci3: command 0x041b tx timeout [ 55.710103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.718534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.728537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.737945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.748843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.758133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.767280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.776286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.784743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.793198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.803533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.812230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.820031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.828570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.840854][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.856800][ T4185] device veth0_vlan entered promiscuous mode [ 55.868721][ T4186] device veth1_vlan entered promiscuous mode [ 55.879467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.888930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.897631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.908010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.916974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.925740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.935048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.943797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.951552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.982834][ T4185] device veth1_vlan entered promiscuous mode [ 55.991381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.003247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.011298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.020978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.033683][ T4186] device veth0_macvtap entered promiscuous mode [ 56.042677][ T4186] device veth1_macvtap entered promiscuous mode [ 56.083202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.099066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.109057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.123884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.143094][ T4185] device veth0_macvtap entered promiscuous mode [ 56.157022][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.169891][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.178781][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.199725][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.215982][ T4185] device veth1_macvtap entered promiscuous mode [ 56.226442][ T4195] device veth0_vlan entered promiscuous mode [ 56.234459][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.243173][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.257663][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.266934][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.276193][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.294846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.303472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.315079][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.331748][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.341532][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.350822][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.359791][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.375923][ T4193] device veth0_vlan entered promiscuous mode [ 56.388355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.396677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.407405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.417011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.426896][ T4195] device veth1_vlan entered promiscuous mode [ 56.454587][ T4193] device veth1_vlan entered promiscuous mode [ 56.464490][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.478407][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.490125][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.513105][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.525571][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.534962][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.543755][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.552273][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.569061][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.580341][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.591241][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.602835][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.632181][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.642253][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.652911][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.663259][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.676060][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.689287][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.698074][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.705903][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.715625][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.742318][ T4193] device veth0_macvtap entered promiscuous mode [ 56.761451][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.777036][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.789003][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.808081][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.821329][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.834871][ T4195] device veth0_macvtap entered promiscuous mode [ 56.855008][ T4195] device veth1_macvtap entered promiscuous mode [ 56.864572][ T4193] device veth1_macvtap entered promiscuous mode [ 56.901638][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.928420][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.946269][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.956447][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.965579][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.974483][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.006571][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.017328][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.027487][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.038919][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.052241][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.062046][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.072851][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.083463][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.094963][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.106652][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.123201][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.137350][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.146703][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.156720][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.171299][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.182870][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.193513][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.204961][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.215187][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.226103][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.237696][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.260903][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.270483][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.278430][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.278502][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.278524][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.297433][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.311160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.330106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.339759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.348710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.360557][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.371653][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.382017][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.393672][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.403674][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.414257][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.425675][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.438900][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.447790][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.456826][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.465805][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.483595][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.498044][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.527718][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.559051][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.581056][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.590136][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.599194][ T4196] device veth0_vlan entered promiscuous mode [ 57.610158][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.618676][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.626983][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.637620][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.646520][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.654501][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.678379][ T4187] Bluetooth: hci0: command 0x040f tx timeout [ 57.688665][ T4196] device veth1_vlan entered promiscuous mode [ 57.703963][ T4187] Bluetooth: hci1: command 0x040f tx timeout [ 57.755293][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 57.870468][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 57.877036][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 57.985473][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.014258][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.713283][ C0] sched: RT throttling activated [ 59.722387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.751197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.753515][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 59.821458][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 59.851717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.862153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.876890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.891316][ T4196] device veth0_macvtap entered promiscuous mode [ 59.920936][ T4299] Bluetooth: hci2: command 0x0419 tx timeout [ 59.927904][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.949976][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.960172][ T4196] device veth1_macvtap entered promiscuous mode [ 59.968973][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 60.006957][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.023171][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.039599][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.050832][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.066531][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.079932][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.097607][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.110701][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.127994][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.141520][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.159721][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.170335][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.187030][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.199373][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.217233][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.229709][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.247274][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.261271][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.278761][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.290902][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.302689][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.319006][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.538242][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 60.549616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.564098][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.568863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.580288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.583196][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.590107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.606797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.620492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.629371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.738399][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.752594][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.768154][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.782664][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.815652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.828066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.914467][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.939338][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.951531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.080117][ T4253] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.354291][ T4253] usb 1-1: Using ep0 maxpacket: 16 [ 61.483857][ T4253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.536792][ T4253] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 61.583803][ T4253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 61.650917][ T4253] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 61.824337][ T4253] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.847589][ T4253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.899396][ T4253] usb 1-1: SerialNumber: syz [ 62.050196][ T4253] cdc_acm 1-1:1.0: skipping garbage [ 62.115134][ T4253] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 62.333703][ T4290] usb 1-1: USB disconnect, device number 2 [ 63.366656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 64.800371][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 64.902723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.005144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.107552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.722074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.824480][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.834161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 65.843090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 65.926894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.815532][ T4407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.39'. [ 66.908610][ T4407] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 69.135625][ T4290] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.245874][ T26] audit: type=1326 audit(1769133971.694:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 69.293535][ T26] audit: type=1326 audit(1769133971.694:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 69.311888][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 69.359217][ T4455] netlink: 'syz.1.54': attribute type 5 has an invalid length. [ 69.375855][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'. [ 69.394484][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 69.398993][ T26] audit: type=1326 audit(1769133971.694:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 69.412305][ T4458] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 69.469136][ T4455] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 8192 - 0 [ 69.498912][ T4455] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 8192 - 0 [ 69.513740][ T4290] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.517217][ T4455] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 8192 - 0 [ 69.532622][ T4290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.545735][ T4290] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.562960][ T4455] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 8192 - 0 [ 69.574438][ T4455] device geneve2 entered promiscuous mode [ 69.600207][ T4455] Zero length message leads to an empty skb [ 69.700314][ T4290] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.850143][ T4290] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.024788][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.231762][ T4290] usb 5-1: Product: syz [ 70.314454][ T4290] usb 5-1: Manufacturer: syz [ 70.456536][ T4290] cdc_wdm 5-1:1.0: skipping garbage [ 70.502387][ T4290] cdc_wdm 5-1:1.0: skipping garbage [ 70.548305][ T4290] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 70.572515][ T4290] cdc_wdm 5-1:1.0: Unknown control protocol [ 70.911623][ T4246] usb 5-1: USB disconnect, device number 2 [ 71.357755][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364366][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.121662][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 75.141894][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 75.167132][ T4518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'. [ 75.413672][ T4524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.439906][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 75.465413][ T4518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'. [ 75.488094][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 75.735185][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 75.831146][ T4532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.82'. [ 75.890641][ T4537] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 76.111361][ T4543] netlink: 428 bytes leftover after parsing attributes in process `syz.3.88'. [ 76.161493][ T4543] netlink: 104 bytes leftover after parsing attributes in process `syz.3.88'. [ 76.482576][ T23] cfg80211: failed to load regulatory.db [ 77.374154][ T4560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.403417][ T4246] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.673428][ T4246] usb 1-1: Using ep0 maxpacket: 16 [ 78.709189][ T4246] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 78.718552][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.743435][ T4246] usb 1-1: Product: syz [ 78.747633][ T4246] usb 1-1: Manufacturer: syz [ 78.752241][ T4246] usb 1-1: SerialNumber: syz [ 78.775602][ T4246] usb 1-1: config 0 descriptor?? [ 79.065108][ T4246] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 79.108244][ T4246] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 80.154772][ T4246] usb 1-1: USB disconnect, device number 3 [ 80.342194][ T4601] __nla_validate_parse: 1 callbacks suppressed [ 80.342211][ T4601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.105'. [ 80.422028][ T4606] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 80.443811][ T26] audit: type=1326 audit(1769133982.894:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 80.550458][ T26] audit: type=1326 audit(1769133982.894:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 80.648664][ T26] audit: type=1326 audit(1769133982.894:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 81.952105][ T4615] loop0: detected capacity change from 0 to 262144 [ 81.993316][ T26] audit: type=1326 audit(1769133982.894:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 82.064942][ T4615] ======================================================= [ 82.064942][ T4615] WARNING: The mand mount option has been deprecated and [ 82.064942][ T4615] and is ignored by this kernel. Remove the mand [ 82.064942][ T4615] option from the mount to silence this warning. [ 82.064942][ T4615] ======================================================= [ 82.100377][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.113479][ T4615] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.111 (4615) [ 82.130370][ T4621] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 82.157317][ T26] audit: type=1326 audit(1769133982.894:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 82.207974][ T4615] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 82.218292][ T4615] BTRFS info (device loop0): using free space tree [ 82.224920][ T4615] BTRFS info (device loop0): has skinny extents [ 82.231197][ T4615] BTRFS info (device loop0): flagging fs with big metadata feature [ 82.272510][ T26] audit: type=1326 audit(1769133982.894:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 82.656678][ T26] audit: type=1326 audit(1769133982.894:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 82.678777][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.856477][ T26] audit: type=1326 audit(1769133982.894:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 84.878766][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.937781][ T26] audit: type=1326 audit(1769133982.894:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 84.959870][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.092252][ T26] audit: type=1326 audit(1769133982.894:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 85.161787][ T4615] BTRFS error (device loop0): open_ctree failed: -12 [ 85.307424][ T4175] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by udevd (4175) [ 85.924453][ T26] audit: type=1326 audit(1769133982.894:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 86.013340][ T26] audit: type=1326 audit(1769133982.894:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 86.125375][ T26] audit: type=1326 audit(1769133982.894:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 86.201231][ T4685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.126'. [ 86.245661][ T26] audit: type=1326 audit(1769133982.894:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 86.277446][ T4685] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 86.367584][ T26] audit: type=1326 audit(1769133982.894:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 86.463464][ T26] audit: type=1326 audit(1769133982.894:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 86.609208][ T26] audit: type=1326 audit(1769133982.894:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 86.776710][ T26] audit: type=1326 audit(1769133982.894:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 87.007701][ T4700] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.211784][ T26] audit: type=1326 audit(1769133982.894:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 87.543057][ T26] audit: type=1800 audit(1769133989.094:24): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.124" name="bus" dev="ramfs" ino=34208 res=0 errno=0 [ 89.559099][ T4716] loop1: detected capacity change from 0 to 262144 [ 89.636582][ T4745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.144'. [ 89.651097][ T4716] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 89.661329][ T4716] BTRFS info (device loop1): using free space tree [ 89.667920][ T4716] BTRFS info (device loop1): has skinny extents [ 89.674265][ T4716] BTRFS info (device loop1): flagging fs with big metadata feature [ 89.710840][ T4745] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 89.929870][ T4580] BTRFS warning (device loop1): checksum verify failed on 30654464 wanted 0x6191332ca3bfabbd found 0x1eb22ab8dd59a02d level 0 [ 90.046622][ T4770] fuse: Unknown parameter 'user_id00000000000000000000' [ 90.071638][ T4716] BTRFS info (device loop1): read error corrected: ino 0 off 30654464 (dev /dev/loop1 sector 76256) [ 90.084520][ T4716] BTRFS info (device loop1): read error corrected: ino 0 off 30658560 (dev /dev/loop1 sector 76264) [ 90.096728][ T4716] BTRFS info (device loop1): read error corrected: ino 0 off 30662656 (dev /dev/loop1 sector 76272) [ 90.108140][ T4716] BTRFS info (device loop1): read error corrected: ino 0 off 30666752 (dev /dev/loop1 sector 76280) [ 90.583837][ T4716] BTRFS info (device loop1): enabling ssd optimizations [ 91.984989][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 92.315126][ T4789] chnl_net:caif_netlink_parms(): no params data found [ 92.704337][ T4808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.157'. [ 93.400376][ T4808] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 93.518717][ T4299] Bluetooth: hci5: command 0x0409 tx timeout [ 93.551799][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.633374][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.693366][ T4789] device bridge_slave_0 entered promiscuous mode [ 93.732245][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.779940][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.834359][ T4789] device bridge_slave_1 entered promiscuous mode [ 93.923087][ T4822] fuse: Bad value for 'fd' [ 94.759238][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.781843][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.615857][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 95.724369][ T4789] team0: Port device team_slave_0 added [ 95.757034][ T4789] team0: Port device team_slave_1 added [ 95.913663][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.923357][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.963488][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.025192][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.047020][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.175714][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.255653][ T4853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 97.452325][ T4853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 97.610419][ T4789] device hsr_slave_0 entered promiscuous mode [ 97.683499][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 97.798251][ T4789] device hsr_slave_1 entered promiscuous mode [ 97.965028][ T4789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.122345][ T4789] Cannot create hsr debugfs directory [ 98.233741][ T4859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 99.763387][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 99.936761][ T4789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.987505][ T4789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.027899][ T4789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.054591][ T4789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.191292][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 103.821194][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.887670][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.933769][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.953660][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.012327][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.114580][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.163924][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.171041][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.249438][ T4941] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 104.335479][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.887234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.013995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.054018][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.061143][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.099593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.154429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.191152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.232168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.281952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.310594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.341859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.436807][ T4353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.530319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.581532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.628310][ T4789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.657014][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.690682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.711720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.813760][ T4353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.839706][ T4955] fuse: Bad value for 'fd' [ 105.857089][ T4954] netlink: 64 bytes leftover after parsing attributes in process `syz.3.192'. [ 106.356508][ T4353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.747732][ T26] audit: type=1800 audit(1769134009.194:25): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.196" name="bus" dev="ramfs" ino=34786 res=0 errno=0 [ 106.816580][ T4353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.297690][ T4977] syz.0.205 sent an empty control message without MSG_MORE. [ 108.906155][ T4980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.206'. [ 108.923852][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.931609][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.986001][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.004946][ T4980] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 109.044940][ T4984] syz.1.208 uses obsolete (PF_INET,SOCK_PACKET) [ 110.976958][ T5011] netlink: 316 bytes leftover after parsing attributes in process `syz.4.213'. [ 112.062361][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.101706][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.156364][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.179407][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.329653][ T4789] device veth0_vlan entered promiscuous mode [ 112.359269][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.374100][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.456933][ T4789] device veth1_vlan entered promiscuous mode [ 112.543456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.551766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.623647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.670359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.692144][ T4789] device veth0_macvtap entered promiscuous mode [ 112.756483][ T4789] device veth1_macvtap entered promiscuous mode [ 112.826578][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.883524][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.931435][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.961711][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.003154][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.042917][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.110431][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.131701][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.210772][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.266942][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.321704][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.349255][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.358623][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.378798][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.409305][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.475150][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.503289][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.543568][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.623332][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.669439][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.713930][ T5064] netlink: 'syz.1.218': attribute type 25 has an invalid length. [ 113.733317][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.756465][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.767373][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.778328][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.789814][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.801565][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.815819][ T4789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.827530][ T4789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.838051][ T4789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.847301][ T4789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.943050][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.680277][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.796411][ T5071] tipc: Enabling of bearer rejected, failed to enable media [ 116.120104][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.150915][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.209154][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.288411][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.384486][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.730986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.992638][ T4353] device hsr_slave_0 left promiscuous mode [ 119.120244][ T4353] device hsr_slave_1 left promiscuous mode [ 119.229155][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.240291][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.280754][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.432972][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.441338][ T4353] device bridge_slave_1 left promiscuous mode [ 119.449316][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.486493][ T4353] device bridge_slave_0 left promiscuous mode [ 119.492861][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.262641][ T4353] device veth1_macvtap left promiscuous mode [ 120.282966][ T4353] device veth0_macvtap left promiscuous mode [ 120.303930][ T4353] device veth1_vlan left promiscuous mode [ 120.309977][ T4353] device veth0_vlan left promiscuous mode [ 120.529285][ T4670] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.574144][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 120.597948][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 120.625102][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.644311][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.742665][ T4353] bond0 (unregistering): Released all slaves [ 120.773385][ T4670] usb 5-1: Using ep0 maxpacket: 16 [ 120.827579][ T5137] tipc: Enabling of bearer rejected, failed to enable media [ 120.893716][ T4670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.927303][ T4670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.977529][ T4670] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.009459][ T5158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.244'. [ 121.029293][ T4670] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 121.048713][ T5158] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 121.078667][ T4670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.109828][ T4670] usb 5-1: config 0 descriptor?? [ 123.953883][ T4670] usbhid 5-1:0.0: can't add hid device: -71 [ 123.971858][ T4670] usbhid: probe of 5-1:0.0 failed with error -71 [ 126.216148][ T4670] usb 5-1: USB disconnect, device number 3 [ 127.215736][ T5195] tipc: Enabling of bearer rejected, failed to enable media [ 127.721738][ T7] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 128.143844][ T7] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 128.229106][ T7] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.614132][ T7] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 128.783448][ T7] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 128.790890][ T7] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.811305][ T5233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.261'. [ 128.823423][ T7] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 128.841002][ T5237] comedi comedi3: pcl818: I/O port conflict (0x81,16) [ 128.881099][ T5232] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.959873][ T5241] IPVS: ip_vs_add_dest(): server weight less than zero [ 129.313674][ T7] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 129.336629][ T7] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.664057][ T7] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 130.106679][ T7] usb 6-1: string descriptor 0 read error: -22 [ 130.874102][ T7] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 130.883337][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.943511][ T7] usb 6-1: can't set config #168, error -71 [ 130.952533][ T7] usb 6-1: USB disconnect, device number 2 [ 131.230765][ T5274] loop0: detected capacity change from 0 to 512 [ 131.345214][ T5274] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.402355][ T5274] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.484141][ T5274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.520279][ T5274] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 132.583459][ T5287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.276'. [ 132.709289][ T5287] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 132.813761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943951][ T5299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.272'. [ 134.236239][ T5306] loop5: detected capacity change from 0 to 7 [ 134.325286][ T5306] Dev loop5: unable to read RDB block 7 [ 134.345313][ T5306] loop5: unable to read partition table [ 134.376861][ T5306] loop5: partition table beyond EOD, truncated [ 134.995159][ T5306] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.488958][ T5342] loop1: detected capacity change from 0 to 512 [ 139.569068][ T5342] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.577019][ T5357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.295'. [ 139.590675][ T5342] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.638586][ T5342] EXT4-fs (loop1): can't mount with commit=1, fs mounted w/o journal [ 141.706886][ T5368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.292'. [ 150.185518][ T5434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.312'. [ 150.216999][ T5434] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 150.295213][ T5437] tipc: Enabling of bearer rejected, failed to enable media [ 150.744212][ T5460] fuse: Unknown parameter '00000000000000000003' [ 156.257198][ T5506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'. [ 156.318577][ T5506] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 156.519549][ T5515] tipc: Enabling of bearer rejected, failed to enable media [ 157.598122][ T5536] fuse: Unknown parameter '18446744073709551615' [ 159.891153][ T5574] loop3: detected capacity change from 0 to 512 [ 159.937580][ T5574] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.971332][ T5574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.012054][ T5574] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 160.203463][ T4792] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 160.409003][ T5584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.343'. [ 161.173478][ T4792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 161.236461][ T4792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.366972][ T4792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 161.437470][ T4792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 161.535874][ T5606] fuse: Unknown parameter '00000000000000000003' [ 161.683486][ T4792] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 161.696839][ T4792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.716647][ T4792] usb 2-1: Product: syz [ 161.734615][ T4792] usb 2-1: Manufacturer: syz [ 161.759312][ T4792] usb 2-1: SerialNumber: syz [ 162.277608][ T4792] usb 2-1: config 0 descriptor?? [ 162.547487][ T4792] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 163.746973][ T4792] usb 2-1: USB disconnect, device number 2 [ 164.326905][ T5623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'. [ 164.328650][ T5629] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 164.443757][ T5627] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 164.827782][ T5643] loop0: detected capacity change from 0 to 512 [ 164.960343][ T5643] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.045687][ T5643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.133889][ T5643] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 165.515485][ T5654] tipc: Enabling of bearer rejected, failed to enable media [ 165.934854][ T5667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.356'. [ 168.765644][ T5679] fuse: Unknown parameter '00000000000000000003' [ 170.732291][ T5693] netlink: 36 bytes leftover after parsing attributes in process `syz.5.366'. [ 171.719793][ T5693] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 171.848972][ T5705] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 172.759525][ T5736] loop4: detected capacity change from 0 to 512 [ 172.931803][ T5736] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.268469][ T5736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.480682][ T5738] tipc: Enabling of bearer rejected, failed to enable media [ 173.906848][ T5736] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 174.157901][ T5751] netlink: 132 bytes leftover after parsing attributes in process `syz.4.373'. [ 175.833444][ T4793] Bluetooth: hci1: command 0x0406 tx timeout [ 175.839654][ T4793] Bluetooth: hci3: command 0x0406 tx timeout [ 175.867140][ T4793] Bluetooth: hci4: command 0x0406 tx timeout [ 175.884711][ T4793] Bluetooth: hci0: command 0x0406 tx timeout [ 176.571041][ T5760] fuse: Unknown parameter '00000000000000000003' [ 178.024312][ T5774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.382'. [ 178.033829][ T5767] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 178.037138][ T5774] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 179.403648][ T5793] loop3: detected capacity change from 0 to 512 [ 179.503054][ T5793] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.525640][ T5793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.683038][ T5793] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 180.725446][ T5811] tipc: Enabling of bearer rejected, failed to enable media [ 180.955457][ T5819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.388'. [ 182.234013][ T5838] fuse: Unknown parameter '00000000000000000003' [ 182.310589][ T5844] netlink: 36 bytes leftover after parsing attributes in process `syz.5.397'. [ 182.450260][ T5844] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 186.946658][ T5878] loop5: detected capacity change from 0 to 512 [ 186.990914][ T5884] tipc: Enabling of bearer rejected, failed to enable media [ 187.264017][ T5878] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.303571][ T5878] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.334172][ T5878] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 188.400818][ T5921] fuse: Unknown parameter 'fd00000000000000000003' [ 190.009400][ T5937] netlink: 36 bytes leftover after parsing attributes in process `syz.3.412'. [ 190.835480][ T5941] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 191.828600][ T5979] tipc: Started in network mode [ 191.865359][ T5983] loop4: detected capacity change from 0 to 512 [ 191.905663][ T5979] tipc: Node identity caa49b3d931f, cluster identity 4711 [ 191.987328][ T5983] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.050934][ T5985] fuse: Unknown parameter 'fd00000000000000000003' [ 192.058511][ T5979] tipc: Enabled bearer , priority 0 [ 192.077962][ T5983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.167812][ T5979] tipc: Resetting bearer [ 192.264828][ T5983] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 192.306915][ T5977] tipc: Disabling bearer [ 193.300086][ T5998] netlink: 124 bytes leftover after parsing attributes in process `syz.4.419'. [ 194.733003][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.057509][ T6011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.426'. [ 195.294713][ T6011] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 197.438364][ T6046] loop5: detected capacity change from 0 to 512 [ 197.446135][ T6044] fuse: Unknown parameter 'fd00000000000000000003' [ 197.659074][ T6046] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.686350][ T6046] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.761595][ T6046] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 198.619614][ T6060] netlink: 124 bytes leftover after parsing attributes in process `syz.5.433'. [ 199.030268][ T6059] tipc: Started in network mode [ 199.206187][ T6059] tipc: Node identity 6a1c12baac0f, cluster identity 4711 [ 199.436869][ T6059] tipc: Enabled bearer , priority 0 [ 199.752203][ T6063] tipc: Resetting bearer [ 200.687948][ T6058] tipc: Disabling bearer [ 200.788890][ T4793] tipc: Node number set to 3323138746 [ 201.753766][ T6075] netlink: 36 bytes leftover after parsing attributes in process `syz.5.440'. [ 201.832808][ T6075] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 203.715149][ T6117] loop1: detected capacity change from 0 to 512 [ 203.856345][ T6117] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.077507][ T6117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.266698][ T6117] EXT4-fs (loop1): can't mount with commit=1, fs mounted w/o journal [ 205.063842][ T6131] tipc: Enabled bearer , priority 0 [ 205.099361][ T6131] tipc: Resetting bearer [ 205.725730][ T6130] tipc: Disabling bearer [ 207.697469][ T6158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.455'. [ 207.769128][ T6161] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 209.348354][ T6199] loop0: detected capacity change from 0 to 512 [ 209.581739][ T6199] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.866912][ T6199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.088218][ T6199] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 210.115520][ T6205] device syzkaller0 entered promiscuous mode [ 210.494116][ T6209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.464'. [ 213.620540][ T6220] netlink: 36 bytes leftover after parsing attributes in process `syz.4.469'. [ 213.649638][ T6220] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 215.166970][ T6257] loop5: detected capacity change from 0 to 512 [ 215.466808][ T6264] device syzkaller0 entered promiscuous mode [ 215.511190][ T6257] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.536840][ T6257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.548608][ T6257] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 217.728299][ T4669] Bluetooth: hci5: command 0x0406 tx timeout [ 219.317285][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.484'. [ 219.949231][ T6283] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 220.980733][ T6313] loop0: detected capacity change from 0 to 512 [ 221.196805][ T6322] device syzkaller0 entered promiscuous mode [ 221.220267][ T6313] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.233535][ T6313] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.244037][ T6313] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 221.489136][ T6330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.493'. [ 224.655095][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.500'. [ 224.946062][ T6356] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 225.828194][ T6394] loop5: detected capacity change from 0 to 512 [ 225.898227][ T6394] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 226.584304][ T6400] device syzkaller0 entered promiscuous mode [ 226.647763][ T6394] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 226.707423][ T6394] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 229.220994][ T6426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.517'. [ 229.250667][ T6426] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 230.663900][ T6450] loop3: detected capacity change from 0 to 512 [ 230.724472][ T6453] device syzkaller0 entered promiscuous mode [ 230.785021][ T6450] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.895864][ T6450] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 230.974997][ T6450] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 231.068186][ T6470] capability: warning: `syz.1.530' uses 32-bit capabilities (legacy support in use) [ 249.182957][ T6609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.569'. [ 249.201902][ T6609] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 251.875210][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 252.010331][ T6626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.675806][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.951301][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.585'. [ 257.052473][ T6664] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 259.428514][ T6708] overlayfs: overlapping lowerdir path [ 260.142247][ T6706] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 260.661029][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.605'. [ 260.764854][ T6717] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 265.429523][ T6768] netlink: 36 bytes leftover after parsing attributes in process `syz.5.621'. [ 265.521296][ T6768] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 267.046622][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.5.634'. [ 267.792188][ T6805] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 268.402594][ T6821] Illegal XDP return value 4292051120, expect packet loss! [ 268.807260][ T6827] device erspan0 entered promiscuous mode [ 268.869321][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 269.846214][ T6842] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 270.023007][ T6849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.649'. [ 270.062643][ T6849] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 272.923645][ T6885] 9pnet: Insufficient options for proto=fd [ 273.126141][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.667'. [ 273.220537][ T6897] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 276.233678][ T6917] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.329098][ T6921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.674'. [ 281.209077][ T6984] 9pnet: Could not find request transport: 0xffffffffffffffff [ 283.450905][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 285.981506][ T7039] overlayfs: overlapping lowerdir path [ 288.698729][ T7057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.711'. [ 289.801143][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 290.412531][ T26] audit: type=1326 audit(1769134192.854:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.1.720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa334673cb9 code=0x0 [ 292.225714][ T7095] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.111388][ T7134] device syzkaller0 entered promiscuous mode [ 297.295839][ T7141] capability: warning: `syz.3.743' uses deprecated v2 capabilities in a way that may be insecure [ 297.667242][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 298.228940][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 298.263257][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 298.920682][ T7] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 298.932498][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.942697][ T7] usb 5-1: config 0 has no interface number 0 [ 298.952790][ T7] usb 5-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 298.965079][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.046150][ T7] usb 5-1: config 0 descriptor?? [ 299.100785][ T7] usb 5-1: Found UVC 0.00 device (0bd3:05f4) [ 299.113103][ T7] usb 5-1: No valid video chain found. [ 299.825521][ T7] usb 5-1: USB disconnect, device number 4 [ 299.865819][ T7177] device syzkaller0 entered promiscuous mode [ 301.097137][ T7197] device ip6gretap0 entered promiscuous mode [ 301.117786][ T7197] device macsec1 entered promiscuous mode [ 304.495833][ T7240] overlayfs: failed to resolve './file1/file0': -2 [ 308.379015][ T7259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.774'. [ 308.440994][ T7261] device syzkaller0 entered promiscuous mode [ 308.481890][ T7259] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 310.949371][ T4792] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 313.113480][ T4792] usb 6-1: Using ep0 maxpacket: 16 [ 313.742517][ T26] audit: type=1326 audit(1769134216.184:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 314.089880][ T7304] device syzkaller0 entered promiscuous mode [ 314.220060][ T4792] usb 6-1: device descriptor read/all, error -71 [ 314.247945][ T26] audit: type=1326 audit(1769134216.534:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 314.275241][ T26] audit: type=1326 audit(1769134216.574:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 314.308645][ T26] audit: type=1326 audit(1769134216.574:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 314.601418][ T26] audit: type=1326 audit(1769134216.574:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 315.384897][ T26] audit: type=1326 audit(1769134216.574:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 315.521151][ T26] audit: type=1326 audit(1769134216.574:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 315.947738][ T26] audit: type=1326 audit(1769134216.574:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 316.149948][ T26] audit: type=1326 audit(1769134216.574:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54151cb9 code=0x7ffc0000 [ 317.479012][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.715880][ T7358] device syzkaller0 entered promiscuous mode [ 321.537839][ T7415] device syzkaller0 entered promiscuous mode [ 325.202205][ T7474] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 325.363467][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 325.813639][ T7473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 325.989525][ T7473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 326.004415][ T7478] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 326.044541][ T7473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 326.573825][ T7473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 326.725338][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 326.905768][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.852'. [ 327.008603][ T7501] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 329.198785][ T7524] overlayfs: failed to resolve './file1': -2 [ 329.934246][ T7541] process 'syz.1.865' launched '/dev/fd/3' with NULL argv: empty string added [ 331.614315][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 331.730260][ T7559] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 333.331218][ T7582] overlayfs: failed to resolve './file1': -2 [ 335.096631][ T7601] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 336.846658][ T7627] mmap: syz.0.889 (7627) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 337.650000][ T7643] overlayfs: overlapping lowerdir path [ 338.960623][ T7656] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 342.927056][ T7704] netlink: 36 bytes leftover after parsing attributes in process `syz.4.911'. [ 342.940322][ T7704] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 348.137939][ T7780] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 349.631252][ T7793] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.938' sets config #-1 [ 350.449883][ T7818] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 350.875611][ T7830] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 351.214065][ T4792] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 351.523440][ T4792] usb 6-1: Using ep0 maxpacket: 32 [ 352.123610][ T4792] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 352.138218][ T4792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.161158][ T4792] usb 6-1: config 0 descriptor?? [ 352.548524][ T4792] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 354.509131][ T4792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 355.179139][ T4792] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 355.281919][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 355.298395][ T4792] usb 6-1: media controller created [ 355.363859][ T4792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.080774][ T7878] ================================================================== [ 356.089154][ T7878] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 356.096911][ T7878] Write of size 4 at addr ffff88802290aeb8 by task syz.3.966/7878 [ 356.104714][ T7878] [ 356.107050][ T7878] CPU: 1 PID: 7878 Comm: syz.3.966 Not tainted syzkaller #0 [ 356.114335][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.124422][ T7878] Call Trace: [ 356.127709][ T7878] [ 356.130651][ T7878] dump_stack_lvl+0x188/0x250 [ 356.135537][ T7878] ? show_regs_print_info+0x20/0x20 [ 356.140874][ T7878] ? _printk+0xda/0x130 [ 356.145072][ T7878] ? ax25_dev_device_down+0x35e/0x520 [ 356.150469][ T7878] ? load_image+0x400/0x400 [ 356.154983][ T7878] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 356.160634][ T7878] print_address_description+0x60/0x2d0 [ 356.166188][ T7878] ? ax25_dev_device_down+0x35e/0x520 [ 356.171569][ T7878] kasan_report+0xdf/0x130 [ 356.175995][ T7878] ? ax25_dev_device_down+0x35e/0x520 [ 356.181491][ T7878] kasan_check_range+0x235/0x290 [ 356.186449][ T7878] ax25_dev_device_down+0x35e/0x520 [ 356.191668][ T7878] ax25_device_event+0x4b4/0x4f0 [ 356.196619][ T7878] raw_notifier_call_chain+0xcb/0x160 [ 356.202006][ T7878] __dev_notify_flags+0x158/0x300 [ 356.207037][ T7878] ? __dev_change_flags+0x6a0/0x6a0 [ 356.212236][ T7878] ? __dev_change_flags+0x4d0/0x6a0 [ 356.217442][ T7878] ? dev_get_flags+0x1c0/0x1c0 [ 356.222211][ T7878] ? __mutex_lock_common+0x465/0x2400 [ 356.227587][ T7878] dev_change_flags+0xe3/0x1a0 [ 356.232360][ T7878] dev_ifsioc+0x130/0xd50 [ 356.236698][ T7878] ? dev_ioctl+0xe30/0xe30 [ 356.241119][ T7878] ? apparmor_capable+0x12c/0x190 [ 356.246154][ T7878] ? full_name_hash+0x8e/0xe0 [ 356.250857][ T7878] dev_ioctl+0x545/0xe30 [ 356.255108][ T7878] ? _copy_from_user+0x111/0x170 [ 356.260052][ T7878] sock_do_ioctl+0x245/0x320 [ 356.264661][ T7878] ? sock_show_fdinfo+0xb0/0xb0 [ 356.269531][ T7878] sock_ioctl+0x4d2/0x710 [ 356.273864][ T7878] ? sock_poll+0x410/0x410 [ 356.278291][ T7878] ? bpf_lsm_file_ioctl+0x5/0x10 [ 356.283227][ T7878] ? security_file_ioctl+0x7c/0xa0 [ 356.288352][ T7878] ? sock_poll+0x410/0x410 [ 356.292770][ T7878] __se_sys_ioctl+0xfa/0x170 [ 356.297365][ T7878] do_syscall_64+0x4c/0xa0 [ 356.301785][ T7878] ? clear_bhb_loop+0x30/0x80 [ 356.306563][ T7878] ? clear_bhb_loop+0x30/0x80 [ 356.311250][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.317159][ T7878] RIP: 0033:0x7fad54151cb9 [ 356.321575][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.341214][ T7878] RSP: 002b:00007fad523ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.349647][ T7878] RAX: ffffffffffffffda RBX: 00007fad543ccfa0 RCX: 00007fad54151cb9 [ 356.357622][ T7878] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 356.365598][ T7878] RBP: 00007fad541bfbf7 R08: 0000000000000000 R09: 0000000000000000 [ 356.373585][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.381560][ T7878] R13: 00007fad543cd038 R14: 00007fad543ccfa0 R15: 00007ffdd178e028 [ 356.389550][ T7878] [ 356.392564][ T7878] [ 356.394894][ T7878] Allocated by task 7878: [ 356.399217][ T7878] __kasan_kmalloc+0xb5/0xf0 [ 356.403810][ T7878] ax25_dev_device_up+0x50/0x580 [ 356.408744][ T7878] ax25_device_event+0x483/0x4f0 [ 356.413674][ T7878] raw_notifier_call_chain+0xcb/0x160 [ 356.419057][ T7878] __dev_notify_flags+0x194/0x300 [ 356.424107][ T7878] dev_change_flags+0xe3/0x1a0 [ 356.428870][ T7878] dev_ifsioc+0x130/0xd50 [ 356.433195][ T7878] dev_ioctl+0x545/0xe30 [ 356.437435][ T7878] sock_do_ioctl+0x245/0x320 [ 356.442033][ T7878] sock_ioctl+0x4d2/0x710 [ 356.446373][ T7878] __se_sys_ioctl+0xfa/0x170 [ 356.450960][ T7878] do_syscall_64+0x4c/0xa0 [ 356.455374][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.461352][ T7878] [ 356.463758][ T7878] Freed by task 7878: [ 356.467726][ T7878] kasan_set_track+0x4b/0x70 [ 356.472314][ T7878] kasan_set_free_info+0x1f/0x40 [ 356.477247][ T7878] ____kasan_slab_free+0xd5/0x110 [ 356.482353][ T7878] slab_free_freelist_hook+0xea/0x170 [ 356.487829][ T7878] kfree+0xef/0x2a0 [ 356.491636][ T7878] ax25_dev_device_down+0x1c0/0x520 [ 356.496836][ T7878] ax25_device_event+0x4b4/0x4f0 [ 356.501772][ T7878] raw_notifier_call_chain+0xcb/0x160 [ 356.507140][ T7878] __dev_notify_flags+0x158/0x300 [ 356.512170][ T7878] dev_change_flags+0xe3/0x1a0 [ 356.516933][ T7878] dev_ifsioc+0x130/0xd50 [ 356.521268][ T7878] dev_ioctl+0x545/0xe30 [ 356.525505][ T7878] sock_do_ioctl+0x245/0x320 [ 356.530097][ T7878] sock_ioctl+0x4d2/0x710 [ 356.534431][ T7878] __se_sys_ioctl+0xfa/0x170 [ 356.539025][ T7878] do_syscall_64+0x4c/0xa0 [ 356.543465][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.549360][ T7878] [ 356.551679][ T7878] Last potentially related work creation: [ 356.557385][ T7878] kasan_save_stack+0x35/0x60 [ 356.562068][ T7878] kasan_record_aux_stack+0xb8/0x100 [ 356.567356][ T7878] insert_work+0x54/0x3d0 [ 356.571705][ T7878] __queue_work+0x9c5/0xd50 [ 356.576203][ T7878] queue_work_on+0x124/0x1f0 [ 356.580788][ T7878] netdevice_event+0x803/0x900 [ 356.585548][ T7878] raw_notifier_call_chain+0xcb/0x160 [ 356.590918][ T7878] __netdev_upper_dev_unlink+0x205/0x7c0 [ 356.596635][ T7878] netdev_upper_dev_unlink+0x96/0xe0 [ 356.602003][ T7878] __bond_release_one+0x473/0x11c0 [ 356.607115][ T7878] bond_netdev_event+0x674/0xef0 [ 356.612047][ T7878] raw_notifier_call_chain+0xcb/0x160 [ 356.617423][ T7878] unregister_netdevice_many+0x1049/0x19f0 [ 356.623229][ T7878] default_device_exit_batch+0x364/0x3c0 [ 356.628867][ T7878] cleanup_net+0x791/0xba0 [ 356.633370][ T7878] process_one_work+0x85f/0x1010 [ 356.638310][ T7878] worker_thread+0xaa6/0x1290 [ 356.642988][ T7878] kthread+0x436/0x520 [ 356.647063][ T7878] ret_from_fork+0x1f/0x30 [ 356.651480][ T7878] [ 356.653799][ T7878] Second to last potentially related work creation: [ 356.660369][ T7878] kasan_save_stack+0x35/0x60 [ 356.665043][ T7878] kasan_record_aux_stack+0xb8/0x100 [ 356.670336][ T7878] insert_work+0x54/0x3d0 [ 356.674661][ T7878] __queue_work+0x9c5/0xd50 [ 356.679160][ T7878] queue_work_on+0x124/0x1f0 [ 356.683746][ T7878] netdevice_event+0x803/0x900 [ 356.688507][ T7878] raw_notifier_call_chain+0xcb/0x160 [ 356.693879][ T7878] __netdev_upper_dev_link+0x41e/0x590 [ 356.699350][ T7878] netdev_upper_dev_link+0xad/0xf0 [ 356.704533][ T7878] macvlan_common_newlink+0x1098/0x17e0 [ 356.710167][ T7878] macvtap_newlink+0x150/0x1d0 [ 356.714954][ T7878] rtnl_newlink+0x1359/0x1a50 [ 356.719638][ T7878] rtnetlink_rcv_msg+0x844/0xf30 [ 356.724575][ T7878] netlink_rcv_skb+0x1f5/0x440 [ 356.729336][ T7878] netlink_unicast+0x774/0x920 [ 356.734101][ T7878] netlink_sendmsg+0x8ba/0xbe0 [ 356.738893][ T7878] __sys_sendto+0x46d/0x620 [ 356.743413][ T7878] __x64_sys_sendto+0xda/0xf0 [ 356.748147][ T7878] do_syscall_64+0x4c/0xa0 [ 356.752573][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.758486][ T7878] [ 356.760806][ T7878] The buggy address belongs to the object at ffff88802290ae00 [ 356.760806][ T7878] which belongs to the cache kmalloc-192 of size 192 [ 356.774854][ T7878] The buggy address is located 184 bytes inside of [ 356.774854][ T7878] 192-byte region [ffff88802290ae00, ffff88802290aec0) [ 356.788131][ T7878] The buggy address belongs to the page: [ 356.793776][ T7878] page:ffffea00008a4280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2290a [ 356.803929][ T7878] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 356.811487][ T7878] raw: 00fff00000000200 0000000000000000 0000000300000001 ffff888016c41a00 [ 356.820066][ T7878] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 356.828636][ T7878] page dumped because: kasan: bad access detected [ 356.835143][ T7878] page_owner tracks the page as allocated [ 356.840851][ T7878] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 7988411085, free_ts 6903045424 [ 356.856488][ T7878] get_page_from_freelist+0x1bbd/0x1ca0 [ 356.862137][ T7878] __alloc_pages+0x1ee/0x480 [ 356.866727][ T7878] alloc_page_interleave+0x24/0x1e0 [ 356.871931][ T7878] new_slab+0xc0/0x4b0 [ 356.876003][ T7878] ___slab_alloc+0x80a/0xdd0 [ 356.880585][ T7878] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 356.885951][ T7878] call_usermodehelper_setup+0x8a/0x260 [ 356.891490][ T7878] kobject_uevent_env+0x65e/0x890 [ 356.896510][ T7878] device_add+0x91c/0xfb0 [ 356.900841][ T7878] platform_device_add+0x4b9/0x820 [ 356.906034][ T7878] init+0x2cb/0x10d0 [ 356.909923][ T7878] do_one_initcall+0x272/0x730 [ 356.914680][ T7878] do_initcall_level+0x137/0x1f0 [ 356.919613][ T7878] do_initcalls+0x4b/0x90 [ 356.924030][ T7878] kernel_init_freeable+0x3e9/0x570 [ 356.929225][ T7878] kernel_init+0x19/0x1b0 [ 356.933550][ T7878] page last free stack trace: [ 356.938212][ T7878] free_unref_page_prepare+0x637/0x6c0 [ 356.943668][ T7878] free_unref_page_list+0x119/0x820 [ 356.948863][ T7878] release_pages+0x186c/0x1be0 [ 356.953741][ T7878] tlb_finish_mmu+0x176/0x300 [ 356.958527][ T7878] exit_mmap+0x3d0/0x640 [ 356.962777][ T7878] __mmput+0x115/0x3b0 [ 356.966840][ T7878] free_bprm+0x141/0x300 [ 356.971093][ T7878] kernel_execve+0x380/0x900 [ 356.975691][ T7878] call_usermodehelper_exec_async+0x207/0x350 [ 356.981757][ T7878] ret_from_fork+0x1f/0x30 [ 356.986174][ T7878] [ 356.988492][ T7878] Memory state around the buggy address: [ 356.994201][ T7878] ffff88802290ad80: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 357.002256][ T7878] ffff88802290ae00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.010317][ T7878] >ffff88802290ae80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 357.018371][ T7878] ^ [ 357.024254][ T7878] ffff88802290af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.032307][ T7878] ffff88802290af80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 357.040358][ T7878] ================================================================== [ 357.048406][ T7878] Disabling lock debugging due to kernel taint [ 357.054612][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.111555][ T4792] DVB: Unable to find symbol dib7000p_attach() [ 357.152328][ T7878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 357.159233][ T4792] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 357.159552][ T7878] CPU: 0 PID: 7878 Comm: syz.3.966 Tainted: G B syzkaller #0 [ 357.175297][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.185360][ T7878] Call Trace: [ 357.188656][ T7878] [ 357.191574][ T7878] dump_stack_lvl+0x188/0x250 [ 357.196409][ T7878] ? show_regs_print_info+0x20/0x20 [ 357.201591][ T7878] ? load_image+0x400/0x400 [ 357.206082][ T7878] panic+0x2e5/0x810 [ 357.210392][ T7878] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 357.216527][ T7878] ? bpf_jit_dump+0xd0/0xd0 [ 357.221012][ T7878] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 357.223208][ T4792] rc_core: IR keymap rc-dib0700-rc5 not found [ 357.226977][ T7878] ? _raw_spin_unlock+0x40/0x40 [ 357.227000][ T7878] ? ax25_dev_device_down+0x35e/0x520 [ 357.243210][ T7878] check_panic_on_warn+0x80/0xa0 [ 357.248130][ T7878] ? ax25_dev_device_down+0x35e/0x520 [ 357.253485][ T7878] end_report+0x6d/0xf0 [ 357.257636][ T7878] kasan_report+0x102/0x130 [ 357.262297][ T7878] ? ax25_dev_device_down+0x35e/0x520 [ 357.267820][ T7878] kasan_check_range+0x235/0x290 [ 357.272756][ T7878] ax25_dev_device_down+0x35e/0x520 [ 357.277942][ T7878] ax25_device_event+0x4b4/0x4f0 [ 357.282870][ T7878] raw_notifier_call_chain+0xcb/0x160 [ 357.288230][ T7878] __dev_notify_flags+0x158/0x300 [ 357.293244][ T7878] ? __dev_change_flags+0x6a0/0x6a0 [ 357.298432][ T7878] ? __dev_change_flags+0x4d0/0x6a0 [ 357.303623][ T7878] ? dev_get_flags+0x1c0/0x1c0 [ 357.308381][ T7878] ? __mutex_lock_common+0x465/0x2400 [ 357.313741][ T7878] dev_change_flags+0xe3/0x1a0 [ 357.318491][ T7878] dev_ifsioc+0x130/0xd50 [ 357.322799][ T7878] ? dev_ioctl+0xe30/0xe30 [ 357.327215][ T7878] ? apparmor_capable+0x12c/0x190 [ 357.332221][ T7878] ? full_name_hash+0x8e/0xe0 [ 357.336886][ T7878] dev_ioctl+0x545/0xe30 [ 357.341124][ T7878] ? _copy_from_user+0x111/0x170 [ 357.346051][ T7878] sock_do_ioctl+0x245/0x320 [ 357.350627][ T7878] ? sock_show_fdinfo+0xb0/0xb0 [ 357.355459][ T7878] sock_ioctl+0x4d2/0x710 [ 357.359774][ T7878] ? sock_poll+0x410/0x410 [ 357.364211][ T7878] ? bpf_lsm_file_ioctl+0x5/0x10 [ 357.369133][ T7878] ? security_file_ioctl+0x7c/0xa0 [ 357.374327][ T7878] ? sock_poll+0x410/0x410 [ 357.378739][ T7878] __se_sys_ioctl+0xfa/0x170 [ 357.383377][ T7878] do_syscall_64+0x4c/0xa0 [ 357.387780][ T7878] ? clear_bhb_loop+0x30/0x80 [ 357.392440][ T7878] ? clear_bhb_loop+0x30/0x80 [ 357.397126][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.403006][ T7878] RIP: 0033:0x7fad54151cb9 [ 357.407403][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.427367][ T7878] RSP: 002b:00007fad523ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.435772][ T7878] RAX: ffffffffffffffda RBX: 00007fad543ccfa0 RCX: 00007fad54151cb9 [ 357.443733][ T7878] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 357.451791][ T7878] RBP: 00007fad541bfbf7 R08: 0000000000000000 R09: 0000000000000000 [ 357.459752][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.467726][ T7878] R13: 00007fad543cd038 R14: 00007fad543ccfa0 R15: 00007ffdd178e028 [ 357.475701][ T7878] [ 357.479112][ T7878] Kernel Offset: disabled [ 357.483704][ T7878] Rebooting in 86400 seconds..