last executing test programs: 2m43.464873151s ago: executing program 4 (id=5003): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x556cfaf3c10825a8}]}]}, 0x30}}, 0x0) 2m43.28095428s ago: executing program 4 (id=5005): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500), 0x0, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 2m43.107417837s ago: executing program 4 (id=5008): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 2m42.908389107s ago: executing program 4 (id=5010): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$P9_RVERSION(r4, 0x0, 0x15) 2m39.663682392s ago: executing program 4 (id=5031): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800080, 0x11) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m38.648971643s ago: executing program 4 (id=5042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2m23.646178176s ago: executing program 32 (id=5042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) 9.555691085s ago: executing program 3 (id=6217): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 7.150227235s ago: executing program 0 (id=6246): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.020417089s ago: executing program 0 (id=6247): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 6.889593932s ago: executing program 0 (id=6248): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) 6.800355271s ago: executing program 0 (id=6249): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) 6.369160364s ago: executing program 3 (id=6250): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x40, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 5.361331094s ago: executing program 3 (id=6253): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4, 0x7fff0000}]}) gettid() 5.249752885s ago: executing program 3 (id=6255): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) 4.00536441s ago: executing program 0 (id=6262): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000004d80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d40)={&(0x7f0000003bc0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000001500)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010526", 0xf8a, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f, 0x19, "9df8869c24c505b7d471402a31e6ea98307116e5d84627360d9f4ded8e743b0a5631de7eb2af6781b38261e2ca88016e2bf001896cdfa7fc8170ab9adb87a391d8e02124fa9dfc4d572402ea66f17f88eeb6f25953faff57b27820bfe984332773e6f52bd686cf5e7bd0796180260e419b51620df7e8d9a8fc812c38cde15d9ae250850e519b044586e7bd0537f0b62ff3ee6e1b592140da9cef727f98361e77ad3c9c574dc00f3813d78ec38bf0639a73f5620eb2712015d39bbf81edc0ee2334608a65cd2fa59aa2f8"}, {0x22, 0x5, "0e8ea79a6ce39825120e696373c2cb5b842a188554365fcc7635f93b6b0cf7183c1473add686df2b883aed0b5a"}, {0x18, 0x16, "164812996b35d1b9e2f009bfa0918189ad27dd4a3d46585c7d16ce907c5504011d36dea981a80b504f997c2ed526ad05711a33c9b09415e65278bdb063fd5588fc70a76509a5aa4aab42b570d3da4dc3da6880bc1677389dae6d0f72189dd3807350da1da304211d879a6b952cc3ae70ff339f7dc3891b890464a8f8e817e7dfb439eb3e220f99e7be4abd1954d0e48cbcb2f991a0669584e702c34c2675ed3952a32e09d61359fbc7edb7dfd1d1c780"}, {0x0, 0x11, "b5fbe47cdb0b36345cc09f83e901dae4e362a963a13d4e5a77cd4635f762afac9637356d83e8410668207a283af51ec73dcccd5e34b888c9d6caf39b588d14ba163d0397375dfb1cb3f3a525b67095c43745f91ac908c1af4a0e62cc0730bb558e8a52746023e8f17ff22a41f825a7acb5902c8b2983e30fa5c18e28bcbc5ef7151c720cb0bf141365"}, {0xe, 0x19, "37ee356bee650bdd6af02cea4cad621cf827ed7ecb805aac800dcc61eae89f6d389087b862cf9558a7a289b4b959ba78102a42520fabfcd675eb5da12d23af9b213046ebfe548c661623d918704b93e0e8c093bb33c345ed4ef134f209875aae46e8c5687fead9814b3add68478c4ca286bb4e3419e54c20df53b7c7f256093a0e04867445fd011a78cfad22ac7ad2db83e0648fe231839ae93cc75254879267f4327ef43aa4739e70f9578f96825c35f9642d3f4df76bd6ff7612674ae9189c4cceedccc72228c1"}, {0x5, 0x1b, "2890ab98d2047b0789f6e5e4ab99c79937d655f7876ca184567615000e9ac4aedcbeccbec4fa8ffeec4e3e94d0da137df21b2b6d4b16ae78bcb72d4f797d51192b56f4bf2922764899880660eedc0194bffc872df8a661bb891a4d118f560e11c5eaab7fe8e436799d26d5fda68bd1ef3763f9b93693a2a8282aab9b9962124857784bb5462c3d76113cc913796214e0f2f9ea8e6bde667578b5c1293ff8cc710816c5be206317edfa4b99e90e5ddc976669468bdd6cbbb350e24da20228c725f686fe97201078aaa5f9028fb68cd6e66610fe937a4c4e2d"}, {0x1f, 0xa, "0f078023085bc803dc3c68c0c4e6e790e139b1650b0dbd28073aae4aa7d13e92eab598a25147b369a7d2585c1d562f2c40b6b20c730e4236a6b856e36eb32ae0902a49e36d8c2cf4ef89c55cde367a37d5bacda3"}, {0x1f, 0x9, "87b62409876b32a091ad326971e24d0c74d96b20f59e34c1afef8d39b944eb7f0a49d314c3bbe43250158a11806d0784a37b9a3f3bd14e34b971a03cab740eb95caccb968bcf478e"}, {0x1, 0x160, "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"}]}}}}}}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000003540)={@mcast1}, &(0x7f0000003580)=0x14) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 2.855334595s ago: executing program 2 (id=6268): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f00000000c0)={{0x12, 0x1, 0x612, 0x6d, 0xc, 0x44, 0x20, 0xaf0, 0x7601, 0x536c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x9, 0xb, 0x50, 0x9d, [{{0x9, 0x4, 0xfe, 0x2, 0x1, 0x32, 0x8a, 0x2c, 0x6, [@hid_hid={0x9, 0x21, 0x1, 0xa3, 0x1, {0x22, 0x343}}], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x4, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x8000}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x97, 0x1, 0x0, 0x10}, 0xad, &(0x7f00000001c0)={0x5, 0xf, 0xad, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "9efbba3255c6594926b2fc0c64d26cc7"}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "8d0633dee9c56cf9f31a9bf82cc07c47"}, @ptm_cap={0x3}, @generic={0x7d, 0x10, 0xf, "afc6ee7293ad5999af9da3b10cdc22fd5cd7f5212608d337d039e57f0a2a8c7e435da2b126614931b6bd32d7676802b96d974a55a6b052154b94116a5e4f3970c9d98ce60454ad1b23742ba2a63a9c2b352b84e66fc3430f4b08f09cdac16432d16696edc38fee6fb9256060a6d1f724cb384acc30101b61fb93"}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40e}}, {0xf6, &(0x7f0000000900)=ANY=[@ANYBLOB="f6031de458f3e582cec332261dc3e6880d4edcdc8221aeaa837166dbe3c09d6cf5e195255392184ef947716582e4d6b7b357498c9b7e00666166d6765555b23104a8b36bbb2714cc24c96afaa5f3a6db03ad18227f8ed50819bea5ec381e289a2c6f6bfdb140758f66a8cae462b43950d8e4408ff7daa684725cf327cd2c4e3d92d92d8ff94fd9cab1e2000cd3d27da16bf32a4aefb8525239b105bba05367b94bea99c985b49329f06336a68b4356db08ee10765ec1ce5c73ff7ba557e03d463a595fa840e86ef3ed8f6a03d67f93a85600dff9f801c3c90732e4924e59cfa516142754c98282057307e6d87e2fe16aa1b467baebd44bd6"]}]}) 2.40528872s ago: executing program 3 (id=6269): r0 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) 1.497230231s ago: executing program 3 (id=6272): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) 1.215297149s ago: executing program 1 (id=6273): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr\x00') getdents64(r0, &(0x7f0000000000)=""/152, 0x98) 1.021238058s ago: executing program 1 (id=6275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 958.946445ms ago: executing program 1 (id=6276): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 939.638856ms ago: executing program 5 (id=6277): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="fd6815de560473c1f8221840ad8e195bea", 0x11}], 0x1}, 0x20000080) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) 797.234381ms ago: executing program 1 (id=6278): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 764.011274ms ago: executing program 2 (id=6279): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x81}], 0x1, 0x2142, 0x0) 650.560355ms ago: executing program 5 (id=6280): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 600.2936ms ago: executing program 0 (id=6281): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=prefer=r']) 599.57016ms ago: executing program 2 (id=6282): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x226, &(0x7f0000000000)) 589.503881ms ago: executing program 1 (id=6283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="36650f380ae20f21ddba6100ed6766c7442400695e00006766c7442402a5c9f6dd6766c744240600000000670f011424f20f78d200c3c54c090f20d90fc79e4a6bda302e260fc43d00", 0x49}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 509.78288ms ago: executing program 5 (id=6284): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 421.165748ms ago: executing program 2 (id=6285): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x20, r0, 0x5, 0x3) socket$nl_route(0x10, 0x3, 0x0) ptrace$poke(0x1b, r0, &(0x7f0000000240), 0x5) 324.313028ms ago: executing program 5 (id=6286): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 321.057748ms ago: executing program 2 (id=6287): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) close(r5) 151.720825ms ago: executing program 5 (id=6288): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) 37.218827ms ago: executing program 1 (id=6289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x7, 0x1000, 0x1, 0x1, 0x1a0, 0x8, 0xac4, 0xb6, 0x0, 0x4, 0xe, 0x7, 0x693, 0x3, 0x1], 0x1, 0x20000}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x5000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x4, 0x19}, {0x5000, 0xeeef0000, 0x3, 0x0, 0x8, 0x5, 0x7d, 0x87, 0x8, 0x3}, {0xeeef0000, 0x100000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0xffef3000, 0x8, 0x2, 0x4, 0x42, 0xe0, 0x4, 0x9, 0x7, 0xe, 0x1}, {0xeeee0000, 0x0, 0xe, 0x5, 0x15, 0x7, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x87}, {0xeeee0000, 0x33325000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x12, 0xfd, 0x7}, {0xeeef0000, 0x8000000, 0xb, 0x8d, 0x7, 0x5, 0x7, 0x1, 0x5, 0x83, 0xff, 0x70}, {0xd000, 0x1000, 0xf, 0xff, 0xf, 0x7, 0x1, 0x34, 0x7, 0xc, 0xb0, 0x9}, {0x100000, 0x1}, {0x10000, 0x7}, 0x80000031, 0x0, 0x4, 0x252572, 0x4, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x9, 0xfd]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x8000000000000001, 0x100, 0x3, 0x7, 0xec, 0x2, 0xd2, 0xffffffff80000001, 0x1ff, 0x1, 0xd, 0xfffffffffffffff7, 0x8, 0x5], 0x1000, 0x8001}) 25.285518ms ago: executing program 2 (id=6290): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)) 0s ago: executing program 5 (id=6291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ing state [ 422.209920][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.293706][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.327721][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.364061][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.409946][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.417080][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.461331][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.475926][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.521342][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.548242][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.591026][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.610669][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.714385][T11484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.758366][T11484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.795059][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.813531][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.863802][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.892958][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 422.923201][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.942064][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 423.370288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.388121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.427430][T11484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.003201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.042693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.128113][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.157234][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.194057][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 424.199366][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.238474][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.281451][T11484] device veth0_vlan entered promiscuous mode [ 424.322256][T11484] device veth1_vlan entered promiscuous mode [ 424.410456][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.429156][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 424.461975][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.484742][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.516439][T11484] device veth0_macvtap entered promiscuous mode [ 424.554848][T11484] device veth1_macvtap entered promiscuous mode [ 424.616347][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.657419][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.700652][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.723515][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.753798][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.796221][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.857149][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.903579][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.938114][T11484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.977364][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.029006][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.082617][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.143812][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.173359][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.213493][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.228485][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.276319][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.338772][T11484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.372240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.388254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.424690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.444303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.467684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.488825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.524765][T11484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.553352][T11484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.562089][T11484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.629058][T11484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.905067][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.913151][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.964969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 425.985505][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.025298][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.076360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.552657][T11659] chnl_net:caif_netlink_parms(): no params data found [ 427.814934][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.873778][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.882053][T11659] device bridge_slave_0 entered promiscuous mode [ 427.956597][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 427.971652][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3255'. [ 428.030610][T11690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.071975][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 428.170886][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3255'. [ 428.274103][T11690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.297690][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.307954][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.316502][T11659] device bridge_slave_1 entered promiscuous mode [ 428.497065][T11659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.530327][T11659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.662331][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.698085][T11659] team0: Port device team_slave_0 added [ 428.732240][T11659] team0: Port device team_slave_1 added [ 428.815114][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.883058][T11659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.900247][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.983417][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 428.991613][T11659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.021969][T11659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.059728][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.151283][T11659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.195819][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.366789][T11659] device hsr_slave_0 entered promiscuous mode [ 429.391594][T11659] device hsr_slave_1 entered promiscuous mode [ 429.418601][T11659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.450665][T11659] Cannot create hsr debugfs directory [ 429.466472][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.616513][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3273'. [ 430.016769][T11734] overlayfs: missing 'lowerdir' [ 430.914065][T11659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 430.953192][T11659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.063631][T11541] Bluetooth: hci4: command 0x041b tx timeout [ 431.123359][ T155] device hsr_slave_0 left promiscuous mode [ 431.138065][ T155] device hsr_slave_1 left promiscuous mode [ 431.180288][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.198354][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.220632][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.273844][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.324143][ T155] device bridge_slave_1 left promiscuous mode [ 431.330493][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.386887][ T155] device bridge_slave_0 left promiscuous mode [ 431.403556][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.423614][ T155] device veth1_macvtap left promiscuous mode [ 431.437647][ T155] device veth0_macvtap left promiscuous mode [ 431.459199][ T155] device veth1_vlan left promiscuous mode [ 431.475857][ T155] device veth0_vlan left promiscuous mode [ 432.081385][ T155] team0 (unregistering): Port device team_slave_1 removed [ 432.110405][ T155] team0 (unregistering): Port device team_slave_0 removed [ 432.132587][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.163124][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.312862][ T155] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 432.330564][ T155] bond0 (unregistering): Released all slaves [ 432.410169][T11659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 432.456484][T11659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.699564][T11791] overlayfs: missing 'workdir' [ 432.834312][T11659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.914128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.922515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.948704][T11659] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.980265][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3298'. [ 433.029530][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 433.064074][T11800] netlink: 'syz.4.3298': attribute type 20 has an invalid length. [ 433.095272][T11800] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.104233][T11800] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.113074][T11800] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.121858][T11800] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.153396][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 433.215329][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3298'. [ 433.233429][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 433.261705][T11800] netlink: 'syz.4.3298': attribute type 20 has an invalid length. [ 433.293416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.358525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.385207][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.392325][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.496727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.525900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.555416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.608532][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.615704][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.714529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.744902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.792153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.834965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.844258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.889784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.915286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.931067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.962457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.009749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.047511][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.081372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.169192][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3312'. [ 434.221457][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3312'. [ 434.310937][T11840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.318908][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3312'. [ 434.328013][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3312'. [ 434.362784][T11840] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.370851][T11843] netlink: 'syz.2.3296': attribute type 10 has an invalid length. [ 434.402888][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.410370][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.744637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.752209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.801986][T11659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.872133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 434.891896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 434.953409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 434.972170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.025839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.074257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.095634][T11659] device veth0_vlan entered promiscuous mode [ 435.187011][T11659] device veth1_vlan entered promiscuous mode [ 435.239041][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 435.330971][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 435.344701][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 435.363234][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.430104][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.472291][T11659] device veth0_macvtap entered promiscuous mode [ 435.507289][T11659] device veth1_macvtap entered promiscuous mode [ 435.519318][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.534685][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.571631][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.658261][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.677805][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.708894][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.730709][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.770294][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.823610][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.846071][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.865270][T11659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.888746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.900509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.932476][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.009185][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.043771][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.061713][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.123747][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.160981][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.219873][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.253382][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.281512][T11659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.333205][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.352998][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.406846][T11659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.427529][T11659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.452266][T11659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.502155][T11659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.793765][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.822907][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.859762][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.876553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.938663][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.974787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.525136][T11976] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3372'. [ 439.946998][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.953424][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.072686][T11990] overlayfs: missing 'lowerdir' [ 441.199920][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 442.696973][T12017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3392'. [ 444.441446][T12053] overlayfs: failed to resolve './file0': -2 [ 444.734631][T12059] overlayfs: missing 'workdir' [ 445.328217][T12077] overlayfs: failed to resolve './file0': -2 [ 445.563402][ T1108] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 445.933659][ T1108] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 445.952097][ T1108] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 445.982802][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 446.159312][ T1108] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.178751][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.197972][ T1108] usb 1-1: Product: syz [ 446.208001][ T1108] usb 1-1: Manufacturer: syz [ 446.222938][ T1108] usb 1-1: SerialNumber: syz [ 446.258778][ T1108] usb 1-1: config 0 descriptor?? [ 446.320004][ T1108] hub 1-1:0.0: bad descriptor, ignoring hub [ 446.329340][ T1108] hub: probe of 1-1:0.0 failed with error -5 [ 446.386828][ T1108] usb 1-1: selecting invalid altsetting 0 [ 446.751100][T12091] overlayfs: missing 'workdir' [ 446.877097][ T1108] usb 1-1: USB disconnect, device number 3 [ 447.143760][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 447.413538][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 447.446165][T12101] overlayfs: failed to resolve './file0': -2 [ 447.533517][ T1108] usb 1-1: config 0 has no interfaces? [ 447.699902][ T1108] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 447.738684][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.767217][ T1108] usb 1-1: Product: syz [ 447.771527][ T1108] usb 1-1: Manufacturer: syz [ 447.787504][ T1108] usb 1-1: SerialNumber: syz [ 447.821509][ T1108] usb 1-1: config 0 descriptor?? [ 448.160615][ T13] usb 1-1: USB disconnect, device number 4 [ 449.471863][T12153] overlayfs: failed to resolve './file0': -2 [ 449.500547][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3460'. [ 449.522606][T12159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3461'. [ 449.536023][T12157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3460'. [ 449.563381][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3461'. [ 449.684891][T12159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.728707][T12159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3461'. [ 449.758392][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3461'. [ 449.834938][T12159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.849477][T12167] xt_CT: No such helper "pptp" [ 452.384076][T12268] overlayfs: missing 'lowerdir' [ 453.974562][T12331] 9pnet_virtio: no channels available for device syz [ 454.055486][T12334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'. [ 454.133358][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 454.193785][T12334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.201858][T12334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'. [ 454.211276][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 454.241455][T12334] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.440872][T12351] overlayfs: missing 'lowerdir' [ 454.544430][T12355] overlayfs: missing 'workdir' [ 454.658769][T12364] loop5: detected capacity change from 0 to 7 [ 454.686875][ T9843] Dev loop5: unable to read RDB block 7 [ 454.714686][ T9843] loop5: unable to read partition table [ 454.738062][ T9843] loop5: partition table beyond EOD, truncated [ 454.771136][T12364] Dev loop5: unable to read RDB block 7 [ 454.778475][T12364] loop5: unable to read partition table [ 454.799269][T12364] loop5: partition table beyond EOD, truncated [ 454.830552][T12366] __nla_validate_parse: 2 callbacks suppressed [ 454.830568][T12366] netlink: 536 bytes leftover after parsing attributes in process `syz.4.3557'. [ 454.847255][T12364] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 454.856749][T12366] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3557'. [ 455.149445][T12386] overlayfs: missing 'lowerdir' [ 456.221526][T12441] sch_tbf: burst 257 is lower than device syzkaller0 mtu (1500) ! [ 457.439163][T12487] loop5: detected capacity change from 0 to 7 [ 457.497099][T12487] Dev loop5: unable to read RDB block 7 [ 457.510418][T12487] loop5: unable to read partition table [ 457.528923][T12487] loop5: partition table beyond EOD, truncated [ 457.548715][T12487] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 458.047431][T12510] overlayfs: missing 'workdir' [ 459.962661][T12564] overlayfs: missing 'workdir' [ 460.362260][T12574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3653'. [ 460.392063][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 460.553352][ T13] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 460.563254][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3654'. [ 460.602927][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3654'. [ 460.683542][T12577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.744182][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3654'. [ 460.783452][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3654'. [ 460.842468][T12577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.934559][ T13] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x31, skipping [ 460.953356][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 461.123685][ T13] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 461.153393][ T13] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 461.174361][ T13] usb 2-1: Product: syz [ 461.178580][ T13] usb 2-1: Manufacturer: syz [ 461.183194][ T13] usb 2-1: SerialNumber: syz [ 461.215318][ T13] usb 2-1: config 0 descriptor?? [ 461.327754][ T13] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 461.419463][ T9843] udevd[9843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.481109][ T13] usb 2-1: USB disconnect, device number 2 [ 462.592995][T12609] overlayfs: missing 'workdir' [ 462.820219][T12617] syz.2.3674 uses obsolete (PF_INET,SOCK_PACKET) [ 470.460993][T12798] overlayfs: missing 'workdir' [ 470.852069][T12804] overlayfs: missing 'lowerdir' [ 472.294471][T12825] overlayfs: missing 'lowerdir' [ 474.166821][T12888] overlayfs: missing 'workdir' [ 476.191064][T12946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3832'. [ 476.220692][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3832'. [ 476.275303][T12946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.319833][T12946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3832'. [ 476.373419][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3832'. [ 476.512283][T12946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.717231][T12967] overlayfs: missing 'lowerdir' [ 477.874205][T12969] overlayfs: missing 'workdir' [ 480.465830][T13049] binfmt_misc: register: failed to install interpreter file ./file0 [ 481.149778][T13075] overlayfs: missing 'workdir' [ 488.891415][T13276] tipc: Failed to remove unknown binding: 66,1,1/0:3840027810/3840027812 [ 488.940679][T13276] tipc: Failed to remove unknown binding: 66,1,1/0:3840027810/3840027812 [ 490.165307][T13303] loop5: detected capacity change from 0 to 7 [ 490.206463][ T9843] Dev loop5: unable to read RDB block 7 [ 490.213658][ T9843] loop5: unable to read partition table [ 490.233040][ T9843] loop5: partition table beyond EOD, truncated [ 490.262752][T13303] Dev loop5: unable to read RDB block 7 [ 490.283501][T13303] loop5: unable to read partition table [ 490.299726][T13303] loop5: partition table beyond EOD, truncated [ 490.329964][T13303] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 490.375125][ T3561] Dev loop5: unable to read RDB block 7 [ 490.391092][ T3561] loop5: unable to read partition table [ 490.421565][ T3561] loop5: partition table beyond EOD, truncated [ 491.671488][T13329] loop5: detected capacity change from 0 to 7 [ 491.705663][ T9843] Dev loop5: unable to read RDB block 7 [ 491.713604][ T9843] loop5: unable to read partition table [ 491.736910][ T9843] loop5: partition table beyond EOD, truncated [ 491.779971][T13329] Dev loop5: unable to read RDB block 7 [ 491.791529][T13329] loop5: unable to read partition table [ 491.823775][T13329] loop5: partition table beyond EOD, truncated [ 491.851123][T13329] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 493.789376][T13374] loop5: detected capacity change from 0 to 7 [ 493.840764][T13374] Dev loop5: unable to read RDB block 7 [ 493.877002][T13374] loop5: unable to read partition table [ 493.903519][T13374] loop5: partition table beyond EOD, truncated [ 493.960546][T13374] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 494.027420][ T3561] Dev loop5: unable to read RDB block 7 [ 494.033140][ T3561] loop5: unable to read partition table [ 494.053557][ T3561] loop5: partition table beyond EOD, truncated [ 494.688723][T13384] loop5: detected capacity change from 0 to 7 [ 494.712939][ T9843] Dev loop5: unable to read RDB block 7 [ 494.726579][ T9843] loop5: unable to read partition table [ 494.732478][ T9843] loop5: partition table beyond EOD, truncated [ 494.759159][T13384] Dev loop5: unable to read RDB block 7 [ 494.775932][T13384] loop5: unable to read partition table [ 494.803946][T13384] loop5: partition table beyond EOD, truncated [ 494.831098][T13384] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 496.129587][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 496.174918][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.219099][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.375962][T13420] overlayfs: missing 'workdir' [ 497.515075][T13426] loop5: detected capacity change from 0 to 7 [ 497.535678][T13426] Dev loop5: unable to read RDB block 7 [ 497.551722][T13426] loop5: unable to read partition table [ 497.561944][T13426] loop5: partition table beyond EOD, truncated [ 497.588687][T13426] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 498.617910][T13455] loop5: detected capacity change from 0 to 7 [ 498.639379][ T9843] Dev loop5: unable to read RDB block 7 [ 498.648711][ T9843] loop5: unable to read partition table [ 498.689620][ T9843] loop5: partition table beyond EOD, truncated [ 498.720114][T13455] Dev loop5: unable to read RDB block 7 [ 498.735647][T13455] loop5: unable to read partition table [ 498.741470][T13455] loop5: partition table beyond EOD, truncated [ 498.753415][T13455] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 501.243915][T13508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4090'. [ 501.284288][T13508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4090'. [ 501.387021][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.400860][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.463507][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 506.541196][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4126'. [ 506.585766][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4126'. [ 506.749297][T13590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.810226][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4126'. [ 506.860712][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4126'. [ 506.939903][T13590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.752007][T13659] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 510.811240][T13659] EXT4-fs (loop4): unable to read superblock [ 514.592988][T13728] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 514.630361][T13728] EXT4-fs (loop2): unable to read superblock [ 515.351182][T13738] loop5: detected capacity change from 0 to 7 [ 515.409745][T13738] Dev loop5: unable to read RDB block 7 [ 515.416072][T13738] loop5: unable to read partition table [ 515.421961][T13738] loop5: partition table beyond EOD, truncated [ 515.469991][T13738] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 517.615720][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4211'. [ 517.643334][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 517.704978][T13775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.725512][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4211'. [ 517.755694][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 517.843037][T13775] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.827165][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 520.729422][T13823] overlayfs: missing 'workdir' [ 522.054902][T13854] loop5: detected capacity change from 0 to 7 [ 522.093549][T13854] Dev loop5: unable to read RDB block 7 [ 522.099186][T13854] loop5: unable to read partition table [ 522.133499][T13854] loop5: partition table beyond EOD, truncated [ 522.160614][T13854] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 523.077993][T13866] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 523.130369][T13866] EXT4-fs (loop1): unable to read superblock [ 525.873116][T13930] overlayfs: missing 'workdir' [ 527.954539][T13967] overlayfs: missing 'lowerdir' [ 528.726193][T13998] overlayfs: failed to resolve './file1': -2 [ 528.971262][T14012] tipc: Failed to remove unknown binding: 66,1,1/0:3169204378/3169204380 [ 529.033405][T14012] tipc: Failed to remove unknown binding: 66,1,1/0:3169204378/3169204380 [ 529.073544][T11541] Bluetooth: hci2: command 0x0406 tx timeout [ 529.775837][T14033] overlayfs: failed to resolve './file1': -2 [ 530.610390][T14061] overlayfs: failed to resolve './file1': -2 [ 530.770646][T14064] overlayfs: missing 'lowerdir' [ 532.525755][T14090] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 533.162047][T14100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4360'. [ 533.181643][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4360'. [ 533.267587][T14100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 533.334698][T14100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4360'. [ 533.382685][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4360'. [ 533.498190][T14100] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.607080][T14114] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 533.671949][T14114] EXT4-fs (loop0): unable to read superblock [ 534.171544][T14144] overlayfs: missing 'lowerdir' [ 535.474371][T14181] overlayfs: missing 'lowerdir' [ 535.500083][T14183] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 535.531998][T14183] EXT4-fs (loop3): unable to read superblock [ 535.753597][T14189] tipc: Failed to remove unknown binding: 66,1,1/0:1617247053/1617247055 [ 535.796720][T14189] tipc: Failed to remove unknown binding: 66,1,1/0:1617247053/1617247055 [ 537.250127][T14229] overlayfs: failed to resolve './file1': -2 [ 538.081681][T14248] overlayfs: failed to resolve './file1': -2 [ 539.303506][T11355] Bluetooth: hci1: command 0x0406 tx timeout [ 540.742118][T14298] loop5: detected capacity change from 0 to 7 [ 540.793527][T14298] Dev loop5: unable to read RDB block 7 [ 540.799928][T14298] loop5: unable to read partition table [ 540.816186][T14298] loop5: partition table beyond EOD, truncated [ 540.843610][T14298] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 540.888298][ T3561] Dev loop5: unable to read RDB block 7 [ 540.913388][ T3561] loop5: unable to read partition table [ 540.919199][ T3561] loop5: partition table beyond EOD, truncated [ 541.473103][T14308] overlayfs: missing 'lowerdir' [ 542.040252][T14322] overlayfs: missing 'lowerdir' [ 542.576128][T14339] TCP: TCP_TX_DELAY enabled [ 542.974520][T14352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 543.026835][T14352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 543.831366][T14370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 543.849612][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.536041][T14392] overlayfs: missing 'lowerdir' [ 546.818530][T14396] loop5: detected capacity change from 0 to 7 [ 546.847225][ T9843] Dev loop5: unable to read RDB block 7 [ 546.852860][ T9843] loop5: unable to read partition table [ 546.878261][ T9843] loop5: partition table beyond EOD, truncated [ 546.909164][T14396] Dev loop5: unable to read RDB block 7 [ 546.935391][T14396] loop5: unable to read partition table [ 546.965906][T14396] loop5: partition table beyond EOD, truncated [ 546.972135][T14396] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 548.878761][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4526'. [ 549.012897][T14456] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 549.065573][T14456] EXT4-fs (loop0): unable to read superblock [ 549.549055][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 550.129260][T14493] overlayfs: unrecognized mount option "verity=require" or missing value [ 550.385558][T14507] tipc: Failed to remove unknown binding: 66,1,1/0:720905523/720905525 [ 550.443701][T14507] tipc: Failed to remove unknown binding: 66,1,1/0:720905523/720905525 [ 551.013548][T11541] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 551.273301][T11541] usb 1-1: Using ep0 maxpacket: 8 [ 551.361017][T14546] overlayfs: missing 'lowerdir' [ 551.483716][T11541] usb 1-1: unable to get BOS descriptor or descriptor too short [ 551.583587][T11541] usb 1-1: config 0 has no interfaces? [ 551.803501][T11541] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01 [ 551.823384][T11541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.859430][T11541] usb 1-1: Product: syz [ 551.884144][T11541] usb 1-1: Manufacturer: syz [ 551.888788][T11541] usb 1-1: SerialNumber: syz [ 551.934453][T11541] usb 1-1: config 0 descriptor?? [ 552.196503][ T23] usb 1-1: USB disconnect, device number 5 [ 553.458546][T14598] overlayfs: missing 'lowerdir' [ 554.999272][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 555.276621][T14631] overlayfs: missing 'lowerdir' [ 555.369556][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4611'. [ 555.409149][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4611'. [ 555.445302][T14634] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.454132][T14634] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.462851][T14634] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.471842][T14634] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.570038][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4611'. [ 555.604082][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4611'. [ 556.852347][T14660] netlink: 536 bytes leftover after parsing attributes in process `syz.3.4625'. [ 556.892036][T14660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4625'. [ 558.038343][T14686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4636'. [ 558.067832][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4636'. [ 558.185127][T14686] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.223693][T14686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4636'. [ 558.344194][T14686] 8021q: adding VLAN 0 to HW filter on device bond8 [ 560.821571][T14718] overlayfs: missing 'lowerdir' [ 562.828050][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.834471][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.560980][T14855] __nla_validate_parse: 1 callbacks suppressed [ 564.560998][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4718'. [ 564.596820][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4718'. [ 564.607492][T14856] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 564.650051][T14856] EXT4-fs (loop3): unable to read superblock [ 564.772811][T14855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.854124][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4718'. [ 564.883449][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4718'. [ 564.982045][T14855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.104091][T14912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 568.031881][T14962] cgroup: subsys name conflicts with all [ 569.479742][T14990] overlayfs: missing 'lowerdir' [ 569.731395][T15002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4788'. [ 569.780676][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4788'. [ 569.856348][T15002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.913604][T15002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4788'. [ 569.982500][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4788'. [ 570.069331][T15002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.820514][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4805'. [ 570.843555][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4805'. [ 570.915001][T15041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.995437][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4805'. [ 571.077361][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4805'. [ 571.167052][T15041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.526534][T15063] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 571.564830][T15063] EXT4-fs (loop3): unable to read superblock [ 574.113469][T11541] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 574.320588][T15139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4851'. [ 574.350476][T15139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4851'. [ 574.543604][T11541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.571264][T11541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.602449][T11541] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.636267][T11541] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.661337][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.695942][T11541] usb 4-1: config 0 descriptor?? [ 575.199605][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.239155][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.259362][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.283036][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.311385][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.329287][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.347088][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.374609][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.411616][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.431965][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.454800][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.472653][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.492911][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.521128][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.538656][T11541] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 575.558593][T11541] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 575.655687][T11541] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 575.717818][T11541] usb 4-1: USB disconnect, device number 2 [ 576.030476][T15163] fido_id[15163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 576.474510][T15175] tipc: Failed to remove unknown binding: 66,1,1/0:2815424052/2815424054 [ 576.483182][T15175] tipc: Failed to remove unknown binding: 66,1,1/0:2815424052/2815424054 [ 578.052513][T15231] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4895'. [ 578.299210][T15238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4898'. [ 578.313538][T15238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4898'. [ 578.679336][T15251] tipc: Failed to remove unknown binding: 66,1,1/0:2939189214/2939189216 [ 578.722356][T15251] tipc: Failed to remove unknown binding: 66,1,1/0:2939189214/2939189216 [ 582.087814][T11541] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 582.373395][T11541] usb 5-1: Using ep0 maxpacket: 32 [ 582.609393][T11541] usb 5-1: config 9 has an invalid interface number: 254 but max is 0 [ 582.621477][T11541] usb 5-1: config 9 has no interface number 0 [ 582.633751][T11541] usb 5-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 582.657886][T11541] usb 5-1: config 9 interface 254 has no altsetting 0 [ 582.878598][T11541] usb 5-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 582.900043][T11541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.920389][T11541] usb 5-1: Product: syz [ 582.940597][T11541] usb 5-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 582.974684][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.028840][T11541] usb 5-1: SerialNumber: syz [ 583.083631][T15345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 583.574086][T11541] hso 5-1:9.254: Not our interface [ 583.621834][T11541] usb 5-1: USB disconnect, device number 2 [ 585.390349][T15406] overlayfs: missing 'lowerdir' [ 586.032708][T15428] netlink: 'syz.2.4991': attribute type 2 has an invalid length. [ 586.081893][T15428] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4991'. [ 586.292907][T15434] overlayfs: missing 'lowerdir' [ 586.570576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 586.683093][T15445] tipc: Failed to remove unknown binding: 66,1,1/0:3748427758/3748427760 [ 586.722886][T15445] tipc: Failed to remove unknown binding: 66,1,1/0:3748427758/3748427760 [ 586.774847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 586.784132][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 588.854202][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5020'. [ 588.883498][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5020'. [ 591.484934][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 591.792160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 600.308939][T15623] tipc: Failed to remove unknown binding: 66,1,1/0:625431967/625431969 [ 600.330279][T15623] tipc: Failed to remove unknown binding: 66,1,1/0:625431967/625431969 [ 601.339589][T15633] netlink: 536 bytes leftover after parsing attributes in process `syz.0.5088'. [ 601.368805][T15633] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5088'. [ 602.720740][T15651] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 602.763361][T15651] EXT4-fs (loop3): unable to read superblock [ 605.514072][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 606.166039][T15687] tmpfs: Bad value for 'mpol' [ 606.945134][ T26] audit: type=1326 audit(1763115264.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.0.5127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a2b5dd6c9 code=0x0 [ 607.748935][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.809155][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.930164][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.963329][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.037040][T15711] chnl_net:caif_netlink_parms(): no params data found [ 608.087942][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.123300][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.246495][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.301246][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.370380][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.410702][T15711] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.455450][T15711] device bridge_slave_0 entered promiscuous mode [ 608.478929][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.486903][T15711] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.497594][T15711] device bridge_slave_1 entered promiscuous mode [ 608.626259][T15711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.666145][T15711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.786376][T15711] team0: Port device team_slave_0 added [ 608.838655][T15711] team0: Port device team_slave_1 added [ 609.004704][T15711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.011689][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.127733][T15711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.215437][T15711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.232702][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.339412][T15711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.390835][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 609.544658][T15711] device hsr_slave_0 entered promiscuous mode [ 609.571087][T15711] device hsr_slave_1 entered promiscuous mode [ 609.588441][T15711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.608582][T15711] Cannot create hsr debugfs directory [ 609.758095][T15760] overlayfs: missing 'lowerdir' [ 610.129066][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5147'. [ 610.144367][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5147'. [ 610.270742][T15711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 610.342117][T15711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 610.391340][T15711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 610.406454][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5147'. [ 610.429724][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5147'. [ 610.502626][T15711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 610.691658][ T154] device hsr_slave_0 left promiscuous mode [ 610.704044][ T154] device hsr_slave_1 left promiscuous mode [ 610.775565][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.803333][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.848444][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.885547][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.910713][ T154] device bridge_slave_1 left promiscuous mode [ 610.927589][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.958646][ T154] device bridge_slave_0 left promiscuous mode [ 610.978223][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.019626][T15809] tipc: Failed to remove unknown binding: 66,1,1/0:1564712225/1564712227 [ 611.030502][ T154] device veth1_macvtap left promiscuous mode [ 611.051661][ T154] device veth0_macvtap left promiscuous mode [ 611.061700][T15809] tipc: Failed to remove unknown binding: 66,1,1/0:1564712225/1564712227 [ 611.069851][ T154] device veth1_vlan left promiscuous mode [ 611.090063][ T154] device veth0_vlan left promiscuous mode [ 611.463610][T11355] Bluetooth: hci3: command 0x041b tx timeout [ 611.484450][ T154] bond4 (unregistering): Released all slaves [ 611.516265][ T154] bond3 (unregistering): Released all slaves [ 611.541528][ T154] bond2 (unregistering): Released all slaves [ 611.570264][ T154] bond1 (unregistering): Released all slaves [ 611.913429][ T154] team0 (unregistering): Port device team_slave_1 removed [ 611.947519][ T154] team0 (unregistering): Port device team_slave_0 removed [ 611.984133][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.041107][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.194151][ T154] bond0 (unregistering): Released all slaves [ 612.592967][T15711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.646666][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.665467][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.695339][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.741804][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.769897][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.783459][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 612.843934][T10706] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.851051][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.884056][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.950900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.984092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.015377][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.022490][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.033339][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 613.089452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.131586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 613.243665][ T13] usb 1-1: config 9 has an invalid interface number: 254 but max is 0 [ 613.252019][ T13] usb 1-1: config 9 has no interface number 0 [ 613.258803][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 613.281396][ T13] usb 1-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 613.286589][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.312378][ T13] usb 1-1: config 9 interface 254 has no altsetting 0 [ 613.355763][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.373851][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.414277][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.433711][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.453620][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.494065][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.513665][ T13] usb 1-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 613.515240][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.522796][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.576204][ T13] usb 1-1: Product: syz [ 613.580433][ T13] usb 1-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 613.614282][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.715442][ T13] usb 1-1: SerialNumber: syz [ 613.737794][ T4195] Bluetooth: hci3: command 0x040f tx timeout [ 613.758756][T15832] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 613.759114][T15711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.917352][T15867] overlayfs: missing 'lowerdir' [ 614.073944][ T13] hso 1-1:9.254: Not our interface [ 614.112713][ T13] usb 1-1: USB disconnect, device number 6 [ 614.357942][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.365676][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.407476][T15711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.041887][T15911] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 615.103384][T15911] EXT4-fs (loop3): unable to read superblock [ 615.261768][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 615.309134][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 615.415111][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 615.487625][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 615.526294][T15711] device veth0_vlan entered promiscuous mode [ 615.548655][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.571614][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.617893][T15711] device veth1_vlan entered promiscuous mode [ 615.754113][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.779986][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.783770][T11355] Bluetooth: hci3: command 0x0419 tx timeout [ 615.825964][T15711] device veth0_macvtap entered promiscuous mode [ 615.851429][T15711] device veth1_macvtap entered promiscuous mode [ 615.965035][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.006182][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.053269][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.096418][T15950] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 616.118197][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.148651][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.173745][T15950] EXT4-fs (loop3): unable to read superblock [ 616.190088][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.230669][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.264078][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.324889][T15711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.332799][T15952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5196'. [ 616.371328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.390357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.422880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.467847][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.512823][T15952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5196'. [ 616.561375][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.602596][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.648822][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.700567][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.736505][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.780315][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.831088][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.863431][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.920193][T15711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.954684][T11908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 616.984427][T11908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.008948][T15711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.039201][T15711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.070867][T15711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.101298][T15711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.316947][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.335672][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.407375][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.437293][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.456821][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.510817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 618.924833][T15997] tmpfs: Bad value for 'mpol' [ 620.177819][T16017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5205'. [ 620.451246][T16021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5209'. [ 620.523780][T16021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5209'. [ 621.038509][T16040] overlayfs: missing 'lowerdir' [ 622.363866][T16083] sp0: Synchronizing with TNC [ 622.569999][T16088] No source specified [ 623.546335][T16117] overlayfs: missing 'lowerdir' [ 624.267308][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.273723][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.702736][T16246] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 629.759915][T16248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5289'. [ 629.833481][T16248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5289'. [ 633.411495][T16339] tipc: Failed to remove unknown binding: 66,1,1/0:257711185/257711187 [ 633.465338][T16339] tipc: Failed to remove unknown binding: 66,1,1/0:257711185/257711187 [ 634.889898][T16413] overlayfs: missing 'lowerdir' [ 635.302071][T16430] tipc: Failed to remove unknown binding: 66,1,1/0:589826099/589826101 [ 635.361400][T16430] tipc: Failed to remove unknown binding: 66,1,1/0:589826099/589826101 [ 635.764179][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5355'. [ 636.335080][T16471] tipc: Failed to remove unknown binding: 66,1,1/0:3448852269/3448852271 [ 636.419035][T16471] tipc: Failed to remove unknown binding: 66,1,1/0:3448852269/3448852271 [ 637.476284][T16523] 9pnet_virtio: no channels available for device syz [ 637.514775][T16523] overlayfs: overlapping lowerdir path [ 637.643397][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5382'. [ 638.365971][T16558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5391'. [ 638.423990][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5391'. [ 638.551936][T16558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 638.639696][T16558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5391'. [ 638.718764][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5391'. [ 638.822172][T16578] tipc: Failed to remove unknown binding: 66,1,1/0:3234198921/3234198923 [ 638.849510][T16558] 8021q: adding VLAN 0 to HW filter on device bond10 [ 638.927852][T16578] tipc: Failed to remove unknown binding: 66,1,1/0:3234198921/3234198923 [ 639.209818][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5400'. [ 639.522773][T16597] binder: 16596:16597 ioctl c0306201 0 returned -14 [ 640.972049][T16638] tmpfs: Bad value for 'mpol' [ 641.803437][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 642.079271][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 642.308934][T16664] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 642.333616][ T21] usb 4-1: config 9 has an invalid interface number: 254 but max is 0 [ 642.341831][ T21] usb 4-1: config 9 has no interface number 0 [ 642.379391][ T21] usb 4-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 642.420544][ T21] usb 4-1: config 9 interface 254 has no altsetting 0 [ 642.619289][ T21] usb 4-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 642.648960][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.673283][ T21] usb 4-1: Product: syz [ 642.698677][ T21] usb 4-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 642.732648][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.799470][ T21] usb 4-1: SerialNumber: syz [ 642.843683][T16652] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 643.175986][ T21] hso 4-1:9.254: Not our interface [ 643.196146][T16684] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5435'. [ 643.204432][ T21] usb 4-1: USB disconnect, device number 3 [ 643.250216][T16684] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5435'. [ 645.473017][T16720] tipc: Failed to remove unknown binding: 66,1,1/0:2639550652/2639550654 [ 645.497669][T16720] tipc: Failed to remove unknown binding: 66,1,1/0:2639550652/2639550654 [ 645.843771][T16724] overlayfs: missing 'lowerdir' [ 647.043870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 647.293345][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 647.660735][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5485'. [ 647.680184][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5485'. [ 647.752556][T16773] tipc: Failed to remove unknown binding: 66,1,1/0:1378080294/1378080296 [ 647.778391][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5485'. [ 647.779208][T16773] tipc: Failed to remove unknown binding: 66,1,1/0:1378080294/1378080296 [ 647.821923][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5485'. [ 648.781774][T16779] chnl_net:caif_netlink_parms(): no params data found [ 649.137147][T16779] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.173353][T16779] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.221595][T16779] device bridge_slave_0 entered promiscuous mode [ 649.252341][T16779] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.286620][T16779] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.334817][T16779] device bridge_slave_1 entered promiscuous mode [ 649.419989][T16779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.455177][T16779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.560093][T16779] team0: Port device team_slave_0 added [ 649.587289][T16779] team0: Port device team_slave_1 added [ 649.678053][T16779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.702468][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.728453][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.801359][T16779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.850448][T16779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.878331][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.959075][T16779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.102273][T16779] device hsr_slave_0 entered promiscuous mode [ 650.136700][T16779] device hsr_slave_1 entered promiscuous mode [ 650.151933][T16779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.199953][T16779] Cannot create hsr debugfs directory [ 650.343445][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 650.589817][T16779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.831142][T16779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.967033][T16779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.114825][T16779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.422917][T16779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 651.472904][T16779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 651.501614][T16779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 651.535173][T16779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 651.818894][T16779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.874006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.884145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.920352][T16779] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.948843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 651.964367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.003146][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.010314][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.071129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.092553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.132719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.188925][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.196106][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.245670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.284082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.305822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.355297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.374147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 652.423512][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 652.427455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.490085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.509822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 652.548051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.582966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.610675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.636747][T16779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 653.066332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 653.094279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 653.128458][T16779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.220979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 653.260799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 653.331812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 653.362764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 653.389311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 653.421518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 653.483947][T16779] device veth0_vlan entered promiscuous mode [ 653.538644][T16779] device veth1_vlan entered promiscuous mode [ 653.599793][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5524'. [ 653.772886][T16868] team0 (unregistering): Port device team_slave_0 removed [ 653.826677][T16868] team0 (unregistering): Port device team_slave_1 removed [ 653.924439][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 653.937429][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 654.019896][T16779] device veth0_macvtap entered promiscuous mode [ 654.038088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 654.058029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 654.080133][T16779] device veth1_macvtap entered promiscuous mode [ 654.094406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 654.117062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 654.151974][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.225563][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.266175][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.323395][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.353555][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.373113][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.404231][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.433701][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.481431][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.506034][T11355] Bluetooth: hci1: command 0x040f tx timeout [ 654.530059][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.551548][T16779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.592744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 654.613962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 654.635827][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.670445][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.695704][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.736886][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.778956][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.806926][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.837884][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.868776][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.908916][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.935641][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.969584][T16779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.049196][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 655.058330][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.092128][T16779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.118287][T16779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.143485][T16779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.172554][T16779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.397514][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.444743][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.515306][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 655.543750][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.551943][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.616947][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 655.792250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 655.801707][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 655.831161][ T154] device hsr_slave_0 left promiscuous mode [ 655.849743][ T154] device hsr_slave_1 left promiscuous mode [ 655.868735][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.896370][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.916678][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.948617][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.976780][ T154] device bridge_slave_1 left promiscuous mode [ 655.996596][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.030900][ T154] device bridge_slave_0 left promiscuous mode [ 656.046198][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.094467][ T154] device veth1_macvtap left promiscuous mode [ 656.116472][ T154] device veth0_macvtap left promiscuous mode [ 656.144922][ T154] device veth1_vlan left promiscuous mode [ 656.171233][ T154] device veth0_vlan left promiscuous mode [ 656.583961][ T4195] Bluetooth: hci1: command 0x0419 tx timeout [ 656.617146][ T154] bond6 (unregistering): Released all slaves [ 656.677448][ T154] bond5 (unregistering): Released all slaves [ 656.712189][ T154] bond4 (unregistering): Released all slaves [ 656.782296][ T154] bond3 (unregistering): Released all slaves [ 656.835698][ T154] bond2 (unregistering): Released all slaves [ 656.864213][ T154] bond1 (unregistering): Released all slaves [ 657.292905][ T154] team0 (unregistering): Port device team_slave_1 removed [ 657.341572][ T154] team0 (unregistering): Port device team_slave_0 removed [ 657.373732][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.427997][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.662696][ T154] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 657.679385][ T154] bond0 (unregistering): Released all slaves [ 658.433868][T16930] syz.2.5549 (16930): attempted to duplicate a private mapping with mremap. This is not supported. [ 660.672391][T16984] xt_l2tp: missing protocol rule (udp|l2tpip) [ 661.885860][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5591'. [ 661.956927][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5591'. [ 662.792958][T17046] tmpfs: Bad value for 'mpol' [ 662.975609][T17054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5604'. [ 663.023490][T17054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5604'. [ 664.944706][T17112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5632'. [ 664.983545][T17112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5632'. [ 665.962780][T17128] netlink: 'syz.3.5638': attribute type 4 has an invalid length. [ 666.250691][T17135] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5643'. [ 668.323260][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 668.347647][T17192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5667'. [ 668.367402][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5667'. [ 668.499008][T17192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5667'. [ 668.536055][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5667'. [ 668.575365][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5669'. [ 668.593274][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 668.607071][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5669'. [ 668.638537][T17195] netlink: 'syz.5.5669': attribute type 20 has an invalid length. [ 668.680901][T17195] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.690077][T17195] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.699552][T17195] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.708640][T17195] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.723676][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.734753][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5669'. [ 668.749698][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 668.773265][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5669'. [ 668.782255][T17195] netlink: 'syz.5.5669': attribute type 20 has an invalid length. [ 668.790696][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 668.823275][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.844072][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 668.863304][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.168699][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 669.180171][ T21] usbtmc 1-1:16.0: can't read capabilities [ 669.389315][ T4195] usb 1-1: USB disconnect, device number 7 [ 669.678823][T17226] tmpfs: Bad value for 'mpol' [ 671.505780][T17255] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 671.567961][T17255] EXT4-fs (loop3): unable to read superblock [ 672.866354][T17269] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5705'. [ 673.467368][T17277] kvm: pic: single mode not supported [ 673.467501][T17277] kvm: pic: level sensitive irq not supported [ 673.493857][T17277] kvm: pic: non byte read [ 673.534181][T17277] kvm: pic: non byte read [ 673.538998][T17277] kvm: pic: non byte read [ 673.583787][T17277] kvm: pic: non byte read [ 673.590353][T17277] kvm: pic: non byte read [ 673.610892][T17277] kvm: pic: non byte read [ 673.621121][T17277] kvm: pic: non byte read [ 673.639930][T17277] kvm: pic: non byte read [ 673.650098][T17277] kvm: pic: non byte read [ 673.977195][T17288] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 674.013322][T17288] EXT4-fs (loop3): unable to read superblock [ 674.307568][T17293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5708'. [ 674.325485][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5708'. [ 674.382943][T17293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5708'. [ 674.401153][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5708'. [ 677.923251][ T3524] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 678.193679][ T3524] usb 2-1: Using ep0 maxpacket: 32 [ 678.408594][ T3524] usb 2-1: config 9 has an invalid interface number: 254 but max is 0 [ 678.423313][ T3524] usb 2-1: config 9 has no interface number 0 [ 678.443325][ T3524] usb 2-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 678.473533][ T3524] usb 2-1: config 9 interface 254 has no altsetting 0 [ 678.713517][ T3524] usb 2-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 678.743053][ T3524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.773333][ T3524] usb 2-1: Product: syz [ 678.777660][ T3524] usb 2-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 678.811534][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.924350][ T3524] usb 2-1: SerialNumber: syz [ 678.973638][T17350] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 679.285935][ T3524] hso 2-1:9.254: Not our interface [ 679.316219][ T3524] usb 2-1: USB disconnect, device number 3 [ 680.096689][T17396] netlink: 'syz.5.5763': attribute type 4 has an invalid length. [ 680.411405][T17400] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 680.469333][T17400] EXT4-fs (loop5): unable to read superblock [ 682.852724][T17424] chnl_net:caif_netlink_parms(): no params data found [ 683.166689][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.174058][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.182251][T17424] device bridge_slave_0 entered promiscuous mode [ 683.211834][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.230065][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.260186][T17424] device bridge_slave_1 entered promiscuous mode [ 683.366077][T17424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.406313][T17424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.524369][T17424] team0: Port device team_slave_0 added [ 683.562697][T17424] team0: Port device team_slave_1 added [ 683.648021][T17424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.686428][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.784164][T17424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.832057][T17424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.880693][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.963270][T17424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.112188][T17424] device hsr_slave_0 entered promiscuous mode [ 684.142796][T17424] device hsr_slave_1 entered promiscuous mode [ 684.172447][T17424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.202249][T17424] Cannot create hsr debugfs directory [ 684.263555][T11355] Bluetooth: hci0: command 0x0409 tx timeout [ 684.567842][T17424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.610007][T17424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.795755][T17424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.824120][T17424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.867053][T17472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5794'. [ 684.913359][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5794'. [ 684.980102][T17424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.990892][T17424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.011855][T17472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5794'. [ 685.064424][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5794'. [ 685.118217][T17424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.152973][T17424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.363419][ T3524] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 685.460724][T17424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 685.492992][T17424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 685.516455][T17424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 685.546626][T17424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 685.710268][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.717145][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.804170][ T3524] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.822043][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.842777][ T3524] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.873829][ T3524] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 685.883001][ T3524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.901302][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 685.914265][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.928824][ T3524] usb 3-1: config 0 descriptor?? [ 685.937006][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.994195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 686.038681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 686.057399][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.064579][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.093833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 686.119815][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 686.139207][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 686.191865][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.199023][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.254580][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 686.281054][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 686.343600][ T4195] Bluetooth: hci0: command 0x041b tx timeout [ 686.384580][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 686.412948][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 686.430403][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 686.453083][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 686.503015][T17424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.526983][T17424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.553112][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 686.563990][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 686.581661][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 686.600998][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 686.655187][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 686.686350][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.760083][ T155] device hsr_slave_0 left promiscuous mode [ 686.781473][ T155] device hsr_slave_1 left promiscuous mode [ 686.808977][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.858317][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.880474][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.888360][ T3524] usbhid 3-1:0.0: can't add hid device: -71 [ 686.903463][ T3524] usbhid: probe of 3-1:0.0 failed with error -71 [ 686.922508][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.935684][ T3524] usb 3-1: USB disconnect, device number 2 [ 686.950204][ T155] device bridge_slave_1 left promiscuous mode [ 686.964636][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.010066][ T155] device bridge_slave_0 left promiscuous mode [ 687.023375][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.053843][ T155] device veth1_macvtap left promiscuous mode [ 687.060015][ T155] device veth0_macvtap left promiscuous mode [ 687.073685][ T155] device veth1_vlan left promiscuous mode [ 687.089729][ T155] device veth0_vlan left promiscuous mode [ 687.253342][ T4195] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 687.361555][ T155] bond6 (unregistering): Released all slaves [ 687.398943][ T155] bond5 (unregistering): Released all slaves [ 687.418144][ T155] bond4 (unregistering): Released all slaves [ 687.467906][ T155] bond3 (unregistering): Released all slaves [ 687.485178][ T155] bond2 (unregistering): Released all slaves [ 687.507622][ T155] bond1 (unregistering): Released all slaves [ 687.526696][ T4195] usb 6-1: Using ep0 maxpacket: 32 [ 687.727255][ T4195] usb 6-1: config 9 has an invalid interface number: 254 but max is 0 [ 687.737969][ T155] team0 (unregistering): Port device team_slave_1 removed [ 687.747296][ T4195] usb 6-1: config 9 has no interface number 0 [ 687.766727][ T4195] usb 6-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 687.787378][ T4195] usb 6-1: config 9 interface 254 has no altsetting 0 [ 687.815884][ T155] team0 (unregistering): Port device team_slave_0 removed [ 687.851452][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.910454][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.963564][ T4195] usb 6-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 687.993294][ T4195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.001375][ T4195] usb 6-1: Product: syz [ 688.006570][ T4195] usb 6-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 688.040410][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.092421][ T4195] usb 6-1: SerialNumber: syz [ 688.113611][T17512] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 688.138619][ T155] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 688.173471][ T155] bond0 (unregistering): Released all slaves [ 688.417657][ T4195] hso 6-1:9.254: Not our interface [ 688.427757][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.439381][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.454159][ T4195] usb 6-1: USB disconnect, device number 2 [ 688.478728][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.493419][T11355] Bluetooth: hci0: command 0x040f tx timeout [ 688.556877][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 688.576613][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 688.646767][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 688.673995][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 688.722641][T17424] device veth0_vlan entered promiscuous mode [ 688.734310][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 688.750868][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 688.771795][T17424] device veth1_vlan entered promiscuous mode [ 688.852616][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 688.864462][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 688.883444][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 688.944036][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 688.955394][T17424] device veth0_macvtap entered promiscuous mode [ 688.975881][T17424] device veth1_macvtap entered promiscuous mode [ 689.060977][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.126791][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.159158][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.178800][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.199614][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.222448][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.245645][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.267289][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.298535][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.342331][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 689.357134][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 689.385891][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 689.409586][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 689.441499][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.472875][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.505749][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.533544][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.553230][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.573242][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.612458][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.651764][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.685329][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.712161][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 689.742539][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 689.769741][T17551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5823'. [ 689.790261][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5823'. [ 689.825775][T17424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.841144][T17424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.901481][T17424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.927240][T17424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.969012][T17551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5823'. [ 689.983506][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5823'. [ 690.170152][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.188843][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.224113][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.289277][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.315734][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.392622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.503587][ T4195] Bluetooth: hci0: command 0x0419 tx timeout [ 690.777156][T17578] tmpfs: Bad value for 'mpol' [ 691.995696][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5853'. [ 693.889864][T17643] kvm: pic: non byte read [ 695.383032][T17664] kvm: pic: non byte read [ 695.696985][T17675] netlink: 'syz.5.5883': attribute type 4 has an invalid length. [ 701.792532][T17797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5941'. [ 701.818071][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5941'. [ 701.874181][T17797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5941'. [ 701.885454][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5941'. [ 703.062453][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 703.343581][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 703.589399][ T21] usb 6-1: config 9 has an invalid interface number: 254 but max is 0 [ 703.603439][ T21] usb 6-1: config 9 has no interface number 0 [ 703.609583][ T21] usb 6-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 703.661781][ T21] usb 6-1: config 9 interface 254 has no altsetting 0 [ 703.849364][ T21] usb 6-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 703.858897][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.886479][ T21] usb 6-1: Product: syz [ 703.890699][ T21] usb 6-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 703.989574][ T21] usb 6-1: SerialNumber: syz [ 704.013600][T17823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 704.152035][T17850] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 704.170256][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.329384][ T21] hso 6-1:9.254: Not our interface [ 704.362582][ T21] usb 6-1: USB disconnect, device number 3 [ 704.471943][T17858] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 704.523275][T17858] EXT4-fs (loop1): unable to read superblock [ 705.729028][T17891] tmpfs: Bad value for 'mpol' [ 708.921395][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 709.062166][T17942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6006'. [ 709.079659][T17942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6006'. [ 709.124800][T17942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6006'. [ 709.149514][T17942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6006'. [ 709.193300][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 709.423486][ T21] usb 2-1: config 9 has an invalid interface number: 254 but max is 0 [ 709.443299][ T21] usb 2-1: config 9 has no interface number 0 [ 709.449432][ T21] usb 2-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 709.493221][ T21] usb 2-1: config 9 interface 254 has no altsetting 0 [ 709.713453][ T21] usb 2-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 709.722547][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.763279][ T21] usb 2-1: Product: syz [ 709.767512][ T21] usb 2-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 709.883239][ T21] usb 2-1: SerialNumber: syz [ 709.923555][T17938] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 710.226466][ T21] hso 2-1:9.254: Not our interface [ 710.254180][ T21] usb 2-1: USB disconnect, device number 4 [ 712.474373][T18000] tmpfs: Bad value for 'mpol' [ 712.874599][T18004] kvm: pic: single mode not supported [ 712.874627][T18004] kvm: pic: level sensitive irq not supported [ 712.912293][T18004] kvm: pic: non byte read [ 712.943808][T18004] kvm: pic: non byte read [ 712.961169][T18004] kvm: pic: non byte read [ 712.979156][T18004] kvm: pic: non byte read [ 713.006590][T18004] kvm: pic: non byte read [ 713.011412][T18004] kvm: pic: non byte read [ 713.071582][T18004] kvm: pic: non byte read [ 713.081766][T18004] kvm: pic: non byte read [ 713.110728][T18004] kvm: pic: non byte read [ 715.232449][T18026] tmpfs: Bad value for 'mpol' [ 716.682432][T18054] netlink: 'syz.5.6064': attribute type 4 has an invalid length. [ 718.162348][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6079'. [ 718.187008][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6079'. [ 718.254314][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6079'. [ 718.288931][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6079'. [ 719.214618][T18107] netlink: 'syz.3.6090': attribute type 4 has an invalid length. [ 721.381569][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.606131][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.792082][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.848202][T18171] netlink: 'syz.1.6116': attribute type 4 has an invalid length. [ 721.927905][T18154] chnl_net:caif_netlink_parms(): no params data found [ 721.995897][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.324334][T18154] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.360537][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.431150][T18154] device bridge_slave_0 entered promiscuous mode [ 722.475426][T18154] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.482530][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.594558][T18154] device bridge_slave_1 entered promiscuous mode [ 722.769358][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.816112][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.964054][T18154] team0: Port device team_slave_0 added [ 722.972587][T18154] team0: Port device team_slave_1 added [ 723.137944][T18154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.148280][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 723.180044][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.206047][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.249876][T18154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.288626][T18154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.318326][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.419807][T18154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.616789][T18154] device hsr_slave_0 entered promiscuous mode [ 723.652405][T18154] device hsr_slave_1 entered promiscuous mode [ 723.707758][T18154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.726140][T18154] Cannot create hsr debugfs directory [ 724.158852][ T154] device hsr_slave_0 left promiscuous mode [ 724.175747][ T154] device hsr_slave_1 left promiscuous mode [ 724.222461][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.259979][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.307319][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.351991][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.373054][ T154] device bridge_slave_1 left promiscuous mode [ 724.393402][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.624278][ T154] device bridge_slave_0 left promiscuous mode [ 724.694925][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.829496][ T154] device veth1_macvtap left promiscuous mode [ 724.839268][ T154] device veth0_macvtap left promiscuous mode [ 724.868724][ T154] device veth1_vlan left promiscuous mode [ 724.891586][ T154] device veth0_vlan left promiscuous mode [ 725.223509][ T3524] Bluetooth: hci5: command 0x041b tx timeout [ 725.330112][ T154] bond14 (unregistering): Released all slaves [ 725.363906][ T154] bond13 (unregistering): Released all slaves [ 725.391533][ T154] bond12 (unregistering): Released all slaves [ 725.417945][ T154] bond11 (unregistering): Released all slaves [ 725.442912][ T154] bond10 (unregistering): Released all slaves [ 725.478593][ T154] bond9 (unregistering): Released all slaves [ 725.502949][ T154] bond8 (unregistering): Released all slaves [ 725.539849][ T154] bond7 (unregistering): Released all slaves [ 725.571590][ T154] bond6 (unregistering): Released all slaves [ 725.601769][ T154] bond5 (unregistering): Released all slaves [ 725.632216][ T154] bond4 (unregistering): Released all slaves [ 725.671308][ T154] bond3 (unregistering): Released all slaves [ 725.721507][ T154] bond2 (unregistering): Released all slaves [ 725.752733][ T154] bond1 (unregistering): Released all slaves [ 726.024257][ T154] team0 (unregistering): Port device team_slave_1 removed [ 726.090036][ T154] team0 (unregistering): Port device team_slave_0 removed [ 726.129308][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.201697][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.388593][ T154] bond0 (unregistering): Released all slaves [ 727.303394][ T3524] Bluetooth: hci5: command 0x040f tx timeout [ 727.653926][T18154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.725140][T18154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 727.781649][T18154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.821982][T18154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 728.101593][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.160027][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 728.180611][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 728.220122][T18154] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.244089][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 728.274517][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 728.302200][T10706] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.309457][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.369715][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 728.388926][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 728.434205][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 728.478919][T10706] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.486071][T10706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.530029][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 728.564377][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 728.622979][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 728.652396][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 728.671733][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 728.695905][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 728.720721][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 728.749433][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 728.787740][T18154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.829865][T18154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 728.857038][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 728.869569][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 728.900296][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.383875][ T3524] Bluetooth: hci5: command 0x0419 tx timeout [ 729.391364][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 729.410789][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 729.446718][T18154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.540958][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.573803][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 729.653959][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 729.672790][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 729.702833][T18154] device veth0_vlan entered promiscuous mode [ 729.722679][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 729.759546][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 729.815788][T18154] device veth1_vlan entered promiscuous mode [ 729.928980][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 729.967465][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 730.011954][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.042656][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.074529][T18154] device veth0_macvtap entered promiscuous mode [ 730.097662][T18154] device veth1_macvtap entered promiscuous mode [ 730.177166][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 730.235125][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 730.263622][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.291534][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.318332][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.349526][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.399949][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.436502][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.476574][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.526309][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.558941][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.585425][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 730.611437][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 730.662500][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.689925][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.711209][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.732562][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.778160][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.837239][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.875337][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.903533][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.954573][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.987362][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 730.996812][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 731.026679][T18154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.061725][T18154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.104609][T18154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.143496][T18154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.370278][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.405282][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.469816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 731.515509][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.530557][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.582029][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 732.556351][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6174'. [ 733.863325][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 736.016243][T18441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6183'. [ 736.053635][T18441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6183'. [ 740.041332][T18486] kvm: pic: single mode not supported [ 740.041354][T18486] kvm: pic: level sensitive irq not supported [ 740.057255][T18486] kvm: pic: non byte read [ 740.088968][T18486] kvm: pic: non byte read [ 740.099111][T18486] kvm: pic: non byte read [ 740.109270][T18486] kvm: pic: non byte read [ 740.119432][T18486] kvm: pic: non byte read [ 740.145034][T18486] kvm: pic: non byte read [ 740.160171][T18486] kvm: pic: non byte read [ 740.170581][T18486] kvm: pic: non byte read [ 740.197414][T18486] kvm: pic: non byte read [ 740.411694][T18491] netlink: 'syz.3.6206': attribute type 4 has an invalid length. [ 741.252776][T18526] netlink: 'syz.0.6220': attribute type 4 has an invalid length. [ 742.245585][ T26] audit: type=1326 audit(1763115399.392:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 742.287874][T18565] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 742.326878][ T26] audit: type=1326 audit(1763115399.432:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 742.362989][T18565] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 742.408808][T18565] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 742.437737][ T26] audit: type=1326 audit(1763115399.432:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 742.483783][T18565] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 742.515646][T18565] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 742.528662][ T26] audit: type=1326 audit(1763115399.432:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 742.579556][T18565] pit: kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 742.598681][ T26] audit: type=1326 audit(1763115399.432:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 742.642438][T18565] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 742.688658][ T26] audit: type=1326 audit(1763115399.432:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 742.741719][ T26] audit: type=1326 audit(1763115399.862:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 742.802597][ T26] audit: type=1326 audit(1763115399.862:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d022b16c9 code=0x7ffc0000 [ 747.156698][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.163020][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.973419][T18266] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 748.263478][T18266] usb 3-1: Using ep0 maxpacket: 32 [ 748.509253][T18266] usb 3-1: config 9 has an invalid interface number: 254 but max is 0 [ 748.523339][T18266] usb 3-1: config 9 has no interface number 0 [ 748.539445][T18266] usb 3-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 748.567845][T18266] usb 3-1: config 9 interface 254 has no altsetting 0 [ 748.789329][T18266] usb 3-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 748.803418][T18266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.831879][T18266] usb 3-1: Product: syz [ 748.842226][T18266] usb 3-1: Manufacturer: 若쏎☲쌝裦不ↂꪮ熃샣沝▕鉓丘䟹敱럖垳豉纛昀晡盖啕ㆲꠄ殳➻찔줤頻괃∘蹿ࣕ븙Ḹ騨漬ﵫ䂱轵ꡦ둢倹轀蒦屲⟳ⳍ㵎輭俹쫙ఀ틓ꅽ䨪룯剒넹묅厠륧즙뒅⦓揰꘶䎋瘐셞峎ｳꕻ䘽夺ꡟ迭ͪ翖ꢓV履Ǹ짃㈇鋤奎ꗏᐖ吧苉ւݳ⽾櫡뒡멧퓫 [ 748.958282][T18266] usb 3-1: SerialNumber: syz [ 748.993828][T18640] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 749.293881][T18266] hso 3-1:9.254: Not our interface [ 749.332291][T18266] usb 3-1: USB disconnect, device number 3 [ 750.211349][T18678] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 750.248455][T18678] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 750.662307][T18695] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 750.680804][T18695] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 750.700912][T18699] ------------[ cut here ]------------ [ 750.721742][T18699] WARNING: CPU: 1 PID: 18699 at arch/x86/kvm/x86.c:10370 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 750.780747][T18699] Modules linked in: [ 750.803277][T18699] CPU: 1 PID: 18699 Comm: syz.5.6291 Not tainted syzkaller #0 [ 750.833280][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 750.916535][T18699] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 750.943341][T18699] Code: e8 51 44 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 36 44 ad 00 e9 c8 ed ff ff e8 3c dc 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 751.008606][T18699] RSP: 0018:ffffc900030afc30 EFLAGS: 00010283 [ 751.044282][T18708] tmpfs: Bad value for 'mpol' [ 751.049549][T18699] RAX: ffffffff810eefd4 RBX: ffff888060448000 RCX: 0000000000080000 [ 751.069805][T18699] RDX: ffffc9000e64b000 RSI: 000000000000041f RDI: 0000000000000420 [ 751.094571][T18699] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 751.115047][T18699] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff888061190001 [ 751.138301][T18699] R13: 1ffff1100c08901e R14: ffff8880604480f0 R15: ffff888061190000 [ 751.159171][T18699] FS: 00007f592bc3a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 751.181997][T18699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.199035][T18699] CR2: 00007f0d024d32f8 CR3: 0000000020ee0000 CR4: 00000000003526f0 [ 751.220174][T18699] Call Trace: [ 751.228288][T18699] [ 751.237689][T18699] ? __lock_acquire+0x7c60/0x7c60 [ 751.249710][T18699] kvm_vcpu_ioctl+0x887/0xb80 [ 751.261421][T18699] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 751.275172][T18699] ? bpf_lsm_file_ioctl+0x5/0x10 [ 751.286990][T18699] ? security_file_ioctl+0x7c/0xa0 [ 751.299112][T18699] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 751.313022][T18699] __se_sys_ioctl+0xfa/0x170 [ 751.325951][T18699] do_syscall_64+0x4c/0xa0 [ 751.336353][T18699] ? clear_bhb_loop+0x30/0x80 [ 751.347937][T18699] ? clear_bhb_loop+0x30/0x80 [ 751.359484][T18699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 751.373524][T18699] RIP: 0033:0x7f592d9d36c9 [ 751.384812][T18699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.431434][T18699] RSP: 002b:00007f592bc3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.454258][T18699] RAX: ffffffffffffffda RBX: 00007f592dc29fa0 RCX: 00007f592d9d36c9 [ 751.470241][T18699] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 751.494355][T18699] RBP: 00007f592da55f91 R08: 0000000000000000 R09: 0000000000000000 [ 751.530264][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.561669][T18699] R13: 00007f592dc2a038 R14: 00007f592dc29fa0 R15: 00007ffe56b4b3d8 [ 751.578740][T18699] [ 751.581816][T18699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 751.589110][T18699] CPU: 1 PID: 18699 Comm: syz.5.6291 Not tainted syzkaller #0 [ 751.596592][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.606852][T18699] Call Trace: [ 751.610159][T18699] [ 751.613111][T18699] dump_stack_lvl+0x168/0x230 [ 751.617828][T18699] ? show_regs_print_info+0x20/0x20 [ 751.623058][T18699] ? load_image+0x3b0/0x3b0 [ 751.627616][T18699] panic+0x2c9/0x7f0 [ 751.631549][T18699] ? bpf_jit_dump+0xd0/0xd0 [ 751.636098][T18699] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 751.641942][T18699] __warn+0x248/0x2b0 [ 751.645954][T18699] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 751.651794][T18699] report_bug+0x1b7/0x2e0 [ 751.656176][T18699] handle_bug+0x3a/0x70 [ 751.660360][T18699] exc_invalid_op+0x16/0x40 [ 751.664893][T18699] asm_exc_invalid_op+0x16/0x20 [ 751.669774][T18699] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 751.676217][T18699] Code: e8 51 44 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 36 44 ad 00 e9 c8 ed ff ff e8 3c dc 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 751.695848][T18699] RSP: 0018:ffffc900030afc30 EFLAGS: 00010283 [ 751.701951][T18699] RAX: ffffffff810eefd4 RBX: ffff888060448000 RCX: 0000000000080000 [ 751.709961][T18699] RDX: ffffc9000e64b000 RSI: 000000000000041f RDI: 0000000000000420 [ 751.717961][T18699] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 751.725959][T18699] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff888061190001 [ 751.733962][T18699] R13: 1ffff1100c08901e R14: ffff8880604480f0 R15: ffff888061190000 [ 751.742195][T18699] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 751.748045][T18699] ? __lock_acquire+0x7c60/0x7c60 [ 751.753114][T18699] kvm_vcpu_ioctl+0x887/0xb80 [ 751.757826][T18699] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 751.763673][T18699] ? bpf_lsm_file_ioctl+0x5/0x10 [ 751.768641][T18699] ? security_file_ioctl+0x7c/0xa0 [ 751.773778][T18699] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 751.779439][T18699] __se_sys_ioctl+0xfa/0x170 [ 751.784079][T18699] do_syscall_64+0x4c/0xa0 [ 751.788521][T18699] ? clear_bhb_loop+0x30/0x80 [ 751.793249][T18699] ? clear_bhb_loop+0x30/0x80 [ 751.797960][T18699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 751.803878][T18699] RIP: 0033:0x7f592d9d36c9 [ 751.808316][T18699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.827940][T18699] RSP: 002b:00007f592bc3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.836385][T18699] RAX: ffffffffffffffda RBX: 00007f592dc29fa0 RCX: 00007f592d9d36c9 [ 751.844381][T18699] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 751.852379][T18699] RBP: 00007f592da55f91 R08: 0000000000000000 R09: 0000000000000000 [ 751.860371][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.868369][T18699] R13: 00007f592dc2a038 R14: 00007f592dc29fa0 R15: 00007ffe56b4b3d8 [ 751.876383][T18699] [ 751.879788][T18699] Kernel Offset: disabled [ 751.884335][T18699] Rebooting in 86400 seconds..