last executing test programs: 8.185540971s ago: executing program 2 (id=27): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x20000010) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') fchdir(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x985, 0x12) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000700)='\x00') pread64(r3, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) syz_usb_disconnect(r1) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 7.619426934s ago: executing program 4 (id=29): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, r0, 0x0) 5.905565606s ago: executing program 4 (id=40): socket(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x101, 0x8, 0x5cb, 0x80000000, r1}, &(0x7f0000000040)=0x10) 4.954540089s ago: executing program 4 (id=46): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffeffffffff, 0x448000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x8, 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002300)={'sit0\x00', &(0x7f00000021c0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x2, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xbd, 0x3, 0xe}]}}}}}) 4.50135574s ago: executing program 2 (id=50): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0x3) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000001580), r1, 0x1}}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd29000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000006c0), 0x10020005, r3}, 0x38) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x7}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 3.960986754s ago: executing program 0 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @random="6e87a4a45c69", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x6, 0x11, 0x1000, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 3.779050648s ago: executing program 1 (id=53): syz_open_dev$usbfs(&(0x7f0000000080), 0x11, 0x100a42) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.633477891s ago: executing program 2 (id=55): openat$ppp(0xffffffffffffff9c, 0x0, 0x8602, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x8000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 3.617868522s ago: executing program 0 (id=56): socket(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x101, 0x8, 0x5cb, 0x80000000, r1}, &(0x7f0000000040)=0x10) 3.489487495s ago: executing program 1 (id=57): syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) syz_usb_connect(0x6, 0x36, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r1, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3.409510277s ago: executing program 3 (id=58): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.134467883s ago: executing program 3 (id=59): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, 0x0, 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)='#', 0xa033}], 0x1}}], 0x1, 0x20000000) 3.095425324s ago: executing program 4 (id=60): syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x9004) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) r1 = socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r2, 0x0, &(0x7f0000000600)=""/86}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3.078597795s ago: executing program 2 (id=61): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x161, 0x8000000, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) 2.561058957s ago: executing program 0 (id=62): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0xeff, &(0x7f0000000280)={0x0, 0x407b, 0x1018, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.224365196s ago: executing program 0 (id=63): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x40}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) 2.109063588s ago: executing program 3 (id=64): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4000004) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x9641837ee6e027e6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 1.985451982s ago: executing program 1 (id=65): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0x3) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000001580), r1, 0x1}}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd29000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000006c0), 0x10020005, r3}, 0x38) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x7}, 0x0) write$tun(r4, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.717778278s ago: executing program 0 (id=66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @random="6e87a4a45c69", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x6, 0x11, 0x1000, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1.526099172s ago: executing program 4 (id=67): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10000016}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96000100000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.361427786s ago: executing program 0 (id=68): r0 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRESHEX=r1], 0x48) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r2, 0x0, 0x5, 0x2) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x40000) syz_open_dev$dvb_dvr(&(0x7f0000001040), 0x0, 0x100) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x4004884) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.127112912s ago: executing program 1 (id=69): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 971.417876ms ago: executing program 4 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="010000002c9fd46ce5"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) unshare(0x26020480) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0xab4ecb237391f573) r2 = socket(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x1, 0x4) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x8}, {0x15, 0xa, 0x8}, {0x5, 0x2, 0x3, 0x8}, {0x421, 0x9, 0x4, 0x80000001}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), 0x8) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pB \x00'}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r9, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000380)=""/254, 0xfe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x21, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x0, 0x3, 0x0, 0x3, 0x3, 0x3e, 0x4}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x40, &(0x7f0000000d40)=""/64, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000580)=@arm64={0xdc, 0xa, 0x2, '\x00', 0x800}) 803.87475ms ago: executing program 1 (id=71): openat$ppp(0xffffffffffffff9c, 0x0, 0x8602, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x8000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 713.355182ms ago: executing program 3 (id=72): close(0x3) 497.437687ms ago: executing program 3 (id=73): r0 = socket(0x10, 0x80002, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 403.91915ms ago: executing program 2 (id=74): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, 0x0, 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)='#', 0xa033}], 0x1}}], 0x1, 0x20000000) 218.135294ms ago: executing program 2 (id=75): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)={"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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, 0xff, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xf7}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x8, 0xf5, '\x00', 0xb4}, {0x13, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x10}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x4, 0x2, '\x00', 0x9}, {0x4, 0x4, 0x5, '\x00', 0xe9}, {0x7, 0x6, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0xff, 0xf3, '\x00', 0x6}, {0x1, 0x6, 0x4}]}}) 115.241947ms ago: executing program 1 (id=76): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x40}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) 0s ago: executing program 3 (id=77): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. syzkaller login: [ 77.002913][ T4261] cgroup: Unknown subsys name 'net' [ 77.132389][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.618564][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.800936][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.828877][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.836614][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.845913][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.848435][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.855235][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.861588][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.872287][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.878578][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.883458][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.889194][ T4293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.899721][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.905599][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.911415][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.919436][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.928247][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.932646][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.946045][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.946089][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.953606][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.961631][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.969199][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.978187][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.982641][ T4293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.989567][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.003109][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.010815][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.042169][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.051504][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.052695][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.483734][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 81.509285][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 81.672578][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 81.687537][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 81.712578][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.720570][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.729381][ T4283] device bridge_slave_0 entered promiscuous mode [ 81.742320][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.750104][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.758864][ T4283] device bridge_slave_1 entered promiscuous mode [ 81.798760][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 81.824772][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.834204][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.842268][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.850889][ T4275] device bridge_slave_0 entered promiscuous mode [ 81.863874][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.871320][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.879730][ T4275] device bridge_slave_1 entered promiscuous mode [ 81.902010][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.962242][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.000384][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.019185][ T4283] team0: Port device team_slave_0 added [ 82.060728][ T4283] team0: Port device team_slave_1 added [ 82.070458][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.077910][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.085918][ T4284] device bridge_slave_0 entered promiscuous mode [ 82.093873][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.101903][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.110162][ T4274] device bridge_slave_0 entered promiscuous mode [ 82.124536][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.131787][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.140223][ T4274] device bridge_slave_1 entered promiscuous mode [ 82.163162][ T4275] team0: Port device team_slave_0 added [ 82.170223][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.177636][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.186118][ T4284] device bridge_slave_1 entered promiscuous mode [ 82.221178][ T4275] team0: Port device team_slave_1 added [ 82.227489][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.234601][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.243426][ T4280] device bridge_slave_0 entered promiscuous mode [ 82.260443][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.269670][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.295947][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.329859][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.340776][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.348866][ T4280] device bridge_slave_1 entered promiscuous mode [ 82.358176][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.367909][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.374908][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.401288][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.414652][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.424556][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.434558][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.460840][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.480932][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.504540][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.517748][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.524745][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.551411][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.605244][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.629211][ T4283] device hsr_slave_0 entered promiscuous mode [ 82.636473][ T4283] device hsr_slave_1 entered promiscuous mode [ 82.661696][ T4284] team0: Port device team_slave_0 added [ 82.669821][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.690283][ T4274] team0: Port device team_slave_0 added [ 82.707087][ T4280] team0: Port device team_slave_0 added [ 82.715408][ T4284] team0: Port device team_slave_1 added [ 82.729508][ T4274] team0: Port device team_slave_1 added [ 82.745498][ T4280] team0: Port device team_slave_1 added [ 82.770968][ T4275] device hsr_slave_0 entered promiscuous mode [ 82.777920][ T4275] device hsr_slave_1 entered promiscuous mode [ 82.784515][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.792829][ T4275] Cannot create hsr debugfs directory [ 82.835768][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.842812][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.869701][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.887443][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.894455][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.921576][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.934888][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.944305][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.970526][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.982802][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.990458][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.016434][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.047193][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.054203][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.081381][ T4293] Bluetooth: hci4: command 0x0409 tx timeout [ 83.088278][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.100137][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.107620][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.134073][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.136259][ T4293] Bluetooth: hci1: command 0x0409 tx timeout [ 83.151435][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 83.151455][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 83.151750][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 83.242031][ T4284] device hsr_slave_0 entered promiscuous mode [ 83.249403][ T4284] device hsr_slave_1 entered promiscuous mode [ 83.256438][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.264039][ T4284] Cannot create hsr debugfs directory [ 83.343594][ T4280] device hsr_slave_0 entered promiscuous mode [ 83.350885][ T4280] device hsr_slave_1 entered promiscuous mode [ 83.357939][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.365553][ T4280] Cannot create hsr debugfs directory [ 83.386532][ T4274] device hsr_slave_0 entered promiscuous mode [ 83.393296][ T4274] device hsr_slave_1 entered promiscuous mode [ 83.400460][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.408191][ T4274] Cannot create hsr debugfs directory [ 83.646541][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.672415][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.695490][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.711422][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.840198][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.854892][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.868196][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.890162][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.943788][ T4284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.953660][ T4284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.982717][ T4284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.992044][ T4284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.061474][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.112026][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.120424][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.149664][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.160710][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.175241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.187127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.211548][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.232195][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.253643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.265088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.277350][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.284706][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.303032][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.315464][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.325283][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.341396][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.357552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.377230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.392205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.401162][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.408342][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.444861][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.452977][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.466647][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.495567][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.526775][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.540209][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.549657][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.556825][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.567962][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.593738][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.602869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.634547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.649382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.658563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.669916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.680255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.689335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.698113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.707223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.718759][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.725917][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.765412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.774500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.785621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.794296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.803858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.813158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.825167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.834836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.844220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.853134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.870960][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.883946][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.893468][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.914034][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.925396][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.943925][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.958346][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.967918][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.978198][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.987361][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.998538][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.007701][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.016918][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.024061][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.032448][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.040970][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.064840][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.102287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.119686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.136856][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 85.143679][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.150886][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.190720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.216067][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 85.222255][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 85.228801][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 85.228871][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 85.273327][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.283120][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.291281][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.304291][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.341015][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.351388][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.363295][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.374386][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.397163][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.416883][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.436138][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.457224][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.471194][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.484078][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.498764][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.537633][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.549091][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.558296][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.565460][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.573856][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.584260][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.593326][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.600569][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.608833][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.632323][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.677239][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.690759][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.708540][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.721329][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.747459][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.767870][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.787306][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.807494][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.826490][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.866256][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.875137][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.896393][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.903635][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.930296][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.940045][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.949238][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.956480][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.966262][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.975629][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.991618][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.002872][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.034131][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.044584][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.082578][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.106356][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.123890][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.156772][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.164793][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.173576][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.184780][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.196353][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.206737][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.215521][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.240105][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.266274][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.280316][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.298098][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.315990][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.362473][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.394490][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.422755][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.436834][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.456589][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.470973][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.480461][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.490602][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.500010][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.569244][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.586568][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.603290][ T4275] device veth0_vlan entered promiscuous mode [ 86.617143][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.636301][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.662516][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.671336][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.687072][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.709696][ T4275] device veth1_vlan entered promiscuous mode [ 86.804179][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.836934][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.871781][ T4275] device veth0_macvtap entered promiscuous mode [ 86.885017][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.908929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.942189][ T4275] device veth1_macvtap entered promiscuous mode [ 86.997466][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.006742][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.041652][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.063500][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.095454][ T4284] device veth0_vlan entered promiscuous mode [ 87.123920][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.144119][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.160136][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.171378][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.183499][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.192929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.204427][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.218252][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.226669][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 87.249460][ T4284] device veth1_vlan entered promiscuous mode [ 87.289704][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.297262][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 87.305923][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 87.311988][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 87.318365][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 87.349059][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.365775][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.374563][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.405752][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.481713][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.501963][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.527230][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.650530][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.660873][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.680845][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.712678][ T4274] device veth0_vlan entered promiscuous mode [ 87.743497][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.753930][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.767840][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.775931][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.801038][ T4284] device veth0_macvtap entered promiscuous mode [ 87.840274][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.873948][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.883603][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.892007][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.901600][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.910806][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.919942][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.930784][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.953904][ T4274] device veth1_vlan entered promiscuous mode [ 87.985246][ T4284] device veth1_macvtap entered promiscuous mode [ 87.999087][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.010750][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.020571][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.029661][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.041299][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.050194][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.058674][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.090375][ T4283] device veth0_vlan entered promiscuous mode [ 88.124243][ T4280] device veth0_vlan entered promiscuous mode [ 88.142368][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.151642][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.167340][ T4280] device veth1_vlan entered promiscuous mode [ 88.176328][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.185749][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.210822][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.220098][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.229300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.238821][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.254658][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.272847][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.285206][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.317255][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.325151][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.336920][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.345092][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.356616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.366537][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.374437][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.383754][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.396283][ T4283] device veth1_vlan entered promiscuous mode [ 88.429084][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.438059][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.449785][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.461303][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.476484][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.496539][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.508719][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.521927][ T4274] device veth0_macvtap entered promiscuous mode [ 88.538232][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.548661][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.565313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.574636][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.586225][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.597606][ T4284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.608832][ T4284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.618408][ T4284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.627551][ T4284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.643154][ T4280] device veth0_macvtap entered promiscuous mode [ 88.670053][ T4274] device veth1_macvtap entered promiscuous mode [ 88.681583][ T4283] device veth0_macvtap entered promiscuous mode [ 88.704917][ T4280] device veth1_macvtap entered promiscuous mode [ 88.729938][ T4283] device veth1_macvtap entered promiscuous mode [ 88.754320][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.763496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.775081][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.793332][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.801895][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.823729][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.836885][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.847941][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.858806][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.871590][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.890320][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.901777][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.913351][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.924352][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.938574][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.949411][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.962200][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.971423][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.983533][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.993605][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.003208][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.021452][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.032854][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.043979][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.056936][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.066903][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.079530][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.093613][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.105200][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.118013][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.127061][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.138130][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.151250][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.163225][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.178358][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.193205][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.204049][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.218749][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.232655][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.244246][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.255055][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.267472][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.274905][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.287052][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.296194][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 89.302997][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.312291][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.321622][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.330558][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.342512][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.355776][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.366124][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.377371][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 89.382639][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.383428][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 89.399663][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 89.400102][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 89.406816][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.422638][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.432788][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.443593][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.455464][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.471330][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.486362][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.495293][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.505783][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.518018][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.527568][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.546659][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.555474][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.567519][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.576420][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.591066][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.606030][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614821][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.623923][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.688123][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.702117][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776379][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.837469][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.858925][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.902769][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.960558][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.981046][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.018990][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.046652][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.087061][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.109560][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.145820][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.161344][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.197895][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.201446][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.233437][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.315218][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.343321][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.353834][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.365997][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.396130][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.404033][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.429678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.069187][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.103035][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 91.150980][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.183534][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.248404][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 91.279988][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 91.291500][ T4406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 91.301542][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 91.323166][ T4407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 91.345942][ T4407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 91.384861][ T4408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 91.394009][ T4407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 91.439999][ T4411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 91.759730][ T4403] device syzkaller0 entered promiscuous mode [ 91.858496][ T126] cfg80211: failed to load regulatory.db [ 91.913234][ T4402] syz.4.13 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 91.990211][ T4422] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 92.012029][ T4402] CPU: 0 PID: 4402 Comm: syz.4.13 Not tainted syzkaller #0 [ 92.019410][ T4402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.029546][ T4402] Call Trace: [ 92.032869][ T4402] [ 92.035820][ T4402] dump_stack_lvl+0x188/0x24e [ 92.040572][ T4402] ? ___ratelimit+0x14e/0x610 [ 92.045274][ T4402] ? show_regs_print_info+0x12/0x12 [ 92.050519][ T4402] ? load_image+0x410/0x410 [ 92.055076][ T4402] ? ___ratelimit+0x474/0x610 [ 92.059860][ T4402] ? radix_tree_cpu_dead+0x160/0x160 [ 92.065204][ T4402] dump_header+0xd8/0x820 [ 92.069598][ T4402] oom_kill_process+0x361/0x550 [ 92.074510][ T4402] out_of_memory+0xe25/0x1220 [ 92.079253][ T4402] ? mutex_lock_nested+0x10/0x10 [ 92.084250][ T4402] ? unregister_oom_notifier+0x20/0x20 [ 92.089771][ T4402] mem_cgroup_out_of_memory+0x2c0/0x390 [ 92.095382][ T4402] ? mem_cgroup_oom_trylock+0x210/0x210 [ 92.100991][ T4402] ? do_raw_spin_unlock+0x11d/0x230 [ 92.106353][ T4402] try_charge_memcg+0xc9d/0x17c0 [ 92.111372][ T4402] ? percpu_ref_put+0x180/0x180 [ 92.116285][ T4402] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 92.122183][ T4402] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.128262][ T4402] ? percpu_ref_tryget+0x15/0x180 [ 92.133345][ T4402] ? percpu_ref_tryget+0x15/0x180 [ 92.138463][ T4402] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 92.144333][ T4402] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 92.150119][ T4402] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 92.156075][ T4402] obj_cgroup_charge+0x36a/0x620 [ 92.161074][ T4402] ? obj_cgroup_charge+0xe9/0x620 [ 92.166158][ T4402] ? mod_objcg_mlstate+0x320/0x320 [ 92.171298][ T4402] ? get_obj_cgroup_from_current+0xd0/0x280 [ 92.177212][ T4402] ? get_obj_cgroup_from_current+0xd0/0x280 [ 92.183149][ T4402] slab_pre_alloc_hook+0x2e2/0x300 [ 92.188311][ T4402] kmem_cache_alloc_node+0x5a/0x310 [ 92.193526][ T4402] ? lock_chain_count+0x20/0x20 [ 92.198401][ T4402] ? dup_task_struct+0x57/0x700 [ 92.203270][ T4402] dup_task_struct+0x57/0x700 [ 92.207963][ T4402] ? lockdep_hardirqs_on+0x94/0x140 [ 92.213182][ T4402] copy_process+0x621/0x4070 [ 92.217806][ T4402] ? verify_lock_unused+0x140/0x140 [ 92.223051][ T4402] ? idle_dummy+0x10/0x10 [ 92.227410][ T4402] kernel_clone+0x24b/0x900 [ 92.231932][ T4402] ? create_io_thread+0x170/0x170 [ 92.237008][ T4402] __se_sys_clone3+0x32d/0x3f0 [ 92.241815][ T4402] ? __x64_sys_clone3+0x60/0x60 [ 92.246688][ T4402] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.252710][ T4402] ? _copy_to_user+0xea/0x130 [ 92.257443][ T4402] ? lockdep_hardirqs_on+0x94/0x140 [ 92.262682][ T4402] do_syscall_64+0x4c/0xa0 [ 92.267123][ T4402] ? clear_bhb_loop+0x60/0xb0 [ 92.271817][ T4402] ? clear_bhb_loop+0x60/0xb0 [ 92.276532][ T4402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.282448][ T4402] RIP: 0033:0x7fca03b9eec9 [ 92.286899][ T4402] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 92.306569][ T4402] RSP: 002b:00007ffd7ee98238 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 92.315019][ T4402] RAX: ffffffffffffffda RBX: 00007fca03b5a460 RCX: 00007fca03b9eec9 [ 92.323092][ T4402] RDX: 00007fca03b5a460 RSI: 0000000000000058 RDI: 00007ffd7ee98290 [ 92.331109][ T4402] RBP: 00007fca0498f6c0 R08: 00007fca0498f6c0 R09: 00007ffd7ee98377 [ 92.339152][ T4402] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 92.347142][ T4402] R13: 000000000000006e R14: 00007ffd7ee98290 R15: 00007ffd7ee98378 [ 92.355143][ T4402] [ 92.707572][ T4402] memory: usage 4kB, limit 8kB, failcnt 38 [ 92.718307][ T4402] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 92.748671][ T4402] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 92.787350][ T4402] Memory cgroup stats for /syz4/test: [ 92.787879][ T4402] anon 0 [ 92.787879][ T4402] file 0 [ 92.787879][ T4402] kernel 4096 [ 92.787879][ T4402] kernel_stack 0 [ 92.787879][ T4402] pagetables 0 [ 92.787879][ T4402] sec_pagetables 0 [ 92.787879][ T4402] percpu 0 [ 92.787879][ T4402] sock 0 [ 92.787879][ T4402] vmalloc 0 [ 92.787879][ T4402] shmem 0 [ 92.787879][ T4402] zswap 0 [ 92.787879][ T4402] zswapped 0 [ 92.787879][ T4402] file_mapped 0 [ 92.787879][ T4402] file_dirty 0 [ 92.787879][ T4402] file_writeback 0 [ 92.787879][ T4402] swapcached 8192 [ 92.787879][ T4402] anon_thp 0 [ 92.787879][ T4402] file_thp 0 [ 92.787879][ T4402] shmem_thp 0 [ 92.787879][ T4402] inactive_anon 0 [ 92.787879][ T4402] active_anon 0 [ 92.787879][ T4402] inactive_file 0 [ 92.787879][ T4402] active_file 0 [ 92.787879][ T4402] unevictable 0 [ 92.787879][ T4402] slab_reclaimable 1544 [ 92.787879][ T4402] slab_unreclaimable 1880 [ 92.787879][ T4402] slab 3424 [ 92.787879][ T4402] workingset_refault_anon 0 [ 93.013638][ T4438] Zero length message leads to an empty skb [ 93.825726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 93.941200][ T4451] netlink: 'syz.3.22': attribute type 4 has an invalid length. [ 94.164698][ T4456] loop2: detected capacity change from 0 to 7 [ 94.186249][ T4362] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.213074][ T4364] Dev loop2: unable to read RDB block 7 [ 94.229252][ T4364] loop2: unable to read partition table [ 94.250452][ T4364] loop2: partition table beyond EOD, truncated [ 94.280086][ T4456] Dev loop2: unable to read RDB block 7 [ 94.295641][ T4456] loop2: unable to read partition table [ 94.320378][ T4456] loop2: partition table beyond EOD, truncated [ 94.346092][ T4403] syz.4.13 (4403) used greatest stack depth: 18832 bytes left [ 94.374031][ T4456] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.405975][ T4362] usb 4-1: Using ep0 maxpacket: 8 [ 94.427422][ T4362] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 94.465874][ T4362] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 94.504227][ T4402] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.13,pid=4402,uid=0 [ 94.506714][ T4362] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.537589][ T27] audit: type=1326 audit(1787594087.929:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.1.24" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca8179e0d9 code=0x0 [ 94.546947][ T4402] Memory cgroup out of memory: Killed process 4402 (syz.4.13) total-vm:104484kB, anon-rss:1396kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 94.669791][ T4362] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 94.728195][ T4362] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 94.752155][ T4362] usb 4-1: config 168 interface 0 has no altsetting 0 [ 94.776891][ T3639] Dev loop2: unable to read RDB block 7 [ 94.782776][ T3639] loop2: unable to read partition table [ 94.795406][ T3639] loop2: partition table beyond EOD, truncated [ 94.803510][ T4362] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 94.825850][ T4362] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 94.845752][ T4362] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.885787][ T4362] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 94.941197][ T4362] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 94.980821][ T4362] usb 4-1: config 168 interface 0 has no altsetting 0 [ 95.014437][ T4362] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 95.050454][ T4362] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 95.090722][ T4472] input: syz1 as /devices/virtual/input/input5 [ 95.132526][ T4362] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.189726][ T4362] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 95.228111][ T4362] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 95.272361][ T4362] usb 4-1: config 168 interface 0 has no altsetting 0 [ 95.300446][ T4362] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.324301][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.347329][ T4362] usb 4-1: Product: syz [ 95.359244][ T4362] usb 4-1: Manufacturer: syz [ 95.366388][ T4362] usb 4-1: SerialNumber: syz [ 95.376184][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.598818][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.636608][ T126] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 95.681276][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.774642][ T126] as10x_usb: device has been detected [ 95.782765][ T126] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 95.846622][ T126] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 95.921240][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.938059][ T4475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.968298][ T4475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.983502][ T126] as10x_usb: error during firmware upload part1 [ 96.010155][ T4475] block device autoloading is deprecated and will be removed. [ 96.015013][ T126] Registered device Abilis Systems DVB-Titan [ 96.150423][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 96.167366][ T4362] adutux 4-1:168.0: interrupt endpoints not found [ 96.181401][ T14] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 96.208302][ T4362] usb 4-1: USB disconnect, device number 2 [ 96.214462][ T14] usb 5-1: config 0 has no interface number 0 [ 96.229248][ T14] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 96.251345][ T14] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 96.273441][ T14] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.288838][ T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 96.298417][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.335480][ T14] usb 5-1: config 0 descriptor?? [ 96.376115][ T14] ldusb 5-1:0.55: Interrupt in endpoint not found [ 96.586240][ T14] usb 5-1: USB disconnect, device number 2 [ 96.729211][ T4512] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.816395][ T4362] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.005812][ T4362] usb 4-1: Using ep0 maxpacket: 8 [ 97.028512][ T4362] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 97.046243][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 97.053574][ T4525] sock: sock_set_timeout: `syz.0.39' (pid 4525) tries to set negative timeout [ 97.054546][ T4362] usb 4-1: Product: syz [ 97.085815][ T4362] usb 4-1: Manufacturer: syz [ 97.091514][ T4362] usb 4-1: SerialNumber: syz [ 97.136602][ T4362] usb 4-1: config 0 descriptor?? [ 97.154094][ T4362] gspca_main: sq905-2.14.0 probing 2770:9120 [ 97.600957][ T4362] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 97.610881][ T4362] sq905: probe of 4-1:0.0 failed with error -71 [ 97.650373][ T4362] usb 4-1: USB disconnect, device number 3 [ 97.979329][ T126] usb 3-1: USB disconnect, device number 2 [ 98.020573][ T126] Unregistered device Abilis Systems DVB-Titan [ 98.028126][ T126] as10x_usb: device has been disconnected [ 98.465504][ T4567] __nla_validate_parse: 3 callbacks suppressed [ 98.465522][ T4567] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.48'. [ 98.565888][ T4362] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.594577][ T4566] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.48'. [ 98.766162][ T4362] usb 5-1: Using ep0 maxpacket: 8 [ 98.779364][ T4362] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.812888][ T4575] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 98.819671][ T4362] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.869615][ T4362] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 98.908778][ T4362] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 98.941943][ T4362] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.971588][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.010520][ T4362] hub 5-1:1.0: bad descriptor, ignoring hub [ 99.030394][ T4362] hub: probe of 5-1:1.0 failed with error -5 [ 99.055442][ T4362] cdc_wdm 5-1:1.0: skipping garbage [ 99.073435][ T4362] cdc_wdm 5-1:1.0: skipping garbage [ 99.084645][ T4362] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 99.104162][ T4362] cdc_wdm 5-1:1.0: Unknown control protocol [ 99.477028][ T4325] usb 5-1: USB disconnect, device number 3 [ 99.643096][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.712841][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.762457][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.820886][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 101.476500][ T4636] device syzkaller1 entered promiscuous mode [ 101.832205][ T4643] loop2: detected capacity change from 0 to 7 [ 101.896994][ T4643] Dev loop2: unable to read RDB block 7 [ 101.902754][ T4643] loop2: unable to read partition table [ 101.956495][ T4643] loop2: partition table beyond EOD, truncated [ 102.003500][ T4643] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.533322][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.578427][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.617061][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.663026][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 102.688048][ T4363] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.807839][ T4667] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.817120][ T4667] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.825934][ T4667] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.834678][ T4667] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.899883][ T4363] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 102.945749][ T4363] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 102.953903][ T4363] usb 5-1: Product: syz [ 103.011132][ T4363] usb 5-1: SerialNumber: syz [ 103.055458][ T4363] usb 5-1: config 0 descriptor?? [ 103.237758][ T4672] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4232229815 (16928919260 ns) > initial count (6530613556 ns). Using initial count to start timer. [ 103.300282][ T4363] hso 5-1:0.0: Failed to find BULK IN ep [ 103.300734][ T4677] ------------[ cut here ]------------ [ 103.312143][ T4677] WARNING: CPU: 1 PID: 4677 at arch/x86/kvm/x86.c:11275 kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.322620][ T4677] Modules linked in: [ 103.331071][ T4677] CPU: 1 PID: 4677 Comm: syz.2.75 Not tainted syzkaller #0 [ 103.338686][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.348902][ T4677] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.355765][ T4677] Code: e8 71 5f c3 00 e9 bb ef ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 36 e6 ff ff 4c 89 f7 e8 36 5f c3 00 e9 29 e6 ff ff e8 ac 25 72 00 <0f> 0b e9 81 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 20 ec [ 103.375600][ T4677] RSP: 0018:ffffc9000540fc98 EFLAGS: 00010287 [ 103.385637][ T4677] RAX: ffffffff81100be4 RBX: ffff888073248000 RCX: 0000000000080000 [ 103.393746][ T4677] RDX: ffffc9000fd4d000 RSI: 00000000000008e7 RDI: 00000000000008e8 [ 103.401830][ T4677] RBP: ffff8880561c6000 R08: dffffc0000000000 R09: 1ffffffff216246d [ 103.409913][ T4677] R10: dffffc0000000000 R11: fffffbfff216246e R12: ffffc900053f37f0 [ 103.417981][ T4677] R13: ffff888073248030 R14: ffff8880732481ca R15: dffffc0000000000 [ 103.426061][ T4677] FS: 00007efce97d46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 103.435053][ T4677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.441741][ T4677] CR2: 0000001b3021bff8 CR3: 000000007bcf3000 CR4: 00000000003526e0 [ 103.449825][ T4677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.457895][ T4677] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.465972][ T4677] Call Trace: [ 103.469306][ T4677] [ 103.472283][ T4677] ? get_task_pid+0x1e/0x300 [ 103.476989][ T4677] ? get_task_pid+0x1e/0x300 [ 103.481650][ T4677] ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0 [ 103.487485][ T4677] kvm_vcpu_ioctl+0x986/0xd00 [ 103.492236][ T4677] ? xa_release+0x50/0x50 [ 103.496689][ T4677] ? __fget_files+0x28/0x460 [ 103.501360][ T4677] ? bpf_lsm_file_ioctl+0x5/0x10 [ 103.506404][ T4677] ? security_file_ioctl+0x7c/0xa0 [ 103.511575][ T4677] ? xa_release+0x50/0x50 [ 103.515999][ T4677] __se_sys_ioctl+0xfa/0x170 [ 103.520664][ T4677] do_syscall_64+0x4c/0xa0 [ 103.525151][ T4677] ? clear_bhb_loop+0x60/0xb0 [ 103.529956][ T4677] ? clear_bhb_loop+0x60/0xb0 [ 103.534711][ T4677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.540728][ T4677] RIP: 0033:0x7efce899e0d9 [ 103.545198][ T4677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.564926][ T4677] RSP: 002b:00007efce97d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.573461][ T4677] RAX: ffffffffffffffda RBX: 00007efce8c26090 RCX: 00007efce899e0d9 [ 103.581539][ T4677] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 103.589623][ T4677] RBP: 00007efce8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 103.597716][ T4677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.605790][ T4677] R13: 00007efce8c26128 R14: 00007efce8c26090 R15: 00007ffeb9bb7e88 [ 103.613873][ T4677] [ 103.617007][ T4677] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.624349][ T4677] CPU: 1 PID: 4677 Comm: syz.2.75 Not tainted syzkaller #0 [ 103.631602][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.641708][ T4677] Call Trace: [ 103.645032][ T4677] [ 103.648011][ T4677] dump_stack_lvl+0x188/0x24e [ 103.652750][ T4677] ? memcpy+0x3c/0x60 [ 103.656783][ T4677] ? show_regs_print_info+0x12/0x12 [ 103.662051][ T4677] ? load_image+0x410/0x410 [ 103.666622][ T4677] panic+0x2d3/0x710 [ 103.670577][ T4677] ? bpf_jit_dump+0xd0/0xd0 [ 103.675169][ T4677] __warn+0x2f8/0x4f0 [ 103.679200][ T4677] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.685067][ T4677] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.690936][ T4677] report_bug+0x2ba/0x4f0 [ 103.695337][ T4677] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.701225][ T4677] handle_bug+0x3a/0x70 [ 103.705425][ T4677] exc_invalid_op+0x16/0x40 [ 103.709966][ T4677] asm_exc_invalid_op+0x16/0x20 [ 103.714848][ T4677] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.721298][ T4677] Code: e8 71 5f c3 00 e9 bb ef ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 36 e6 ff ff 4c 89 f7 e8 36 5f c3 00 e9 29 e6 ff ff e8 ac 25 72 00 <0f> 0b e9 81 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 20 ec [ 103.740945][ T4677] RSP: 0018:ffffc9000540fc98 EFLAGS: 00010287 [ 103.747046][ T4677] RAX: ffffffff81100be4 RBX: ffff888073248000 RCX: 0000000000080000 [ 103.755044][ T4677] RDX: ffffc9000fd4d000 RSI: 00000000000008e7 RDI: 00000000000008e8 [ 103.763323][ T4677] RBP: ffff8880561c6000 R08: dffffc0000000000 R09: 1ffffffff216246d [ 103.771414][ T4677] R10: dffffc0000000000 R11: fffffbfff216246e R12: ffffc900053f37f0 [ 103.779414][ T4677] R13: ffff888073248030 R14: ffff8880732481ca R15: dffffc0000000000 [ 103.787420][ T4677] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.793367][ T4677] ? kvm_arch_vcpu_ioctl_run+0x1e24/0x22c0 [ 103.799208][ T4677] ? get_task_pid+0x1e/0x300 [ 103.803835][ T4677] ? get_task_pid+0x1e/0x300 [ 103.808461][ T4677] ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0 [ 103.814213][ T4677] kvm_vcpu_ioctl+0x986/0xd00 [ 103.818922][ T4677] ? xa_release+0x50/0x50 [ 103.823283][ T4677] ? __fget_files+0x28/0x460 [ 103.827927][ T4677] ? bpf_lsm_file_ioctl+0x5/0x10 [ 103.832938][ T4677] ? security_file_ioctl+0x7c/0xa0 [ 103.838098][ T4677] ? xa_release+0x50/0x50 [ 103.842457][ T4677] __se_sys_ioctl+0xfa/0x170 [ 103.847110][ T4677] do_syscall_64+0x4c/0xa0 [ 103.851580][ T4677] ? clear_bhb_loop+0x60/0xb0 [ 103.856311][ T4677] ? clear_bhb_loop+0x60/0xb0 [ 103.861036][ T4677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.866967][ T4677] RIP: 0033:0x7efce899e0d9 [ 103.871418][ T4677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.891057][ T4677] RSP: 002b:00007efce97d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.899504][ T4677] RAX: ffffffffffffffda RBX: 00007efce8c26090 RCX: 00007efce899e0d9 [ 103.907503][ T4677] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 103.915611][ T4677] RBP: 00007efce8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 103.923623][ T4677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.931620][ T4677] R13: 00007efce8c26128 R14: 00007efce8c26090 R15: 00007ffeb9bb7e88 [ 103.939635][ T4677] [ 103.943287][ T4677] Kernel Offset: disabled [ 103.947692][ T4677] Rebooting in 86400 seconds..