last executing test programs: 15.980801266s ago: executing program 1 (id=2): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xf7e6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) connect$can_bcm(r3, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100004001"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) 14.929685686s ago: executing program 1 (id=6): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) ioctl$TIOCSETD(r2, 0x5423, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r5]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x2, 0x0, 0xa, &(0x7f0000000180)}) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) 13.936171615s ago: executing program 0 (id=10): r0 = gettid() prlimit64(r0, 0xe, &(0x7f00000001c0)={0xb, 0x5}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r5, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb03ba0f658d65d2e) futex(&(0x7f000000cffc), 0x5, 0x80000004, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffffffe1"], 0x48) 12.537390152s ago: executing program 0 (id=13): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x32, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r4, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000003c0)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 11.432404313s ago: executing program 0 (id=14): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xf7e6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) connect$can_bcm(r3, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100004001"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) 10.815574584s ago: executing program 2 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setresuid(0xee00, 0xee00, 0xee00) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2000, @empty}, 0x1c) dup2(r2, 0xffffffffffffffff) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000040), 0x4001) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5", 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3757b9ec2", 0x7a}, {&(0x7f0000001a80)="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", 0x436}], 0x2}}], 0x3, 0x0) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10.340515993s ago: executing program 0 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file5\x00', 0x1000, 0x400720) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x4a20, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028b6296beb8feeee7e"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x2004088c) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 9.933485701s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900c96b2fd47a30000000002c000000050a03000000000000000000020000060900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a967950a7929c2c196ffac7e80fde27"], 0x74}}, 0x0) 9.166040566s ago: executing program 2 (id=17): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000300)=0x6a1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) 9.146142196s ago: executing program 3 (id=18): r0 = getpid() r1 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x8c1e, 0x2, 0x2, 0x10}, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffc, 0x10, 0x10, 0x0, @ib={0x1b, 0x6, 0x4, {"b216ec8f514fac66f45abd2f6af28753"}, 0x9, 0x0, 0x63}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet(r5, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20) 9.083791977s ago: executing program 4 (id=5): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.025973659s ago: executing program 1 (id=19): r0 = getpid() r1 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='xen_mc_callback\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x8c1e, 0x2, 0x2, 0x10}, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffc, 0x10, 0x10, 0x0, @ib={0x1b, 0x6, 0x4, {"b216ec8f514fac66f45abd2f6af28753"}, 0x9, 0x0, 0x63}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet(r6, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20) 5.342840928s ago: executing program 3 (id=20): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.22987531s ago: executing program 0 (id=21): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000300)=0x6a1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 5.22094038s ago: executing program 1 (id=22): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x3, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x9}, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) 5.170131631s ago: executing program 4 (id=23): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 5.122006672s ago: executing program 3 (id=24): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) 5.104816113s ago: executing program 4 (id=25): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x7f, &(0x7f0000000800)={0x0, 0x17, 0x2, 'H\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x82, 0x2, "47d8"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000380)={0x0, 0x13, 0x2, 'i\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x81, 0x2, "b3e8"}, 0x0, 0x0, 0x0, 0x0}) 3.733833028s ago: executing program 1 (id=26): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd27, 0x10000, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0xc800) 3.732217909s ago: executing program 2 (id=27): mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2101c84, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfff2, 0xc}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0xffe0}}]}}]}, 0x38}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.731791179s ago: executing program 2 (id=28): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="d4570847b1937948b7111dd96d83d8a455529f100357457d4f0f5c91105a3c58131bf10de83dc9ee9d239e5e89e59edb35abbf64c1a92109f8eb01bf689b90055bd51506423f4e456274a778c228aeb5d65e191f1bbb21f0f6dd25edc276f1264580344fed0ee32709a73a160c7578465757b87291dcefc84e58ae39e56fb10d42fd5a34aa4fca42ff53e3c9467d8dc1278a34d406df142092ed6661092ce85816f8e6a119860c3314d0e13f5d50a266f738b71fd531396d768c35bc45c042ee7d69b0b7b90da2aab111667ef006593c99c27c67bc3812dbc9f1994b4830ed54ed1f0bdf4966c1d20bddeb83972b15a86ed5fdef279ce58447059a2ba491d21120dc7e0a1d8cc5eff2deedec41057e178eb95ff00fed1e7095decea9cfd52c0a7438dbfc135c796bfa2bb290ab03f35ea2f2d72b8b0503f4972d6d7c60bf5a80981c4f9826007fdcaad959e1c90cace1664480e98069a86f1c059d112e9da27fa71716f530c2a5bf2296d09e5fcc726a8e5287499f563089bdcb6bf3779298dc9b6f739190f434983651f5f29857cbf62faac8c20bc7ac69334fe99e70c29a1294d0ee89dd6c9cd57845e64b289f84220b6e1fe9e81381cf688fa945a68eed3ebc0e8c1efa403b5a4cde68a24a863c17c9f8ad6d24a09e60d83fcf2beb51e6faac173ac98bb2269d7523f8654417ffe70ab87b477045715ad6aa3db39d3f32760fe25bdc0f3e083232ea6a55da3986cbdbd654ed71a4780f7dc3edb628e14287963c3b5f7f177a35071d7f1169351863516fc96f8cce8781439de06c9f76d6e303518493676b3b135900b89eeac40d994936e3a5a6bbc2f2cf6a2a8ed0ad2f81386f8c327cf9b15f8039df0a950641f7d14728194d7640f4cf7e28e1f89b2485857f5f70866844cead5b29f5d9166dce885bd4343bb1fd2c8437105e8e295c27cb44b10a01590c0fdddbc8abc71f777171adef0a45fe5c92b39e32a9c119c6c9a340be0df8cb3b8b77a2a6b5ba1ed4449674811dfae90889b3fb174e11fb947e15232d57bdeee29db4bc0816a878120e84e0ec40a99fd2b88bdb8502922d7015dff05a94ce7c79852bb7ea9a043fa629afc702300d49ac7fbe67a7b0161d2703348b8d0efb144f2920e341debd821ddc4a12a3f89891f24427a169c741568a06825d4f12d64da0935f2f217798b41f44b90140ac2f4cf08219f42b5d30bdd52e76c74100326babb4d1bc576c944fc5bd3a985f9b209a6a473e4fe3afe0c110b630ac443b75c6e13b20810fd3e5ecf9c6785dabeb758a5ddcfb1ad889b5349606ead8f3fa34ba8ea706de19da6b3a0bc36c4c2e3173a9c929157aedf649699f1f8887a31fccebbd7f28843c91753483541b2b895e642855f856e3951e4853fb70b4090512112e813edaa8edb0a5ddf2c329dde5381e6a5716ec9d5a79d9438ba6de736ac9ad45754bfe7227ada116507c84ffd942a84f4ce115d4fd9029f17e62383ce5fc7048a3f85d2709f2375334f1fce2f8b1af99742869f00f2d2fa37ccaf385dc2eaabe2f67671f06addf403d94bffda4bf5747a8773e9ce3beb7ca2b2e2714dd50eb387e226d834a0696b689b004cbb5b3a5aa7a2878be737f4dd7d65bf976f8deb39ad07265be604ce4f9246225f91cd10afd4725d800eeae4abcd0fd17fdf11257b19db7dcb4b9c34dc3cee03dce7d9ab6f7ac5e12316ce9879abb4432f87faa2b25094963f48582fc8a617067b1a0f0960ddf8cfd5065352d9aba09d37b9b10c7a8f702547fd86f34b62183cc883e41c40f5b0676eb077bda0204bd08dae7e7922b7934f2b449229950b4fc54cd7dafc709d828e9301be8c767e0f3bc420cd10ee3dac383bb8ab8aefe3515d6b959dfe578d256f375751beecbd24a152939b59f913728e47207b8a642b100aadfc685cd7d77ba43ec2298db4f551d851991723cd1cdd42f2837e7fd5df3dbf52945ea9a97b73d8915336023beb9bd3c91d9b1c7f5d49b0cba9c30016bb3216e9d6e9070a5dff813ce85a2a36fffa6bf750cf21eaa91a754f9788663690189fe58a9205e4733b6ac0711e98123f145a87eceb00561ac7d1a699d00384c57f6dc92939f45956d489946a365440d40911dabed15b67748000e0d244b21276032667f66119a2485f31d2c098da4cbbd0c5bbf8373fb53b662e48fc572b6e6c5700a360c5b905b548eaee0aa928b38703c84f7ed4a9a858801ad26c2911d4bbbfc1f46a070fa64db31a619dad30ba96eea1edccc6b0e67b7acffe1261af8e08ffb27fb625820f7a823c63febe0fb32e8907415a973cb42c8752d6a9ac3af2bcbd91d5e5c3ac288b2e2a92cb860d97cbf2b17da25b5333d90156493076ab457afb59f3443894a3c1d3d8b1ce7cbd47d36a7a64bcb194ea00d46181a7b65e3e104bea46434643ac722d04437b72f518e98289edba99559dd6aa03af60da7a00ad4f6105d31745b808a243c8ee9ebd70fa8516cd471473a1608d206fa93885e696f668a397cf713fe9c2001fdbb6e07f124782f5891bdc238db61a7d7f0575072abfadad9593a6ba8b1c89351784d0c722af86989e137809aa5b7833462a71ceca8d7ee24e883577a128652125bef2bd7558f77bb566719f2672fb07f890f892d2d3a725d1d907a696d2d97065c001cfd9e97d60fe2f584992b9bd80f618531af2f3d5df2c5717da36bb2a64853612b8f1f881c2a306b1e9c4c369e33e5675e0f9195e570ba0b2e0594838ad9aef53686a2c4dfd9eae21a826501af92d48e0d857ee0876cd09996c65b50333ab256b439fe89d836d77135079c51f87b1fb58c446a8d52e3c6432c111af4b66d57306659c81088ea0ef96a2f1b97dfd8beeb578b3016eedb65e2ec190e1ba08c9c37f85e102fdc972c9ba2a4a6f11a79831ed8087a22d1d978f005f6ee8869b8c1717a42b75378a98a5f9b1725cc323151b1996468068afd2827ccede23ffe279aa7b45d7dc683db3a9efb9f7b2093765d7c178c09bc0edeccf18c9ee5845cba0c2dda463989faf6d018e330cb52bc5d7913e6e26ea8cde26b7251d828da7b83a1ecbda1ecb3344b3c60f606a419d868da70ade78c3ecebd9b2bcff9cef2507907f011cdf9b072b1dcc872e5b29365b0f4a7d6c581c9bf42320ad9c3a52b419b73d0c0f616f2f630df9bdb5f3b88bbcdfe618180131be8357099f9e8ea457eb1dcf9324c7081687899fa81bc267e87bdd80b88150f6745cb735936876ca6b3c7a492698d32d762baf5b482fa5f26351cf18018fc1cb49411fb6663c474ea29d2a9d4ad703119fe7a6ed2ce6f97287e7660617c4e38c7b1aa1ee5df253c625a1b1d29c042b6d5dbfb44633dd4c0e93992aff81024c408ff00d24d9c98c07c1d4fe5656e3b053914a09b8f2968008c5c4c115d9f8640136254303cc095f95fa335aa858510dad731af19eb0df690ab0edd2bbed96679dad71ccf94da088cf62b34580548027703f92525b41d36297e71d988901e3e086c0d8f425732e0134a9ac2b111a5745c57d9a138b6a4055e7e3ba220a47fef3474e5bba15d3f4711e1d00f2e29f1a1082f4518a08e36451e887963193b08c3e255f22383c7001540b05836b30e912adaef4130ae8edb9c891c398855b218e76eb94332538b7add4b9261e873a6b91785f5ea6c82306dff166d654987361917fe83fcc5be9be3e8644d96d5a7c7bb445fc1b2c0a48814fabc1b3a190674b5f159a5b041dd317c4cf06076d6c9a7572054a09f2b9b74f14289daf5a16dbe6de85ed6128c91a18518f069451dbe8b9f57dab9bcecb4cc53e6612b90f5e644eaed1765d45ad6e6d9f0358fd3a885df1c572cfdb511bbca345628206d89b16f9251be85e1c617b15302bb86397e0763d757c70362dea82688fe32d0a714d598f3131c2a3a4414898fccdfd901dc8fde466ca269bf211b9863e360ea4aab7fdc107ddfd7ede043708804386e0180542a0802745407ceecf6adb2a9a5614cde89d413f49a32733b875281c8cab7ac5815a92fda65ea23ce2feab66606605f49f526cc336d2a5a067c185845941e4142ba82899966fc95bf40570967ec0a6fe130dccbaca48d251adb0f81a170e3dfac6f02e7c8bb5fa6f5602bdc73267c6756e1a374d5e8b19a92ff39662db3ac9f761b2e9e015c51815e5f111d416ee0a67f3adad81f8c64dad193f19048bb46ad1fa786a0c3f36119bd14bb9ad96f2182a19504e15f2cfd885e5862f4d2467053ee1faa978bd2267d56401a548f17d34adba7e9186a2a58931a69bb815dd50552995aa8ceeb4eda5330227f2078eeb72c9b6845c04679868eb5f6a0f0da8c1ea2b0c7de8781d9fc129561a7b283aa488a117269116f81e44a261ed6c0fc4467125d83fd306bce3c6a29df8db000036cd851d805dda3bf218c800d77fc9837158f883b962efc7886cbe93cc137e0bff8387c4b7d64df8b89805dbf5698babf22be7d735bb7baedd43bb3f577989ddaf83892c55771a10beeb2326f3e766fd40eef0d0ff82969bf5534cbffff4fd493fc34d58f322d22fe21101c4248756ad844876d3a7f3999d14c0962e68eaeac83d44d22d498e04673343f4a3a60abfa4f45ea2af9b65982ff5899fd509beccfc8e7dd125c08096e9e5fb71edc590abdd53592d67afec4d227170c5f6e4f1daceecaec968448c033c0a9b0390a12b5af4b973c0cb7c072bdfc8b4158ea4cc9114816cf1242199d0d62a013c4e9646338bd284fede8c93114d2608c71ae1d0891a3583daa51971a5ba51251f3b9ac6d8a02e0fcb69744a74762e13c24e3f1d8e6e3e2956b99b97506e959ca3c7141faa5e2404c62854ef2b9e75a75760a71003e1b0c004752864f51ed600fc306773f635587504e3cf432d68c2fbce21c26a47dcf3358e434dc2b97941a5bb0e35744e4f3d53fee5719cc931f93e150744baf61754726b84a052bde27f666e472672f1f8f6381bd25bc619ba51a", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.731340179s ago: executing program 3 (id=29): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4004, @fd=r2, 0xffffffffffffffff, &(0x7f00000004c0)=""/232, 0xffffff06, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0xfffffffffffffeb3) 2.977695393s ago: executing program 1 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000010) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0xe809, 0x1, 0x3, 0x0, 0x200, 0x2, 0x4, 0xcc0, 0x100000000000001, 0x1, 0x94d6, 0x400, 0x0, 0x80d, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) socket$netlink(0x10, 0x3, 0xc) 2.836126326s ago: executing program 2 (id=31): r0 = getpid() r1 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x8c1e, 0x2, 0x2, 0x10}, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffc, 0x10, 0x10, 0x0, @ib={0x1b, 0x6, 0x4, {"b216ec8f514fac66f45abd2f6af28753"}, 0x9, 0x0, 0x63}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet(r5, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20) 1.769959906s ago: executing program 4 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffd68, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x18) r3 = epoll_create1(0x80000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) 1.658774018s ago: executing program 0 (id=33): r0 = getpid() r1 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='xen_mc_callback\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x8c1e, 0x2, 0x2, 0x10}, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffc, 0x10, 0x10, 0x0, @ib={0x1b, 0x6, 0x4, {"b216ec8f514fac66f45abd2f6af28753"}, 0x9, 0x0, 0x63}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet(r6, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20) 0s ago: executing program 2 (id=34): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000002}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000340)={0xa, "0b7bc4a66be01d5825dd3b428bdaf81b09d62f889492181e47d7269646925cdb075dd45359e35a9cbd51fce8bb183d7cf7eea59ad53af07495c7b68171c9c2d5a808db86ee05de1e2acc2e97e3f0b757ed60b955a13f2f689a21f1005f7b79ecae3ccc86fc68c316fec463eea99e929738164909273844b8b2f483812b953a3f"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000740)=""/19, 0x13}, {&(0x7f0000000780)=""/72, 0x48}, {&(0x7f0000000a80)=""/137, 0x89}, {&(0x7f0000000b40)=""/69, 0x45}], 0x5, &(0x7f0000000c40)=""/190, 0xbe}}], 0x1, 0x40000001, &(0x7f0000000e00)={0x0, 0x989680}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 50.543615][ T4172] cgroup: Unknown subsys name 'net' [ 50.675737][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.213142][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.960186][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.104869][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.112689][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.121151][ T4186] device bridge_slave_0 entered promiscuous mode [ 54.132394][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.139461][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.147365][ T4186] device bridge_slave_1 entered promiscuous mode [ 54.192730][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.205914][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.224303][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.232964][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 54.287278][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 54.325728][ T4186] team0: Port device team_slave_0 added [ 54.335245][ T4186] team0: Port device team_slave_1 added [ 54.374849][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 54.416416][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.424124][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.432077][ T4182] device bridge_slave_0 entered promiscuous mode [ 54.440364][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.447328][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.473431][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.513096][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.520301][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.527999][ T4182] device bridge_slave_1 entered promiscuous mode [ 54.536259][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.543304][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.569217][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.588701][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.595911][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.604450][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.633333][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.640654][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.648344][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.655381][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.662896][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.671673][ T4188] device bridge_slave_0 entered promiscuous mode [ 54.700451][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.707544][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.715452][ T4188] device bridge_slave_1 entered promiscuous mode [ 54.732727][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.771820][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.790882][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.811134][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.817970][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.833270][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.840669][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.848371][ T4198] device bridge_slave_0 entered promiscuous mode [ 54.857687][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.868840][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.887392][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.894841][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.903738][ T4198] device bridge_slave_1 entered promiscuous mode [ 54.919661][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.937618][ T4182] team0: Port device team_slave_0 added [ 54.973709][ T4182] team0: Port device team_slave_1 added [ 54.996478][ T4191] team0: Port device team_slave_0 added [ 55.030875][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.041829][ T4191] team0: Port device team_slave_1 added [ 55.049102][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.061990][ T4188] team0: Port device team_slave_0 added [ 55.075386][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.082711][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.109093][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.137353][ T4188] team0: Port device team_slave_1 added [ 55.153593][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.160702][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.186814][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.225416][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.232600][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.258682][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.271802][ T4198] team0: Port device team_slave_0 added [ 55.278061][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.285206][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.311526][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.329613][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.336833][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.363034][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.377245][ T4198] team0: Port device team_slave_1 added [ 55.402845][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.409815][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.435844][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.477303][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.484371][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.510377][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.522896][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.529852][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.557367][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.579360][ T4182] device hsr_slave_0 entered promiscuous mode [ 55.586200][ T4182] device hsr_slave_1 entered promiscuous mode [ 55.596037][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.604028][ T4182] Cannot create hsr debugfs directory [ 55.650632][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.657363][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.664026][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.671813][ T4191] Cannot create hsr debugfs directory [ 55.694723][ T4198] device hsr_slave_0 entered promiscuous mode [ 55.700915][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 55.701322][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 55.713880][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 55.714227][ T4198] device hsr_slave_1 entered promiscuous mode [ 55.719905][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 55.732194][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.739840][ T4198] Cannot create hsr debugfs directory [ 55.757287][ T4188] device hsr_slave_0 entered promiscuous mode [ 55.764828][ T4188] device hsr_slave_1 entered promiscuous mode [ 55.771761][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.779328][ T4188] Cannot create hsr debugfs directory [ 55.785125][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 55.964933][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.977339][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.015543][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.026682][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.153904][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.181411][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.195677][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.206066][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.216883][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.233301][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.254121][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.271066][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.300535][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.359266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.369100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.381290][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.397440][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.410610][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.420781][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.456558][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.465481][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.476262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.485883][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.493108][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.502201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.542849][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.558636][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.566025][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.575151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.584053][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.591183][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.625515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.635119][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.646416][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.659391][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.673531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.685363][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.702002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.709700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.746618][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.753587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.762008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.769635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.779296][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.789119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.798134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.807004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.815621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.824298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.833135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.844231][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.864270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.874019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.882892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.892519][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.899578][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.908399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.917234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.925711][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.932795][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.940666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.949187][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.958010][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.965202][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.979359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.987584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.996280][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.019946][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.030839][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.039881][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.048962][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.056090][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.072910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.095692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.119590][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.134740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.158070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.166658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.183455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.197874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.206813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.219018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.227414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.236607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.249031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.258521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.267419][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.274526][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.305173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.313219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.323978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.332841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.341867][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.350556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.359071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.367778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.376787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.385831][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.392983][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.401603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.413726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.423007][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.437423][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.449038][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.475560][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.488161][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.497645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.507345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.516626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.525466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.534800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.543134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.550884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.559247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.571822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.581898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.591304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.618702][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.639292][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.650837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.659541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.678106][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.690708][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.720215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.729918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.742662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.752204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.761977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.769811][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.782833][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.791017][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 57.797122][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 57.808150][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 57.820850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.829315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.839120][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 57.839411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.856944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.867202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.876765][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.883903][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.884882][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 57.895668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.941077][ T4186] device veth0_vlan entered promiscuous mode [ 57.949448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.968069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.977044][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.984170][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.994275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.003226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.011500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.018999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.028270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.037191][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.045742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.054716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.066591][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.087398][ T4186] device veth1_vlan entered promiscuous mode [ 58.101550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.112384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.120500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.128384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.138752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.149349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.158308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.167107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.175723][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.184744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.195689][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.217022][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.247535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.258033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.268156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.278276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.297913][ T4186] device veth0_macvtap entered promiscuous mode [ 58.316006][ T4186] device veth1_macvtap entered promiscuous mode [ 58.346041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.358185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.367599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.376181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.384689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.395531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.404824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.413125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.423926][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.432386][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.442427][ T4182] device veth0_vlan entered promiscuous mode [ 58.462694][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.478950][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.504375][ T4182] device veth1_vlan entered promiscuous mode [ 58.512196][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.521970][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.531026][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.539665][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.548785][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.561430][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.578746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.589013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.608511][ T4188] device veth0_vlan entered promiscuous mode [ 58.617140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.626658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.635512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.647854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.656679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.666360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.674129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.682877][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.692051][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.701048][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.709760][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.736539][ T4188] device veth1_vlan entered promiscuous mode [ 58.748396][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.776362][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.791748][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.803040][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.825931][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.835529][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.851399][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.898791][ T4188] device veth0_macvtap entered promiscuous mode [ 58.916189][ T4182] device veth0_macvtap entered promiscuous mode [ 58.928785][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.951233][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.963530][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.980929][ T4188] device veth1_macvtap entered promiscuous mode [ 58.994358][ T4182] device veth1_macvtap entered promiscuous mode [ 59.005996][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.024880][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.035023][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.048469][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.058536][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.068126][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.076531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.085915][ T4198] device veth0_vlan entered promiscuous mode [ 59.129888][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.132578][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.149555][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.160176][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.162865][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.179712][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.191053][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.202335][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.212230][ T4198] device veth1_vlan entered promiscuous mode [ 59.219336][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.228494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.239660][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.248577][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.257728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.267612][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.296619][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.308016][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.319608][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.330334][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.342034][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.352355][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.362897][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.373168][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.384188][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.396385][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.410604][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.420517][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.429071][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.437688][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.446618][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.456127][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.476887][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.487027][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.496141][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.505299][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.520574][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.529688][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.538672][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.547369][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.557991][ T4191] device veth0_vlan entered promiscuous mode [ 59.573139][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.582016][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.594681][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.603939][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.632953][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.646712][ T4191] device veth1_vlan entered promiscuous mode [ 59.650549][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.704237][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.714928][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.725477][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.734402][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.746881][ T4198] device veth0_macvtap entered promiscuous mode [ 59.761204][ T4198] device veth1_macvtap entered promiscuous mode [ 59.819629][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.839404][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.850806][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.861081][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 59.861909][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.867338][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 59.877441][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.888546][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 59.894870][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.912253][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.928893][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.939554][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.951813][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 59.952713][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.963675][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 59.968812][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.984374][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.995399][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.006899][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.023795][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.033076][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.042427][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.051641][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.062159][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.078951][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.094573][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.110631][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.128106][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.138198][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.153849][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.193667][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.220240][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.237654][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.283055][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.291617][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.297191][ T4191] device veth0_macvtap entered promiscuous mode [ 60.311708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.325815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.351688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.370022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.408043][ T4293] qnx6: unable to read the first superblock [ 61.136984][ T4191] device veth1_macvtap entered promiscuous mode [ 61.175772][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.192127][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.206557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.215998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.238801][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.250507][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.269254][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.286390][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.306493][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.317536][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.336232][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.349258][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.362320][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.391783][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.419364][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.452171][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.466872][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.494905][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.520133][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.541109][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.551725][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.564349][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.574700][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.589785][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.614522][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.622113][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.631115][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 61.640134][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 61.662845][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.672182][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.700937][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.717275][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.754441][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.768458][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.786072][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.805850][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.823695][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.940693][ T4240] Bluetooth: hci0: command 0x0419 tx timeout [ 61.947567][ T4240] Bluetooth: hci1: command 0x0419 tx timeout [ 61.956561][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.984942][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.003018][ T4240] Bluetooth: hci2: command 0x0419 tx timeout [ 62.051323][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 62.059229][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 62.089174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.234062][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.259809][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.287356][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.311227][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.412465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.422007][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.451653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.615088][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.020424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.040012][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.049612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.058631][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.501679][ T4341] gfs2: not a GFS2 filesystem [ 64.737637][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 64.923387][ T4347] qnx6: unable to read the first superblock [ 65.666194][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.763702][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.060485][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.468215][ T4358] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 68.141809][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 68.174018][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 68.191278][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 69.301251][ T4375] infiniband syz2: set active [ 69.306146][ T4375] infiniband syz2: added ip6gretap0 [ 69.433900][ T4240] ip6gretap0 speed is unknown, defaulting to 1000 [ 69.805517][ T1335] cfg80211: failed to load regulatory.db [ 69.861280][ T4375] RDS/IB: syz2: added [ 69.865793][ T4375] smc: adding ib device syz2 with port count 1 [ 69.872137][ T4375] smc: ib device syz2 port 1 has pnetid [ 69.880383][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 69.950845][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 70.017334][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 70.078470][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 70.138864][ T4375] ip6gretap0 speed is unknown, defaulting to 1000 [ 70.205403][ T4240] ip6gretap0 speed is unknown, defaulting to 1000 [ 71.967830][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.979934][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.248552][ T4405] Zero length message leads to an empty skb [ 72.300281][ T1335] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.405674][ T4408] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 73.220081][ T1335] usb 5-1: Using ep0 maxpacket: 16 [ 73.360420][ T1335] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 73.372760][ T1335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.389488][ T1335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.590505][ T1335] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.204417][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.310486][ T1335] usb 5-1: Product: syz [ 74.314810][ T1335] usb 5-1: Manufacturer: syz [ 74.319400][ T1335] usb 5-1: SerialNumber: syz [ 76.070550][ T1335] usb 5-1: can't set config #1, error -71 [ 76.095916][ T1335] usb 5-1: USB disconnect, device number 2 [ 76.186283][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 76.219564][ T4430] [ 76.221944][ T4430] ====================================================== [ 76.228971][ T4430] WARNING: possible circular locking dependency detected [ 76.235993][ T4430] syzkaller #0 Not tainted [ 76.240405][ T4430] ------------------------------------------------------ [ 76.247502][ T4430] syz.2.34/4430 is trying to acquire lock: [ 76.253306][ T4430] ffff88801fe0a120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 76.262745][ T4430] [ 76.262745][ T4430] but task is already holding lock: [ 76.270109][ T4430] ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 76.278373][ T4430] [ 76.278373][ T4430] which lock already depends on the new lock. [ 76.278373][ T4430] [ 76.288771][ T4430] [ 76.288771][ T4430] the existing dependency chain (in reverse order) is: [ 76.297780][ T4430] [ 76.297780][ T4430] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 76.304983][ T4430] __mutex_lock_common+0x1eb/0x2390 [ 76.310703][ T4430] mutex_lock_nested+0x17/0x20 [ 76.315989][ T4430] ax25_setsockopt+0x830/0xa40 [ 76.321272][ T4430] __sys_setsockopt+0x2bf/0x3d0 [ 76.326637][ T4430] __x64_sys_setsockopt+0xb1/0xc0 [ 76.332179][ T4430] do_syscall_64+0x4c/0xa0 [ 76.337118][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.343533][ T4430] [ 76.343533][ T4430] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 76.351171][ T4430] __lock_acquire+0x2c33/0x7c60 [ 76.356547][ T4430] lock_acquire+0x197/0x3f0 [ 76.361566][ T4430] lock_sock_nested+0x44/0x100 [ 76.366846][ T4430] ax25_device_event+0x217/0x4f0 [ 76.372301][ T4430] raw_notifier_call_chain+0xcb/0x160 [ 76.378189][ T4430] __dev_notify_flags+0x178/0x2d0 [ 76.383735][ T4430] dev_change_flags+0xe3/0x1a0 [ 76.389016][ T4430] dev_ifsioc+0x147/0xe70 [ 76.393864][ T4430] dev_ioctl+0x55f/0xe50 [ 76.398629][ T4430] sock_do_ioctl+0x222/0x2f0 [ 76.403743][ T4430] sock_ioctl+0x4ed/0x6e0 [ 76.408590][ T4430] __se_sys_ioctl+0xfa/0x170 [ 76.413970][ T4430] do_syscall_64+0x4c/0xa0 [ 76.418902][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.425318][ T4430] [ 76.425318][ T4430] other info that might help us debug this: [ 76.425318][ T4430] [ 76.435543][ T4430] Possible unsafe locking scenario: [ 76.435543][ T4430] [ 76.442990][ T4430] CPU0 CPU1 [ 76.448349][ T4430] ---- ---- [ 76.453710][ T4430] lock(rtnl_mutex); [ 76.457706][ T4430] lock(sk_lock-AF_AX25); [ 76.464640][ T4430] lock(rtnl_mutex); [ 76.471138][ T4430] lock(sk_lock-AF_AX25); [ 76.475550][ T4430] [ 76.475550][ T4430] *** DEADLOCK *** [ 76.475550][ T4430] [ 76.483687][ T4430] 1 lock held by syz.2.34/4430: [ 76.488536][ T4430] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 76.497326][ T4430] [ 76.497326][ T4430] stack backtrace: [ 76.503206][ T4430] CPU: 1 PID: 4430 Comm: syz.2.34 Not tainted syzkaller #0 [ 76.510397][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.520452][ T4430] Call Trace: [ 76.523733][ T4430] [ 76.526667][ T4430] dump_stack_lvl+0x168/0x230 [ 76.531348][ T4430] ? load_image+0x3b0/0x3b0 [ 76.535854][ T4430] ? show_regs_print_info+0x20/0x20 [ 76.541061][ T4430] ? print_circular_bug+0x12b/0x1a0 [ 76.546256][ T4430] check_noncircular+0x274/0x310 [ 76.551193][ T4430] ? add_chain_block+0x940/0x940 [ 76.556126][ T4430] ? lockdep_lock+0xdc/0x1e0 [ 76.560721][ T4430] ? lockdep_unlock+0x134/0x2d0 [ 76.565575][ T4430] ? mark_lock+0x94/0x320 [ 76.569905][ T4430] __lock_acquire+0x2c33/0x7c60 [ 76.574768][ T4430] ? lock_chain_count+0x20/0x20 [ 76.579712][ T4430] ? mark_lock+0x94/0x320 [ 76.584041][ T4430] ? verify_lock_unused+0x140/0x140 [ 76.589238][ T4430] ? verify_lock_unused+0x140/0x140 [ 76.594435][ T4430] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 76.600416][ T4430] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 76.606397][ T4430] ? __local_bh_enable_ip+0x12a/0x1b0 [ 76.611768][ T4430] ? mark_lock+0x94/0x320 [ 76.616102][ T4430] lock_acquire+0x197/0x3f0 [ 76.620783][ T4430] ? ax25_device_event+0x217/0x4f0 [ 76.625892][ T4430] ? lock_chain_count+0x20/0x20 [ 76.630746][ T4430] ? read_lock_is_recursive+0x10/0x10 [ 76.636118][ T4430] ? __local_bh_enable_ip+0x12a/0x1b0 [ 76.641488][ T4430] ? lockdep_hardirqs_on+0x94/0x140 [ 76.646690][ T4430] ? __local_bh_enable_ip+0x12a/0x1b0 [ 76.652070][ T4430] ? _local_bh_enable+0xa0/0xa0 [ 76.656921][ T4430] lock_sock_nested+0x44/0x100 [ 76.661693][ T4430] ? ax25_device_event+0x217/0x4f0 [ 76.666827][ T4430] ax25_device_event+0x217/0x4f0 [ 76.671767][ T4430] raw_notifier_call_chain+0xcb/0x160 [ 76.677138][ T4430] __dev_notify_flags+0x178/0x2d0 [ 76.682249][ T4430] ? __dev_change_flags+0x6a0/0x6a0 [ 76.687453][ T4430] ? __dev_change_flags+0x4bb/0x6a0 [ 76.692736][ T4430] ? dev_get_flags+0x1c0/0x1c0 [ 76.697500][ T4430] ? dev_ioctl+0x54e/0xe50 [ 76.701919][ T4430] ? dev_ioctl+0x54e/0xe50 [ 76.706348][ T4430] dev_change_flags+0xe3/0x1a0 [ 76.711113][ T4430] dev_ifsioc+0x147/0xe70 [ 76.715471][ T4430] ? dev_ioctl+0xe50/0xe50 [ 76.719890][ T4430] ? apparmor_capable+0x12c/0x190 [ 76.724920][ T4430] ? full_name_hash+0x8e/0xe0 [ 76.729609][ T4430] dev_ioctl+0x55f/0xe50 [ 76.733851][ T4430] ? _copy_from_user+0x111/0x170 [ 76.738791][ T4430] sock_do_ioctl+0x222/0x2f0 [ 76.743380][ T4430] ? sock_show_fdinfo+0xb0/0xb0 [ 76.748238][ T4430] sock_ioctl+0x4ed/0x6e0 [ 76.752566][ T4430] ? sock_poll+0x3f0/0x3f0 [ 76.756989][ T4430] ? bpf_lsm_file_ioctl+0x5/0x10 [ 76.761923][ T4430] ? security_file_ioctl+0x7c/0xa0 [ 76.767047][ T4430] ? sock_poll+0x3f0/0x3f0 [ 76.771462][ T4430] __se_sys_ioctl+0xfa/0x170 [ 76.776143][ T4430] do_syscall_64+0x4c/0xa0 [ 76.780556][ T4430] ? clear_bhb_loop+0x30/0x80 [ 76.785230][ T4430] ? clear_bhb_loop+0x30/0x80 [ 76.789902][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.795801][ T4430] RIP: 0033:0x7f1005d00c29 [ 76.800221][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.819827][ T4430] RSP: 002b:00007f1003f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.828259][ T4430] RAX: ffffffffffffffda RBX: 00007f1005f47fa0 RCX: 00007f1005d00c29 [ 76.836238][ T4430] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 76.844226][ T4430] RBP: 00007f1005d83e41 R08: 0000000000000000 R09: 0000000000000000 [ 76.852208][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.860179][ T4430] R13: 00007f1005f48038 R14: 00007f1005f47fa0 R15: 00007ffcb38bb278 [ 76.868159][ T4430] [ 76.910546][ T4430] ================================================================== [ 76.918674][ T4430] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 76.926415][ T4430] Write of size 4 at addr ffff88802417acb8 by task syz.2.34/4430 [ 76.934124][ T4430] [ 76.936440][ T4430] CPU: 0 PID: 4430 Comm: syz.2.34 Not tainted syzkaller #0 [ 76.943637][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.953802][ T4430] Call Trace: [ 76.957087][ T4430] [ 76.960017][ T4430] dump_stack_lvl+0x168/0x230 [ 76.964704][ T4430] ? show_regs_print_info+0x20/0x20 [ 76.969897][ T4430] ? load_image+0x3b0/0x3b0 [ 76.974403][ T4430] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 76.979776][ T4430] print_address_description+0x60/0x2d0 [ 76.985323][ T4430] ? ax25_dev_device_down+0x35e/0x520 [ 76.990690][ T4430] kasan_report+0xdf/0x130 [ 76.995104][ T4430] ? ax25_dev_device_down+0x35e/0x520 [ 77.000469][ T4430] ? kfree+0xef/0x2a0 [ 77.004450][ T4430] kasan_check_range+0x27b/0x290 [ 77.009384][ T4430] ax25_dev_device_down+0x35e/0x520 [ 77.014575][ T4430] ax25_device_event+0x4b4/0x4f0 [ 77.019507][ T4430] raw_notifier_call_chain+0xcb/0x160 [ 77.024889][ T4430] __dev_notify_flags+0x178/0x2d0 [ 77.029911][ T4430] ? __dev_change_flags+0x6a0/0x6a0 [ 77.035126][ T4430] ? __dev_change_flags+0x4bb/0x6a0 [ 77.040320][ T4430] ? dev_get_flags+0x1c0/0x1c0 [ 77.045078][ T4430] ? dev_ioctl+0x54e/0xe50 [ 77.049487][ T4430] ? dev_ioctl+0x54e/0xe50 [ 77.053897][ T4430] dev_change_flags+0xe3/0x1a0 [ 77.058659][ T4430] dev_ifsioc+0x147/0xe70 [ 77.062985][ T4430] ? dev_ioctl+0xe50/0xe50 [ 77.067396][ T4430] ? apparmor_capable+0x12c/0x190 [ 77.072413][ T4430] ? full_name_hash+0x8e/0xe0 [ 77.077089][ T4430] dev_ioctl+0x55f/0xe50 [ 77.081327][ T4430] ? _copy_from_user+0x111/0x170 [ 77.086259][ T4430] sock_do_ioctl+0x222/0x2f0 [ 77.090848][ T4430] ? sock_show_fdinfo+0xb0/0xb0 [ 77.095699][ T4430] sock_ioctl+0x4ed/0x6e0 [ 77.100023][ T4430] ? sock_poll+0x3f0/0x3f0 [ 77.104437][ T4430] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.109371][ T4430] ? security_file_ioctl+0x7c/0xa0 [ 77.114480][ T4430] ? sock_poll+0x3f0/0x3f0 [ 77.118895][ T4430] __se_sys_ioctl+0xfa/0x170 [ 77.123578][ T4430] do_syscall_64+0x4c/0xa0 [ 77.127987][ T4430] ? clear_bhb_loop+0x30/0x80 [ 77.132832][ T4430] ? clear_bhb_loop+0x30/0x80 [ 77.137502][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.143393][ T4430] RIP: 0033:0x7f1005d00c29 [ 77.147871][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.167474][ T4430] RSP: 002b:00007f1003f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.175890][ T4430] RAX: ffffffffffffffda RBX: 00007f1005f47fa0 RCX: 00007f1005d00c29 [ 77.184208][ T4430] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 77.192173][ T4430] RBP: 00007f1005d83e41 R08: 0000000000000000 R09: 0000000000000000 [ 77.200138][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.208100][ T4430] R13: 00007f1005f48038 R14: 00007f1005f47fa0 R15: 00007ffcb38bb278 [ 77.216073][ T4430] [ 77.219092][ T4430] [ 77.221412][ T4430] Allocated by task 4430: [ 77.225858][ T4430] __kasan_kmalloc+0xb5/0xf0 [ 77.230450][ T4430] ax25_dev_device_up+0x50/0x580 [ 77.235385][ T4430] ax25_device_event+0x483/0x4f0 [ 77.240314][ T4430] raw_notifier_call_chain+0xcb/0x160 [ 77.245685][ T4430] __dev_notify_flags+0x178/0x2d0 [ 77.250734][ T4430] dev_change_flags+0xe3/0x1a0 [ 77.255488][ T4430] dev_ifsioc+0x147/0xe70 [ 77.259812][ T4430] dev_ioctl+0x55f/0xe50 [ 77.264048][ T4430] sock_do_ioctl+0x222/0x2f0 [ 77.268631][ T4430] sock_ioctl+0x4ed/0x6e0 [ 77.272961][ T4430] __se_sys_ioctl+0xfa/0x170 [ 77.277545][ T4430] do_syscall_64+0x4c/0xa0 [ 77.281953][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.287837][ T4430] [ 77.290153][ T4430] Freed by task 4430: [ 77.294120][ T4430] kasan_set_track+0x4b/0x70 [ 77.298706][ T4430] kasan_set_free_info+0x1f/0x40 [ 77.303660][ T4430] ____kasan_slab_free+0xd5/0x110 [ 77.308679][ T4430] slab_free_freelist_hook+0xea/0x170 [ 77.314042][ T4430] kfree+0xef/0x2a0 [ 77.317853][ T4430] ax25_dev_device_down+0x1c0/0x520 [ 77.323049][ T4430] ax25_device_event+0x4b4/0x4f0 [ 77.327977][ T4430] raw_notifier_call_chain+0xcb/0x160 [ 77.333338][ T4430] __dev_notify_flags+0x178/0x2d0 [ 77.338352][ T4430] dev_change_flags+0xe3/0x1a0 [ 77.343105][ T4430] dev_ifsioc+0x147/0xe70 [ 77.347426][ T4430] dev_ioctl+0x55f/0xe50 [ 77.351663][ T4430] sock_do_ioctl+0x222/0x2f0 [ 77.356248][ T4430] sock_ioctl+0x4ed/0x6e0 [ 77.360567][ T4430] __se_sys_ioctl+0xfa/0x170 [ 77.365152][ T4430] do_syscall_64+0x4c/0xa0 [ 77.369566][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.375452][ T4430] [ 77.377768][ T4430] Last potentially related work creation: [ 77.383474][ T4430] kasan_save_stack+0x35/0x60 [ 77.388143][ T4430] kasan_record_aux_stack+0xb8/0x100 [ 77.393419][ T4430] insert_work+0x54/0x3d0 [ 77.397742][ T4430] __queue_work+0x9c5/0xd50 [ 77.402233][ T4430] queue_work_on+0x11d/0x1d0 [ 77.406823][ T4430] inet6addr_event+0x9c/0xc0 [ 77.411409][ T4430] atomic_notifier_call_chain+0x15d/0x280 [ 77.417119][ T4430] ipv6_add_addr+0xb30/0xde0 [ 77.421729][ T4430] addrconf_add_linklocal+0x280/0x6b0 [ 77.427093][ T4430] addrconf_addr_gen+0x4ee/0x620 [ 77.432023][ T4430] addrconf_init_auto_addrs+0x6d5/0xa80 [ 77.437574][ T4430] addrconf_notify+0xa6b/0xf00 [ 77.442328][ T4430] raw_notifier_call_chain+0xcb/0x160 [ 77.447761][ T4430] __dev_notify_flags+0x178/0x2d0 [ 77.452781][ T4430] dev_change_flags+0xe3/0x1a0 [ 77.457543][ T4430] do_setlink+0xc01/0x3980 [ 77.461954][ T4430] rtnl_newlink+0x1419/0x17d0 [ 77.466627][ T4430] rtnetlink_rcv_msg+0x9b9/0xe60 [ 77.471557][ T4430] netlink_rcv_skb+0x1e0/0x430 [ 77.476406][ T4430] netlink_unicast+0x774/0x920 [ 77.481193][ T4430] netlink_sendmsg+0x8ab/0xbc0 [ 77.485952][ T4430] __sys_sendto+0x423/0x580 [ 77.490454][ T4430] __x64_sys_sendto+0xda/0xf0 [ 77.495127][ T4430] do_syscall_64+0x4c/0xa0 [ 77.499534][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.505419][ T4430] [ 77.507738][ T4430] The buggy address belongs to the object at ffff88802417ac00 [ 77.507738][ T4430] which belongs to the cache kmalloc-192 of size 192 [ 77.521782][ T4430] The buggy address is located 184 bytes inside of [ 77.521782][ T4430] 192-byte region [ffff88802417ac00, ffff88802417acc0) [ 77.535052][ T4430] The buggy address belongs to the page: [ 77.540673][ T4430] page:ffffea0000905e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802417a000 pfn:0x2417a [ 77.552121][ T4430] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 77.559666][ T4430] raw: 00fff00000000200 ffffea000090c940 0000000300000003 ffff888016841a00 [ 77.568327][ T4430] raw: ffff88802417a000 0000000080100008 00000001ffffffff 0000000000000000 [ 77.576900][ T4430] page dumped because: kasan: bad access detected [ 77.583301][ T4430] page_owner tracks the page as allocated [ 77.589001][ T4430] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 23, ts 9003616011, free_ts 8912807179 [ 77.604529][ T4430] get_page_from_freelist+0x1b77/0x1c60 [ 77.610080][ T4430] __alloc_pages+0x1e1/0x470 [ 77.614686][ T4430] new_slab+0xc0/0x4b0 [ 77.618760][ T4430] ___slab_alloc+0x81e/0xdf0 [ 77.623348][ T4430] __kmalloc+0x1cd/0x330 [ 77.627589][ T4430] usb_alloc_urb+0x3f/0x140 [ 77.632091][ T4430] usb_control_msg+0x115/0x3e0 [ 77.636851][ T4430] hub_ext_port_status+0x103/0x6d0 [ 77.641959][ T4430] hub_activate+0x6e9/0x1a30 [ 77.646554][ T4430] process_one_work+0x863/0x1000 [ 77.651490][ T4430] worker_thread+0xaa8/0x12a0 [ 77.656162][ T4430] kthread+0x436/0x520 [ 77.660224][ T4430] ret_from_fork+0x1f/0x30 [ 77.664636][ T4430] page last free stack trace: [ 77.669303][ T4430] free_unref_page_prepare+0x637/0x6c0 [ 77.674756][ T4430] free_unref_page+0x94/0x280 [ 77.679426][ T4430] __vunmap+0x8ab/0xa40 [ 77.683596][ T4430] free_work+0x56/0x80 [ 77.687673][ T4430] process_one_work+0x863/0x1000 [ 77.692603][ T4430] worker_thread+0xaa8/0x12a0 [ 77.697277][ T4430] kthread+0x436/0x520 [ 77.701336][ T4430] ret_from_fork+0x1f/0x30 [ 77.705835][ T4430] [ 77.708151][ T4430] Memory state around the buggy address: [ 77.713779][ T4430] ffff88802417ab80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 77.721835][ T4430] ffff88802417ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.729887][ T4430] >ffff88802417ac80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 77.737961][ T4430] ^ [ 77.743849][ T4430] ffff88802417ad00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.751902][ T4430] ffff88802417ad80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 77.759952][ T4430] ================================================================== [ 77.768025][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.959666][ T4430] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.967035][ T4430] CPU: 0 PID: 4430 Comm: syz.2.34 Tainted: G B syzkaller #0 [ 77.975647][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.985727][ T4430] Call Trace: [ 77.989006][ T4430] [ 77.991933][ T4430] dump_stack_lvl+0x168/0x230 [ 77.996732][ T4430] ? show_regs_print_info+0x20/0x20 [ 78.001929][ T4430] ? load_image+0x3b0/0x3b0 [ 78.006451][ T4430] panic+0x2c9/0x7f0 [ 78.010343][ T4430] ? bpf_jit_dump+0xd0/0xd0 [ 78.014842][ T4430] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 78.020740][ T4430] ? _raw_spin_unlock+0x40/0x40 [ 78.025590][ T4430] ? ax25_dev_device_down+0x35e/0x520 [ 78.030969][ T4430] check_panic_on_warn+0x80/0xa0 [ 78.035904][ T4430] ? ax25_dev_device_down+0x35e/0x520 [ 78.041271][ T4430] end_report+0x6d/0xf0 [ 78.045429][ T4430] kasan_report+0x102/0x130 [ 78.049927][ T4430] ? ax25_dev_device_down+0x35e/0x520 [ 78.055324][ T4430] ? kfree+0xef/0x2a0 [ 78.059305][ T4430] kasan_check_range+0x27b/0x290 [ 78.064240][ T4430] ax25_dev_device_down+0x35e/0x520 [ 78.069433][ T4430] ax25_device_event+0x4b4/0x4f0 [ 78.074365][ T4430] raw_notifier_call_chain+0xcb/0x160 [ 78.079735][ T4430] __dev_notify_flags+0x178/0x2d0 [ 78.084767][ T4430] ? __dev_change_flags+0x6a0/0x6a0 [ 78.089978][ T4430] ? __dev_change_flags+0x4bb/0x6a0 [ 78.095191][ T4430] ? dev_get_flags+0x1c0/0x1c0 [ 78.099961][ T4430] ? dev_ioctl+0x54e/0xe50 [ 78.104385][ T4430] ? dev_ioctl+0x54e/0xe50 [ 78.108812][ T4430] dev_change_flags+0xe3/0x1a0 [ 78.113691][ T4430] dev_ifsioc+0x147/0xe70 [ 78.118022][ T4430] ? dev_ioctl+0xe50/0xe50 [ 78.122437][ T4430] ? apparmor_capable+0x12c/0x190 [ 78.127457][ T4430] ? full_name_hash+0x8e/0xe0 [ 78.132130][ T4430] dev_ioctl+0x55f/0xe50 [ 78.136369][ T4430] ? _copy_from_user+0x111/0x170 [ 78.141301][ T4430] sock_do_ioctl+0x222/0x2f0 [ 78.145987][ T4430] ? sock_show_fdinfo+0xb0/0xb0 [ 78.150838][ T4430] sock_ioctl+0x4ed/0x6e0 [ 78.155169][ T4430] ? sock_poll+0x3f0/0x3f0 [ 78.159582][ T4430] ? bpf_lsm_file_ioctl+0x5/0x10 [ 78.164538][ T4430] ? security_file_ioctl+0x7c/0xa0 [ 78.169648][ T4430] ? sock_poll+0x3f0/0x3f0 [ 78.174134][ T4430] __se_sys_ioctl+0xfa/0x170 [ 78.178724][ T4430] do_syscall_64+0x4c/0xa0 [ 78.183141][ T4430] ? clear_bhb_loop+0x30/0x80 [ 78.187814][ T4430] ? clear_bhb_loop+0x30/0x80 [ 78.192489][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.198381][ T4430] RIP: 0033:0x7f1005d00c29 [ 78.202793][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.222400][ T4430] RSP: 002b:00007f1003f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.230811][ T4430] RAX: ffffffffffffffda RBX: 00007f1005f47fa0 RCX: 00007f1005d00c29 [ 78.238784][ T4430] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 78.246874][ T4430] RBP: 00007f1005d83e41 R08: 0000000000000000 R09: 0000000000000000 [ 78.254848][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.262992][ T4430] R13: 00007f1005f48038 R14: 00007f1005f47fa0 R15: 00007ffcb38bb278 [ 78.270965][ T4430] [ 78.274157][ T4430] Kernel Offset: disabled [ 78.278481][ T4430] Rebooting in 86400 seconds..