last executing test programs: 7m36.944027653s ago: executing program 2 (id=386): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) openat$kvm(0x0, &(0x7f0000000080), 0x80480, 0x0) r0 = timerfd_create(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) 7m36.344089142s ago: executing program 2 (id=390): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x8) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r5}, &(0x7f00000005c0), &(0x7f0000000a00)=r6}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x240, 0x2e8, 0x2e8, 0x240, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xffffffff, 0xff, 0xff, 0xffffffff], [0xff, 0xff, 0x0, 0xff000000], 'veth1_to_hsr\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x0, 0x4}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x69, 0x5}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xff000000, 0xffffff00, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'pimreg1\x00', {0xcf0f066856f06171}, {0xff}, 0x1d, 0x5, 0x2, 0x40}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x9], 0x9, 0x8, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x4a3, 0xd, 0x3, '\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 7m34.286319887s ago: executing program 2 (id=393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r7 = io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) syz_emit_ethernet(0x202, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x1cc, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0x0, "00000500"}, {0x0, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x0, 0x15, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19, 0xd, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d880087"}]}}}}}}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x2c, 0xa, 0x1, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x5, 0x4}}) 7m29.41606278s ago: executing program 2 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7m29.167747478s ago: executing program 2 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x51, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = io_uring_setup(0x6d3e, &(0x7f0000000280)={0x0, 0x58b2, 0x0, 0x1, 0x180}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f00000000c0)={0x5, 0xfffffffc, 0xfffffffffffffff3}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r7, 0x0, 0x0, 0x800, 0x0, 0x0) recvmsg$can_raw(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)}, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 7m28.253009867s ago: executing program 2 (id=415): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff000000"], 0x48) 7m12.93490552s ago: executing program 32 (id=415): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff000000"], 0x48) 18.262913544s ago: executing program 1 (id=1500): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="05002dbd7000fcdbdf251b00000008009a000221"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fdd3df253b00000008000300", @ANYRES32=0x0, @ANYBLOB="05008900090000000600480016000000"], 0x2c}}, 0x8001) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) socket$unix(0x1, 0x2, 0x0) 17.236012207s ago: executing program 1 (id=1501): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup(r3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 15.556002869s ago: executing program 5 (id=1507): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 14.28327786s ago: executing program 5 (id=1511): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r7 = fsopen(0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="05002dbd7000fcdbdf251b00000008009a000221"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fdd3df253b00000008000300", @ANYRES32=0x0, @ANYBLOB="05008900090000000600480016000000"], 0x2c}}, 0x8001) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) socket$unix(0x1, 0x2, 0x0) 13.083721907s ago: executing program 4 (id=1513): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 12.103878449s ago: executing program 5 (id=1515): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x1c1, 0x7, 0x9, {0x5, 0x2, 0x5, 0x9, 0x6, 0x2}, {0x9, 0x0, 0x3, 0x7881, 0x9, 0x5}, 0x3, 0x1, 0xfffffffb}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0x7, 0x5, 0x80000000, 0x1, 0x7, 0x400, 0xfffffffb, 0x9, 0xffffffff, 0xfffffffa, 0x2, 0x7, 0x5, 0x401, 0x2, 0x4fb, 0x2, 0x2, 0x6, 0x3, 0x3, 0x7f9, 0x2, 0x8, 0xffff8001, 0x2, 0x1, 0x0, 0x5, 0x7, 0x7, 0x2, 0xfff, 0x4, 0x2, 0x9, 0x80000000, 0x67b, 0x1000, 0xfffffff7, 0x8, 0x7a, 0x1, 0x3, 0x39, 0xf2c6, 0xfffffff9, 0xa4, 0x4, 0xe8ee, 0x0, 0x2, 0x3, 0x7, 0x5, 0x4, 0x42befca, 0x36, 0x80000000, 0x2, 0x5, 0xc3fa, 0x3, 0x0, 0x8, 0x5, 0x8, 0x400, 0x3, 0x7, 0xfffffff9, 0x5, 0x8, 0x5, 0x1, 0xffffffff, 0x7, 0xfffffff7, 0x2, 0x2, 0xa, 0xd6, 0x0, 0xd, 0x1, 0xf33, 0x7, 0x200, 0x800, 0x25, 0x80000000, 0x27, 0x7, 0x6, 0x8, 0x1, 0x7ff, 0x2, 0x2, 0x10001, 0x6, 0x5, 0x2, 0x0, 0xffff, 0x11, 0x10000, 0x9, 0x80000001, 0x3, 0x4, 0x1, 0x0, 0x1ff, 0xd, 0x8000, 0x0, 0x2, 0x4, 0x2, 0xffffffba, 0xb08, 0xfb19, 0x6, 0x8, 0x7, 0x7ff, 0x1, 0xb, 0x6, 0xfffffff7, 0x7fff, 0x4, 0x8, 0xf, 0x2, 0x80000000, 0x1ff, 0x7, 0x8, 0xa4, 0x91, 0x5, 0x81, 0x1, 0x9, 0x8, 0x2, 0x7, 0x7615cdba, 0x46915c50, 0x3, 0x6, 0x0, 0x7, 0x3, 0x4, 0x21, 0x12, 0x7fffffff, 0x5, 0x9, 0x3, 0x6, 0x7, 0x7, 0x3ff, 0x6, 0x8001, 0xe, 0xffff43e6, 0x7, 0x6, 0x5, 0x98, 0xd, 0x8, 0xa6eb, 0x4, 0x9, 0x5, 0x2, 0x1, 0x1000, 0x2, 0x7fff, 0x40, 0x8, 0x101, 0x4, 0x9, 0x5c51, 0xffff5ee4, 0x0, 0xe, 0x1, 0x8, 0xb, 0x6, 0x4, 0xb, 0x5, 0xfffffff9, 0x1c, 0x4, 0x4, 0x7ff, 0x1, 0x2, 0x3, 0x0, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x7, 0x1c, 0x1, 0xda, 0x8001, 0x9, 0x7ff, 0x0, 0xfff, 0xf1c2, 0x1ff, 0xb, 0x83, 0x2, 0x7, 0x8, 0x5, 0x9, 0x10001, 0x5, 0xc9, 0xe3b8, 0xc, 0x40, 0x4, 0xed, 0x8000, 0xff56, 0x8, 0x4, 0x800, 0x9, 0x4, 0x8e, 0x0, 0xe0, 0x200, 0x3, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x1e, 0x7, 0x6, 0xd, 0x2, 0x80000001, 0x7, 0x0, 0x3, 0x3, 0x40, 0x7ff, 0x2, 0x81, 0x2b7, 0x8000, 0x9, 0x2, 0x2, 0x5, 0x606a, 0x8, 0xf4, 0x2538, 0x8, 0xffffffff, 0xe, 0x81, 0x4, 0x2, 0x0, 0xfffffeff, 0x3, 0xd, 0xc6, 0x3, 0x4, 0xd0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x6, 0x2, 0x4, 0x7, 0x6, 0x0, 0x2, 0x71, 0x3, 0x21, 0x5, 0x95, 0x10000, 0x6, 0x1, 0xfe0000, 0x7ff, 0x8, 0x3, 0x10, 0x8, 0xc4, 0x6, 0x3, 0x8, 0x3ff, 0x9, 0x3, 0x200, 0x4, 0x5, 0x6, 0xffffffff, 0xa, 0x7fffffff, 0x1, 0x9, 0x9, 0x7, 0x0, 0x3, 0x38b3, 0x8, 0x3, 0xf4f2, 0x0, 0x9, 0xe, 0x0, 0x50, 0x6, 0x7, 0x5, 0x2, 0x686f, 0x9, 0x986, 0x7, 0x7, 0xd81, 0x9, 0x6, 0x8e, 0x5, 0x0, 0x7, 0x3, 0x3, 0x9, 0xfffffffe, 0x1, 0x80000000, 0x4, 0x5, 0x100, 0x80, 0x7, 0xf, 0x5, 0x0, 0x9, 0x10000, 0x6, 0x7, 0x80, 0x1, 0x80000001, 0x200, 0x6, 0x80000001, 0x0, 0x7, 0x641640fb, 0x5db, 0x5, 0x3, 0x6, 0x3, 0x3, 0xd8, 0x3, 0xe9, 0x8, 0xfffffff0, 0x5, 0x2, 0x0, 0x8, 0x9, 0x5, 0x7, 0x7056c30b, 0x3, 0x5, 0x40, 0x8, 0x2, 0x21, 0x1, 0x7fffffff, 0xfff, 0x1, 0x6, 0x7, 0x1, 0x2, 0x4, 0x5, 0x60ea1cca, 0x4, 0x3, 0x5, 0xffffffff, 0xf, 0x80000000, 0xffffffff, 0x1, 0x5, 0xfffffffc, 0x8000, 0x1, 0x6, 0x0, 0x75, 0x9, 0x1ff, 0x10, 0x5, 0x10, 0x3257, 0x42, 0x7fff, 0x10001, 0xdf, 0x36dc00, 0x3ff, 0x0, 0x7, 0xddd7, 0x3, 0xffffffff, 0x7, 0x40, 0x4c, 0x1, 0x3, 0x9, 0xfffffffb, 0x7, 0x2, 0x10, 0x7, 0x8, 0x5, 0x4, 0xb4d, 0xfffffffc, 0xef4c, 0x6, 0xa30, 0xef, 0x80, 0x400, 0x9, 0x8001, 0x4e38, 0x5, 0x9, 0x400, 0x9, 0x1, 0x2, 0x2, 0x2, 0xf3, 0x1, 0x1, 0x7, 0x7, 0x6, 0x0, 0x6, 0x8001, 0x5, 0xef64, 0x1, 0x245, 0x3, 0xa444680e, 0x9, 0x3]}]}]}}]}, 0x87c}}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 12.086732989s ago: executing program 1 (id=1516): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="05002dbd7000fcdbdf251b00000008009a000221"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fdd3df253b00000008000300", @ANYRES32=0x0, @ANYBLOB="05008900090000000600480016000000"], 0x2c}}, 0x8001) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r11, r11) setpgid(0x0, r11) fchdir(r10) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 10.639521845s ago: executing program 0 (id=1520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="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", 0x170}, {&(0x7f0000000680)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4", 0xa5}, {&(0x7f0000000000)="3c969cd7b866d505f85d73a8b10fc685fb80f638aaee3c68edec508be1058a40d70e2c8feb6b5ec774b4765021967802b5c9c8341bbfdfdcfe5b820000", 0x3d}, {&(0x7f0000000380)="9f98eae87659f69fddd8e97246f25359825b617ed4f81968062ec0778bea311f338fb5e8f41ca3ff7f33a5497455bd3e7ee4a59a3f76df9c9700"/68, 0x44}, {&(0x7f0000000a80)="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", 0x1a2}], 0x6, 0x0, 0x0, 0x40880}], 0x1, 0x40894) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 10.570291037s ago: executing program 0 (id=1521): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(r2, 0xe, &(0x7f0000000100)={0x10000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$unix(r0, 0x0, 0x0, 0x0) 9.735415673s ago: executing program 0 (id=1523): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB="ff000000"], 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) read(r5, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000005c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1}, 0xe000800) 9.697178834s ago: executing program 3 (id=1524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 9.558568338s ago: executing program 3 (id=1525): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r7 = fsopen(0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="05002dbd7000fcdbdf251b00000008009a000221"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fdd3df253b00000008000300", @ANYRES32=0x0, @ANYBLOB="05008900090000000600480016000000"], 0x2c}}, 0x8001) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) socket$unix(0x1, 0x2, 0x0) 8.23783628s ago: executing program 0 (id=1526): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup(r3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 7.196216623s ago: executing program 1 (id=1527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.111934916s ago: executing program 3 (id=1528): pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000022a700000000"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x5, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000010, &(0x7f0000000440)=ANY=[@ANYBLOB="414df3bcd9ed2e54f6e7bd82597e63301a19289cab23742f5833", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.111602426s ago: executing program 4 (id=1529): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0x5e, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91"}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0xf8}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a", 0x3a}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7", 0x21}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.057795477s ago: executing program 5 (id=1530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4.361750812s ago: executing program 1 (id=1531): syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) 4.298820584s ago: executing program 3 (id=1532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r7 = io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) syz_emit_ethernet(0x1f5, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x1bf, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0x0, "00000500"}, {0x0, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x0, 0x15, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19, 0xb, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3"}]}}}}}}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x2c, 0xa, 0x1, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x5, 0x4}}) 3.407853782s ago: executing program 1 (id=1533): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x47, &(0x7f0000001640)=""/71}) 3.364035254s ago: executing program 0 (id=1534): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x11a, 0x4, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.262174319s ago: executing program 4 (id=1535): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0x4, 0x1, 0xfffffffe, 0x1000000, 0x3, 0x1, 0x20000004, 0x4, 0xa, 0xfffffffd, 0x6, 0x6, 0x43, 0x9, 0xffffffff, 0x8, 0x10009, 0xfe9, 0x401, 0x8000, 0xffff5dc8, 0x0, 0xaaa, 0x48, 0xffffffff, 0x80, 0xfffffffd, 0x481, 0x3, 0x5]}) sendmsg$nl_xfrm(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 2.069167995s ago: executing program 3 (id=1536): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, 0x0}) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.024606656s ago: executing program 5 (id=1537): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="05002dbd7000fcdbdf251b00000008009a000221"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fdd3df253b00000008000300", @ANYRES32=0x0, @ANYBLOB="05008900090000000600480016000000"], 0x2c}}, 0x8001) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r11, r11) setpgid(0x0, r11) fchdir(r10) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 1.127094504s ago: executing program 0 (id=1538): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r7 = fsopen(0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="05002dbd7000fcdbdf251b00000008009a000221"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fdd3df253b00000008000300", @ANYRES32=0x0, @ANYBLOB="05008900090000000600480016000000"], 0x2c}}, 0x8001) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) socket$unix(0x1, 0x2, 0x0) 1.126898934s ago: executing program 4 (id=1539): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 632.0809ms ago: executing program 4 (id=1540): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x0, 0x8}) 284.976511ms ago: executing program 5 (id=1541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 90.610537ms ago: executing program 4 (id=1542): pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000022a700000000"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x5, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000010, &(0x7f0000000440)=ANY=[@ANYBLOB="414df3bcd9ed2e54f6e7bd82597e63301a19289cab23742f5833", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 3 (id=1543): syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) kernel console output (not intermixed with test programs): dge_slave_0) entered disabled state [ 70.034680][ T4277] device bridge_slave_0 entered promiscuous mode [ 70.054115][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.061573][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.069547][ T4277] device bridge_slave_1 entered promiscuous mode [ 70.090693][ T4283] team0: Port device team_slave_0 added [ 70.111844][ T4271] team0: Port device team_slave_0 added [ 70.124231][ T4283] team0: Port device team_slave_1 added [ 70.138851][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.151433][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.167053][ T4271] team0: Port device team_slave_1 added [ 70.174355][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.184297][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.191431][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.217355][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.235987][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.242996][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.268894][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.291348][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.311972][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.319071][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.345240][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.378045][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.385013][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.411445][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.432511][ T4277] team0: Port device team_slave_0 added [ 70.447489][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.454438][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.480731][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.493752][ T4272] team0: Port device team_slave_0 added [ 70.500692][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.508229][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.536276][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.548867][ T4277] team0: Port device team_slave_1 added [ 70.572907][ T4272] team0: Port device team_slave_1 added [ 70.593510][ T4278] device hsr_slave_0 entered promiscuous mode [ 70.600160][ T4278] device hsr_slave_1 entered promiscuous mode [ 70.626573][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.633537][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.662494][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.696915][ T4283] device hsr_slave_0 entered promiscuous mode [ 70.703465][ T4283] device hsr_slave_1 entered promiscuous mode [ 70.710426][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.718613][ T4283] Cannot create hsr debugfs directory [ 70.724538][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.731698][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.757934][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.769456][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.776828][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.802790][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.842742][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.849833][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.876805][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.905317][ T4271] device hsr_slave_0 entered promiscuous mode [ 70.911924][ T4271] device hsr_slave_1 entered promiscuous mode [ 70.919651][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.927652][ T4271] Cannot create hsr debugfs directory [ 71.033880][ T4277] device hsr_slave_0 entered promiscuous mode [ 71.040823][ T4277] device hsr_slave_1 entered promiscuous mode [ 71.047617][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.055159][ T4277] Cannot create hsr debugfs directory [ 71.069926][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 71.069937][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 71.076131][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 71.082193][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 71.088176][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 71.105279][ T4272] device hsr_slave_0 entered promiscuous mode [ 71.113829][ T4272] device hsr_slave_1 entered promiscuous mode [ 71.122027][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.129924][ T4272] Cannot create hsr debugfs directory [ 71.229674][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.236337][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.344641][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.363921][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.390664][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.413410][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.456046][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.478662][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.495033][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.511691][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.543874][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.553500][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.573286][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.598533][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.671245][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.692969][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.709266][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.721992][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.733227][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.775721][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.784424][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.794002][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.803839][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.828774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.839517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.848912][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.856121][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.865262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.875092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.883542][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.890639][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.899536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.915214][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.941398][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.949205][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.959951][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.970478][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.980604][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.990305][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.999174][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.008976][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.017682][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.032265][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.050086][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.063035][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.070539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.081058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.091507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.099477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.109756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.120784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.145773][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.155806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.165565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.174303][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.181429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.198991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.207526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.215219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.251140][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.265718][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.277686][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.286202][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.293303][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.302801][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.313174][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.329678][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.339714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.351854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.401014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.410521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.420622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.430916][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.438039][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.445757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.454780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.463394][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.470491][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.479091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.488356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.497160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.505619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.519840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.529200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.537217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.555213][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.565845][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.584047][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.599021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.611821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.622016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.631054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.640016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.648916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.657581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.666797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.706303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.714113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.731315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.742271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.754194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.763293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.772241][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.779702][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.788900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.798140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.806566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.815261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.825856][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.832994][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.841433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.867002][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.886537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.895397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.905566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.914807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.925248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.957386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.964854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.984279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.007174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.031994][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.053407][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.070179][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.111163][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.136881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.146536][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 73.152561][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 73.158763][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 73.164777][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 73.165767][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.170915][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 73.186714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.194929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.205829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.228357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.242456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.271494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.299566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.331740][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.382195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.397163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.411621][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.418878][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.427746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.436651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.444909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.452418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.464205][ T4283] device veth0_vlan entered promiscuous mode [ 73.492568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.503387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.518420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.527853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.538022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.561902][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.569048][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.583041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.592325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.603410][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.632934][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.648518][ T4283] device veth1_vlan entered promiscuous mode [ 73.667442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.681831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.690840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.699181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.707322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.769384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.779039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.788388][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.796782][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.804897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.813714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.822461][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.830149][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.849376][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.861216][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.927783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.937499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.957011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.976987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.996574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.012859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.031910][ T4283] device veth0_macvtap entered promiscuous mode [ 74.069874][ T4271] device veth0_vlan entered promiscuous mode [ 74.088176][ T4283] device veth1_macvtap entered promiscuous mode [ 74.109249][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.117575][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.126863][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.135226][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.144931][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.153992][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.164137][ T4272] device veth0_vlan entered promiscuous mode [ 74.175649][ T4271] device veth1_vlan entered promiscuous mode [ 74.194002][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.205794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.215759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.231302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.241974][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.253147][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.263759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.274416][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.320063][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.341170][ T4272] device veth1_vlan entered promiscuous mode [ 74.349828][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.358677][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.367824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.377500][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.389561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.398398][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.413900][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.422403][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.434661][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.450154][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.458972][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.470522][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.498235][ T4271] device veth0_macvtap entered promiscuous mode [ 74.511614][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.528616][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.542604][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.551028][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.561149][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.584952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.594323][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.610438][ T4271] device veth1_macvtap entered promiscuous mode [ 74.630542][ T4272] device veth0_macvtap entered promiscuous mode [ 74.642366][ T4272] device veth1_macvtap entered promiscuous mode [ 74.674431][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.686064][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.698971][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.733238][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.741850][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.751487][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.760048][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.773377][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.784167][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.796833][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.827576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.839381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.848075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.856721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.869344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.878109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.887693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.895502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.907039][ T4278] device veth0_vlan entered promiscuous mode [ 74.936810][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945545][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.955026][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.959057][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.966873][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.972508][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.002915][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.013915][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.024113][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.034820][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.047292][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.054638][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.062771][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.072306][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.080763][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.090267][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.099127][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.109262][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.119865][ T4278] device veth1_vlan entered promiscuous mode [ 75.129190][ T4277] device veth0_vlan entered promiscuous mode [ 75.137645][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.148309][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.162508][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.173610][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.188670][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.222665][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.228216][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 75.230426][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 75.236231][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 75.242266][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 75.248402][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 75.262284][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.270762][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.280075][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.292714][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.301546][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.313832][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.322763][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.352663][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.361359][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.372691][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.377901][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.396095][ T4277] device veth1_vlan entered promiscuous mode [ 75.405268][ T4278] device veth0_macvtap entered promiscuous mode [ 75.423209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.432671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.441199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.462188][ T4278] device veth1_macvtap entered promiscuous mode [ 75.495102][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.505691][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.521431][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.531005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.552123][ T4277] device veth0_macvtap entered promiscuous mode [ 75.567076][ T4277] device veth1_macvtap entered promiscuous mode [ 75.603410][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.640820][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.654283][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.664904][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.674871][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.685602][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.697776][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.742152][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.757463][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.768688][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.786536][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.797031][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.808099][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.818491][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.829549][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.849235][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.869061][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.882738][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.892912][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.903636][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.913792][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.926344][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.936552][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.953813][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.968309][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.981634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.000961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.021594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.041056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.073282][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.087579][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.098679][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.110620][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.121076][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.132446][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.143227][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.154485][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.182985][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.204919][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.216631][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.237167][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.246734][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.268519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.283670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.306317][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.314172][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.344192][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363887][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.378724][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.388815][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.439549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.451819][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.475617][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.504616][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.505233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.533338][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.557274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.665857][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.745816][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.761432][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.772050][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.802952][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.873031][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.979401][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.988694][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.163254][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.268954][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.286294][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.294402][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.305841][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.306609][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 77.320463][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.326525][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 77.333653][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 77.339800][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 77.339921][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 77.411853][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.679702][ T4372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.752246][ T4372] Zero length message leads to an empty skb [ 77.886009][ T4382] Bluetooth: MGMT ver 1.22 [ 79.483413][ T1042] block nbd0: Attempted send on invalid socket [ 79.490245][ T1042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.500883][ T4411] FAT-fs (nbd0): unable to read boot sector [ 80.106176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.156161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.776166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!! [ 80.916165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!! [ 80.996165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!! [ 84.318793][ T4464] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.423397][ T1042] block nbd1: Attempted send on invalid socket [ 84.430088][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.439676][ T4465] FAT-fs (nbd1): unable to read boot sector [ 85.671159][ T4477] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 86.590425][ T1200] cfg80211: failed to load regulatory.db [ 87.517055][ T4490] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.592537][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 87.950285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.966208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.976191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 87.996180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 88.418863][ T4508] syz.3.43 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.432144][ T4508] ubi31: attaching mtd0 [ 88.438952][ T4508] ubi31: scanning is finished [ 88.443749][ T4508] ubi31: empty MTD device detected [ 89.016202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.026179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.434192][ T52] block nbd2: Attempted send on invalid socket [ 89.440416][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.454454][ T4511] FAT-fs (nbd2): unable to read boot sector [ 89.501764][ T4508] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 89.756300][ T1200] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 89.959861][ T1200] usb 1-1: config 0 has no interfaces? [ 89.976475][ T1200] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 90.125502][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.208287][ T4527] netlink: 68 bytes leftover after parsing attributes in process `syz.1.51'. [ 90.956572][ T1200] usb 1-1: Product: syz [ 90.960944][ T1200] usb 1-1: Manufacturer: syz [ 90.965564][ T1200] usb 1-1: SerialNumber: syz [ 91.037478][ T1200] usb 1-1: config 0 descriptor?? [ 91.773429][ T4320] usb 1-1: USB disconnect, device number 2 [ 94.146483][ T4562] ubi31: attaching mtd0 [ 94.152158][ T4562] ubi31: scanning is finished [ 94.781599][ T4562] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 95.395019][ T52] block nbd2: Attempted send on invalid socket [ 95.401358][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.279295][ T4575] netlink: 68 bytes leftover after parsing attributes in process `syz.4.63'. [ 96.752231][ T4566] FAT-fs (nbd2): unable to read boot sector [ 96.839159][ T4316] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 97.830586][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.854542][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.895407][ T4316] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 97.949156][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.173255][ T4316] usb 4-1: config 0 descriptor?? [ 98.338737][ T4316] usb 4-1: can't set config #0, error -71 [ 98.477399][ T4316] usb 4-1: USB disconnect, device number 2 [ 99.283345][ T4593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.996308][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.636227][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 100.643541][ T126] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 100.700159][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.732365][ T126] usb 5-1: config 0 descriptor?? [ 100.792896][ T126] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 101.382955][ T126] gspca_vc032x: reg_w err -71 [ 101.393641][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.422885][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.464605][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.503946][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.513780][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.537473][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.587219][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.592543][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.658740][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.696441][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.715212][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.735456][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.746462][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.751796][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.776387][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.786471][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.791810][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.825017][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.646340][ T126] gspca_vc032x: Unknown sensor... [ 102.651433][ T126] vc032x: probe of 5-1:0.0 failed with error -22 [ 102.747718][ T126] usb 5-1: USB disconnect, device number 2 [ 104.985728][ T4623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.80'. [ 106.428252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.181564][ T4687] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 110.189940][ T4687] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 110.197625][ T4687] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.94'. [ 118.466809][ T4755] xt_hashlimit: max too large, truncated to 1048576 [ 121.411278][ T4775] autofs4:pid:4775:autofs_fill_super: called with bogus options [ 124.451171][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 124.663113][ T4801] device bond_slave_0 entered promiscuous mode [ 124.669603][ T4801] device bond_slave_1 entered promiscuous mode [ 125.283337][ T4801] device macvtap1 entered promiscuous mode [ 125.376346][ T4801] device bond0 entered promiscuous mode [ 125.608598][ T4801] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 125.648230][ T4803] device bond0 left promiscuous mode [ 125.654445][ T4803] device bond_slave_0 left promiscuous mode [ 125.660469][ T4803] device bond_slave_1 left promiscuous mode [ 125.682876][ T4803] device macvtap1 left promiscuous mode [ 126.911457][ T4813] autofs4:pid:4813:autofs_fill_super: called with bogus options [ 126.926190][ C1] sched: RT throttling activated [ 132.675647][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.682014][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.087658][ T4903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.093863][ T4903] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.115160][ T4903] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 136.122654][ T4903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.128695][ T4903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.136398][ T4903] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 136.143606][ T4903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.149618][ T4903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.170500][ T4903] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 136.178163][ T4903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.184079][ T4903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.191178][ T4903] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 136.198476][ T4903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.204469][ T4903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.215482][ T4903] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 138.639653][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.645757][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.648218][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.652321][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.658181][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.080821][ T4938] ubi31: attaching mtd0 [ 140.085999][ T4938] ubi31: scanning is finished [ 140.387293][ T4938] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 141.014630][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 141.030127][ T4944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.606351][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 141.607986][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 141.612369][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 141.626015][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 141.628271][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 142.976937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.609840][ T4958] Bluetooth: MGMT ver 1.22 [ 145.505793][ T4961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.065224][ T5006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.180551][ T5011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 150.246410][ T5011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.254044][ T5011] IPv6: NLM_F_CREATE should be set when creating new route [ 151.796438][ T5025] Device name cannot be null; rc = [-22] [ 152.905266][ T5057] loop8: detected capacity change from 0 to 7 [ 152.943300][ T5057] Dev loop8: unable to read RDB block 7 [ 153.701825][ T5057] loop8: unable to read partition table [ 153.816590][ T5057] loop8: partition table beyond EOD, truncated [ 153.836315][ T5057] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 154.127626][ T5069] autofs4:pid:5069:autofs_fill_super: called with bogus options [ 156.177981][ T5088] ubi31: attaching mtd0 [ 156.189896][ T5088] ubi31: scanning is finished [ 156.751624][ T5088] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 157.451154][ T5105] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 157.458721][ T5105] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.071087][ T5114] autofs4:pid:5114:autofs_fill_super: called with bogus options [ 160.297897][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 160.349612][ T5128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.356901][ T5128] IPv6: NLM_F_CREATE should be set when creating new route [ 160.469747][ T5119] kvm [5117]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 162.636361][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 162.799016][ T5161] autofs4:pid:5161:autofs_fill_super: called with bogus options [ 163.567812][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 163.574506][ T4318] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.603845][ T4318] usb 1-1: config 0 has no interface number 0 [ 163.642671][ T4318] usb 1-1: config 0 interface 12 has no altsetting 0 [ 163.688157][ T4318] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.697044][ T5169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 163.707242][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.759136][ T5169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.766452][ T5169] IPv6: NLM_F_CREATE should be set when creating new route [ 163.796648][ T4318] usb 1-1: Product: syz [ 163.875594][ T4318] usb 1-1: Manufacturer: syz [ 163.913304][ T4318] usb 1-1: SerialNumber: syz [ 164.227913][ T4318] usb 1-1: config 0 descriptor?? [ 164.581865][ T1042] block nbd2: Attempted send on invalid socket [ 164.588316][ T1042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 164.599331][ T5177] FAT-fs (nbd2): unable to read boot sector [ 165.446263][ T4318] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 165.453919][ T4318] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 166.629928][ T4318] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 166.637655][ T4318] f81534: probe of 1-1:0.12 failed with error -71 [ 166.771233][ T4318] usb 1-1: USB disconnect, device number 3 [ 166.777673][ T5197] loop8: detected capacity change from 0 to 8 [ 166.824061][ T5197] Dev loop8: unable to read RDB block 8 [ 166.858516][ T5197] loop8: unable to read partition table [ 166.881334][ T5197] loop8: partition table beyond EOD, truncated [ 166.910244][ T5197] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 167.715078][ T1042] block nbd4: Attempted send on invalid socket [ 167.722759][ T1042] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 167.731888][ T5211] FAT-fs (nbd4): unable to read boot sector [ 169.290334][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 172.742861][ T52] block nbd1: Attempted send on invalid socket [ 172.749299][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.758489][ T5261] FAT-fs (nbd1): unable to read boot sector [ 174.274270][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.314673][ T5262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.365539][ T5283] autofs4:pid:5283:autofs_fill_super: called with bogus options [ 174.836505][ T4355] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.047527][ T4355] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.118426][ T4355] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.179603][ T4355] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 175.225157][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.253858][ T4355] usb 4-1: Product: syz [ 175.261281][ T4355] usb 4-1: Manufacturer: syz [ 175.301977][ T4355] usb 4-1: SerialNumber: syz [ 175.341004][ T4355] usb 4-1: config 0 descriptor?? [ 175.395732][ T4355] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 175.525076][ T4355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.618505][ T4355] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 175.652276][ T4355] usb 4-1: media controller created [ 175.842640][ T4355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.832406][ T4355] DVB: Unable to find symbol tda10046_attach() [ 176.839981][ T4355] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 176.856377][ T4355] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 178.345120][ T4355] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 178.365571][ T4355] usb 4-1: USB disconnect, device number 3 [ 178.425456][ T5339] autofs4:pid:5339:autofs_fill_super: called with bogus options [ 183.303016][ T5378] kvm [5373]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 183.315113][ T5378] kvm [5373]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 183.694946][ T5388] autofs4:pid:5388:autofs_fill_super: called with bogus options [ 186.237730][ T5391] ALSA: mixer_oss: invalid OSS volume '' [ 186.365472][ T5407] device syzkaller0 entered promiscuous mode [ 186.475186][ T5407] tipc: Started in network mode [ 186.496681][ T5407] tipc: Node identity 1e4426deca65, cluster identity 4711 [ 186.512147][ T5407] tipc: Enabled bearer , priority 0 [ 186.574630][ T5406] tipc: Resetting bearer [ 186.687833][ T5406] tipc: Disabling bearer [ 188.855900][ T5445] process 'syz.3.315' launched './file0' with NULL argv: empty string added [ 190.093420][ T5455] kvm [5454]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 190.123051][ T5455] kvm [5454]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 190.396717][ T5475] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2214592515 out of range (51000000..2150000000) [ 190.441566][ T4321] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 190.620940][ T4320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 190.627942][ T4321] usb 4-1: config 0 has no interfaces? [ 190.638820][ T4321] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 190.649999][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.659433][ T4321] usb 4-1: Product: syz [ 190.663822][ T4321] usb 4-1: Manufacturer: syz [ 190.669073][ T4321] usb 4-1: SerialNumber: syz [ 190.806910][ T4321] usb 4-1: config 0 descriptor?? [ 191.042201][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 191.064429][ T4319] usb 4-1: USB disconnect, device number 4 [ 191.073125][ T4320] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 191.098815][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.121716][ T4320] usb 2-1: config 0 has no interface number 0 [ 191.138563][ T4320] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.180534][ T4320] usb 2-1: config 0 interface 52 has no altsetting 0 [ 191.211599][ T4320] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 191.239381][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 191.260634][ T4320] usb 2-1: Product: syz [ 191.286120][ T4320] usb 2-1: SerialNumber: syz [ 191.314113][ T4320] usb 2-1: config 0 descriptor?? [ 191.531824][ T4320] usb 2-1: Can not set alternate setting to 1, error: -71 [ 191.551224][ T4320] synaptics_usb: probe of 2-1:0.52 failed with error -71 [ 192.303634][ T4320] usb 2-1: USB disconnect, device number 2 [ 193.916242][ T4260] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 194.298391][ T5520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.924323][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.946222][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.160208][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 195.171343][ T4260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.202085][ T4260] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 195.286301][ T4260] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0 [ 195.394245][ T4260] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.600015][ T4260] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.707160][ T4260] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 195.803350][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.845185][ T4260] usb 1-1: Product: syz [ 195.889401][ T4260] usb 1-1: Manufacturer: syz [ 195.912232][ T4260] usb 1-1: SerialNumber: syz [ 195.986714][ T4260] usb 1-1: config 0 descriptor?? [ 196.037434][ T4260] gs_usb 1-1:0.0: Required endpoints not found [ 196.284422][ T4260] usb 1-1: USB disconnect, device number 4 [ 197.006252][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 197.012346][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 197.018432][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 197.024436][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 197.376437][ T126] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 197.568643][ T126] usb 5-1: config 0 has no interfaces? [ 197.584673][ T126] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 197.625948][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.765260][ T126] usb 5-1: Product: syz [ 197.773767][ T126] usb 5-1: Manufacturer: syz [ 197.810140][ T126] usb 5-1: SerialNumber: syz [ 198.037006][ T126] usb 5-1: config 0 descriptor?? [ 198.900550][ T5571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.528333][ T4260] usb 5-1: USB disconnect, device number 3 [ 203.440659][ T5616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.344374][ T26] audit: type=1326 audit(1778696949.394:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 205.716391][ T4319] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 205.908439][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.923754][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.083887][ T26] audit: type=1326 audit(1778696950.134:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf5995d68e code=0x7fc00000 [ 206.091991][ T4319] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.149187][ T4319] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 206.190757][ T4319] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 206.204201][ T26] audit: type=1326 audit(1778696950.134:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.256472][ T4319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 206.287680][ T4319] usb 2-1: config 1 interface 1 has no altsetting 0 [ 206.297798][ T26] audit: type=1326 audit(1778696950.134:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.345327][ T4319] usb 2-1: string descriptor 0 read error: -22 [ 206.354586][ T26] audit: type=1326 audit(1778696950.134:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.380532][ T26] audit: type=1326 audit(1778696950.134:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.404909][ T26] audit: type=1326 audit(1778696950.134:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.405531][ T4319] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 206.435936][ T26] audit: type=1326 audit(1778696950.134:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.463497][ T26] audit: type=1326 audit(1778696950.134:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.503665][ T26] audit: type=1326 audit(1778696950.134:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5999ce59 code=0x7fc00000 [ 206.544543][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.132003][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 208.140002][ T5665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.223017][ T4319] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 208.317240][ T4319] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 208.832813][ T5672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.461791][ T4319] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 209.537782][ T52] block nbd3: Attempted send on invalid socket [ 209.538795][ T4319] usb 2-1: USB disconnect, device number 3 [ 209.544045][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 209.559068][ T5671] FAT-fs (nbd3): unable to read boot sector [ 214.404121][ T5730] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 217.159083][ T5755] Set syz1 is full, maxelem 1029 reached [ 219.708562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.208025][ T4286] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 230.094556][ T5846] Device name cannot be null; rc = [-22] [ 232.429286][ T5856] device syzkaller0 entered promiscuous mode [ 232.472987][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.481522][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.495432][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.513402][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.521635][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.529554][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.731040][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.931034][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.611089][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.968114][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 235.090532][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 236.039285][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.495674][ T5908] netlink: 68 bytes leftover after parsing attributes in process `syz.0.454'. [ 238.022986][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 238.261560][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.295031][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.323996][ T5860] device bridge_slave_0 entered promiscuous mode [ 238.362443][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.257223][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.322538][ T5860] device bridge_slave_1 entered promiscuous mode [ 239.956768][ T5922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.587415][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 240.898209][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.044851][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.376094][ T5860] team0: Port device team_slave_0 added [ 241.404495][ T5860] team0: Port device team_slave_1 added [ 241.651028][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.661526][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.714294][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.740024][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.449785][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.666910][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 242.798377][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.903428][ T5955] netlink: 68 bytes leftover after parsing attributes in process `syz.0.464'. [ 246.217289][ T5971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.559950][ T5860] device hsr_slave_0 entered promiscuous mode [ 248.227625][ T5860] device hsr_slave_1 entered promiscuous mode [ 248.237188][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.244771][ T5860] Cannot create hsr debugfs directory [ 249.383913][ T5995] netlink: 68 bytes leftover after parsing attributes in process `syz.0.475'. [ 252.320612][ T6021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.066822][ T11] device hsr_slave_0 left promiscuous mode [ 253.105471][ T11] device hsr_slave_1 left promiscuous mode [ 253.140898][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.175303][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.848146][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.855852][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.907115][ T11] device bridge_slave_1 left promiscuous mode [ 254.914784][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.962038][ T11] device bridge_slave_0 left promiscuous mode [ 254.976459][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.197534][ T11] device veth1_macvtap left promiscuous mode [ 255.210753][ T11] device veth0_macvtap left promiscuous mode [ 255.224965][ T11] device veth1_vlan left promiscuous mode [ 255.235782][ T11] device veth0_vlan left promiscuous mode [ 255.558819][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.565473][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.856323][ T6066] netlink: 68 bytes leftover after parsing attributes in process `syz.1.485'. [ 259.620564][ T6063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.115705][ T11] team0 (unregistering): Port device team_slave_1 removed [ 263.235913][ T11] team0 (unregistering): Port device team_slave_0 removed [ 263.308825][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.379017][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.023668][ T11] bond0 (unregistering): Released all slaves [ 264.133688][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 264.176953][ T6102] tipc: Started in network mode [ 264.184090][ T6102] tipc: Node identity b61ce3110a26, cluster identity 4711 [ 264.235078][ T6102] tipc: Enabled bearer , priority 0 [ 264.252204][ T6094] device syzkaller0 entered promiscuous mode [ 264.311207][ T6090] tipc: Resetting bearer [ 265.866375][ T6113] netlink: 68 bytes leftover after parsing attributes in process `syz.1.503'. [ 266.446358][ T6114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.027313][ T6090] tipc: Disabling bearer [ 267.538970][ T4320] tipc: Node number set to 3157975825 [ 267.677798][ T5860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.773703][ T5860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.810006][ T5860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.848118][ T5860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.036451][ T6123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.042567][ T6123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.048970][ T6123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.055315][ T6123] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.061343][ T6123] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 268.104647][ T6123] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 268.112214][ T6123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.118623][ T6123] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 268.142144][ T6123] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 268.246768][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.261547][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.287089][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.360576][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.395397][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.453896][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.617377][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.625443][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.767021][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.775115][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.842856][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.886095][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.893312][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.987839][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 269.045171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.082994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.094887][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.105485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.117228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.135606][ T5860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.183638][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.219963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.245716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.283726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.401981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.521469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.534659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.569145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.634775][ T6165] netlink: 68 bytes leftover after parsing attributes in process `syz.3.514'. [ 270.343876][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 270.350132][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.356292][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.356670][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.362385][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.948623][ T6170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.718142][ T6174] device syzkaller0 entered promiscuous mode [ 271.849382][ T6174] tipc: Enabled bearer , priority 0 [ 271.910711][ T6172] tipc: Resetting bearer [ 272.426456][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 272.426580][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 272.505349][ T6172] tipc: Disabling bearer [ 272.585261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.599656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.630861][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.096459][ T4317] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 273.300010][ T4317] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 273.319869][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.370756][ T4317] usb 4-1: Product: syz [ 273.393463][ T4317] usb 4-1: Manufacturer: syz [ 273.407130][ T4317] usb 4-1: SerialNumber: syz [ 273.652792][ T4317] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 273.691509][ T4317] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 273.735076][ T4317] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 273.756291][ T4260] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 273.770243][ T4317] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 273.813880][ T4317] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 273.851604][ T4317] lan78xx: probe of 4-1:1.0 failed with error -71 [ 273.882301][ T4317] usb 4-1: USB disconnect, device number 5 [ 273.926333][ T4260] usb 2-1: device descriptor read/64, error -71 [ 273.927477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.950279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.973840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.084612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.205414][ T5860] device veth0_vlan entered promiscuous mode [ 274.255433][ T5860] device veth1_vlan entered promiscuous mode [ 274.307303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.326814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.356478][ T4260] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 274.403231][ T6223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.525'. [ 274.576607][ T4260] usb 2-1: device descriptor read/64, error -71 [ 274.620026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.734808][ T4260] usb usb2-port1: attempt power cycle [ 275.222156][ T5860] device veth0_macvtap entered promiscuous mode [ 275.236437][ T4260] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 275.359046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.379360][ T4260] usb 2-1: device descriptor read/8, error -71 [ 275.496483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.676350][ T4260] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 275.689424][ T5860] device veth1_macvtap entered promiscuous mode [ 275.698915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.708159][ T4260] usb 2-1: device descriptor read/8, error -71 [ 275.719704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.739436][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.751715][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.762264][ T6228] ceph: No mds server is up or the cluster is laggy [ 275.771211][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.787058][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.797275][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.810149][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.820513][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.837315][ T4260] usb usb2-port1: unable to enumerate USB device [ 275.846600][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.878425][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.896943][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.912831][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.924173][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.935362][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.963275][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.979712][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.999820][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.023947][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.043044][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.054706][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.068647][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.918010][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.937593][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.958953][ T5860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.010284][ T5860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.052572][ T5860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.096404][ T5860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.157860][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.195365][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.270512][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.484805][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.503528][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.560210][ T6280] netlink: 68 bytes leftover after parsing attributes in process `syz.4.537'. [ 278.761908][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.252884][ T6305] fuse: Bad value for 'fd' [ 284.067498][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 284.332018][ T4285] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 284.332066][ T4285] Bluetooth: hci3: Malformed Event: 0x2f [ 286.320591][ T6346] device syzkaller0 entered promiscuous mode [ 286.403333][ T6346] tipc: Started in network mode [ 286.446290][ T6346] tipc: Node identity 6672d11d4947, cluster identity 4711 [ 286.453932][ T6346] tipc: Enabled bearer , priority 0 [ 286.532682][ T6345] tipc: Resetting bearer [ 288.200572][ T6345] tipc: Disabling bearer [ 288.243923][ T4315] tipc: Node number set to 792056093 [ 288.407316][ T6359] ceph: No mds server is up or the cluster is laggy [ 288.579628][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 288.776336][ T4321] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 288.996625][ T4321] usb 6-1: no configurations [ 289.001471][ T4321] usb 6-1: can't read configurations, error -22 [ 289.323503][ T4321] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 290.862001][ T4321] usb 6-1: no configurations [ 290.883884][ T4321] usb 6-1: can't read configurations, error -22 [ 290.926385][ T4321] usb usb6-port1: attempt power cycle [ 293.585971][ T6427] netlink: 68 bytes leftover after parsing attributes in process `syz.5.568'. [ 295.703787][ T6436] device syzkaller0 entered promiscuous mode [ 295.802943][ T6438] tipc: Started in network mode [ 295.816449][ T6438] tipc: Node identity 0ae2b0e06cd4, cluster identity 4711 [ 295.827355][ T6438] tipc: Enabled bearer , priority 0 [ 295.876040][ T6435] tipc: Resetting bearer [ 295.941012][ T6435] tipc: Disabling bearer [ 296.256698][ T6450] tipc: Enabled bearer , priority 0 [ 296.294816][ T6450] syzkaller0: MTU too low for tipc bearer [ 296.326099][ T6450] tipc: Disabling bearer [ 296.897677][ T1042] block nbd1: Attempted send on invalid socket [ 296.903907][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.915091][ T6462] FAT-fs (nbd1): unable to read boot sector [ 301.187914][ T6495] netlink: 68 bytes leftover after parsing attributes in process `syz.0.580'. [ 304.296892][ T4317] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 305.556651][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 305.567337][ T4317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.598227][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.631087][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.680535][ T4317] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.701154][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.728793][ T4317] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.922875][ T4317] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.946285][ T4317] usb 2-1: Manufacturer: syz [ 305.953450][ T4317] usb 2-1: config 0 descriptor?? [ 307.017200][ T6551] netlink: 68 bytes leftover after parsing attributes in process `syz.5.592'. [ 307.452402][ T4317] usb 2-1: can't set config #0, error -71 [ 307.459470][ T4317] usb 2-1: USB disconnect, device number 8 [ 312.112731][ T6588] kvm [6587]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 312.208437][ T6588] kvm [6587]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 312.227682][ T6588] kvm [6587]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 312.291601][ T6588] kvm [6587]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 312.342148][ T6588] kvm [6587]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 312.398872][ T6588] kvm [6587]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 313.060403][ T6601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.066547][ T6601] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.072553][ T6601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.078614][ T6601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 313.084628][ T6601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.090591][ T6601] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 313.210410][ T6588] kvm [6587]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 313.220550][ T6601] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 313.261799][ T6588] kvm [6587]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 313.554603][ T6614] autofs4:pid:6614:autofs_fill_super: called with bogus options [ 314.088879][ T6622] netlink: 68 bytes leftover after parsing attributes in process `syz.1.607'. [ 314.766381][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 315.146255][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 315.147164][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.162410][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.169825][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 315.592710][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 315.592724][ T26] audit: type=1326 audit(1778697059.644:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bef99ce59 code=0x7ffc0000 [ 315.623875][ T26] audit: type=1326 audit(1778697059.654:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bef99ce59 code=0x7ffc0000 [ 315.659777][ T26] audit: type=1326 audit(1778697059.654:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bef99ce59 code=0x7ffc0000 [ 315.687172][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 315.929315][ T26] audit: type=1326 audit(1778697059.654:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8bef99ce59 code=0x7ffc0000 [ 316.300455][ T6647] autofs4:pid:6647:autofs_fill_super: called with bogus options [ 316.806330][ T26] audit: type=1326 audit(1778697060.024:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bef99ce59 code=0x7ffc0000 [ 316.831013][ T26] audit: type=1326 audit(1778697060.024:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bef99cbc2 code=0x7ffc0000 [ 316.969823][ T26] audit: type=1326 audit(1778697060.024:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8bef99cc57 code=0x7ffc0000 [ 316.996002][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.002453][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.172648][ T26] audit: type=1326 audit(1778697060.024:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8bef959b51 code=0x7ffc0000 [ 317.208708][ T26] audit: type=1326 audit(1778697060.024:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8bef99dc49 code=0x7ffc0000 [ 317.236482][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 317.676618][ T26] audit: type=1326 audit(1778697060.024:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8bef959bbb code=0x7ffc0000 [ 317.835356][ T6655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.842991][ T6655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.849687][ T6655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.856255][ T6655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.862347][ T6655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.626925][ T6676] autofs4:pid:6676:autofs_fill_super: called with bogus options [ 318.975006][ T6680] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 319.134194][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.623'. [ 319.656450][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 319.866254][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 319.872820][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 319.883487][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 319.946489][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.481757][ T6708] autofs4:pid:6708:autofs_fill_super: called with bogus options [ 322.345841][ T6714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.352142][ T6714] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 322.359297][ T6714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.365285][ T6714] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.371394][ T6714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.866302][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 325.117212][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 325.123292][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 325.138365][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.138401][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.882276][ T6765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.889004][ T6765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 327.895060][ T6765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 327.901174][ T6765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.907254][ T6765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.956803][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.962953][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 329.969090][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 329.975193][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 329.976287][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.558058][ T6795] autofs4:pid:6795:autofs_fill_super: called with bogus options [ 332.654036][ T6816] program syz.3.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.246217][ T4321] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 334.528053][ T4321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.562866][ T4321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 334.611232][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.661866][ T4321] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 334.701609][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.772971][ T4321] hub 4-1:1.0: bad descriptor, ignoring hub [ 334.812968][ T4321] hub: probe of 4-1:1.0 failed with error -5 [ 334.847073][ T4321] cdc_wdm 4-1:1.0: skipping garbage [ 334.880417][ T4321] cdc_wdm 4-1:1.0: skipping garbage [ 334.911364][ T4321] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 335.916424][ T6837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.096920][ T4321] usb 4-1: USB disconnect, device number 6 [ 338.150159][ T6857] autofs4:pid:6857:autofs_fill_super: called with bogus options [ 338.315105][ T6851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.358383][ T6851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.407251][ T6851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.437027][ T6851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.549399][ T6851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.946542][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.389324][ T1042] block nbd5: Attempted send on invalid socket [ 340.395579][ T1042] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.405294][ T6883] FAT-fs (nbd5): unable to read boot sector [ 340.426488][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 340.432778][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.439051][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 340.586245][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.797761][ T6885] ======================================================= [ 341.797761][ T6885] WARNING: The mand mount option has been deprecated and [ 341.797761][ T6885] and is ignored by this kernel. Remove the mand [ 341.797761][ T6885] option from the mount to silence this warning. [ 341.797761][ T6885] ======================================================= [ 343.845713][ T6899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.507376][ T6918] autofs4:pid:6918:autofs_fill_super: called with bogus options [ 345.361276][ T6921] netlink: 'syz.4.678': attribute type 1 has an invalid length. [ 345.562121][ T6921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.387944][ T6925] device bond1 entered promiscuous mode [ 348.390174][ T6971] autofs4:pid:6971:autofs_fill_super: called with bogus options [ 353.152838][ T7017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.809725][ T7027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 353.824902][ T7027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.450651][ T7017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.691925][ T7017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.766616][ T7017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.772872][ T7017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.217067][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 356.980353][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.987479][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.993674][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.999748][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 357.321439][ T7066] autofs4:pid:7066:autofs_fill_super: called with bogus options [ 358.245103][ T7095] autofs4:pid:7095:autofs_fill_super: called with bogus options [ 362.314105][ T1042] block nbd1: Attempted send on invalid socket [ 362.320714][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.330794][ T7152] FAT-fs (nbd1): unable to read boot sector [ 365.228628][ T7172] device syzkaller0 entered promiscuous mode [ 366.799392][ T7194] tipc: Enabling of bearer rejected, failed to enable media [ 367.002760][ T52] block nbd3: Attempted send on invalid socket [ 367.009408][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.019224][ T7198] FAT-fs (nbd3): unable to read boot sector [ 369.814861][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 371.790940][ T7245] device syzkaller0 entered promiscuous mode [ 371.802764][ T7245] tipc: Started in network mode [ 371.807740][ T7245] tipc: Node identity 2efee82aa861, cluster identity 4711 [ 371.815568][ T7245] tipc: Enabled bearer , priority 0 [ 371.834236][ T7238] tipc: Resetting bearer [ 372.634682][ T7238] tipc: Disabling bearer [ 373.703807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.732559][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 373.741554][ T7257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.801781][ T4321] tipc: Node number set to 2258626602 [ 375.371114][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 375.569560][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.768'. [ 377.397721][ T7285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.428602][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.443632][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.260696][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 383.097706][ T7352] device syzkaller0 entered promiscuous mode [ 383.723287][ T7366] tipc: Enabling of bearer rejected, failed to enable media [ 383.852254][ T7352] 0: reclassify loop, rule prio 0, protocol 700 [ 386.517599][ T7409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 391.291113][ T7445] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 397.960514][ T7506] autofs4:pid:7506:autofs_fill_super: called with bogus options [ 400.687081][ T7528] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 400.694784][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 400.803094][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 401.144973][ T7541] device syzkaller0 entered promiscuous mode [ 402.210567][ T7550] autofs4:pid:7550:autofs_fill_super: called with bogus options [ 405.051302][ T7580] device syzkaller0 entered promiscuous mode [ 405.833390][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 406.179390][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 406.846010][ T1042] block nbd1: Attempted send on invalid socket [ 406.852384][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 406.861621][ T7607] FAT-fs (nbd1): unable to read boot sector [ 409.369515][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 409.954755][ T7639] autofs4:pid:7639:autofs_fill_super: called with bogus options [ 415.185823][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 418.900358][ T7706] xt_hashlimit: size too large, truncated to 1048576 [ 422.375098][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 422.398242][ T7736] device bond_slave_0 entered promiscuous mode [ 422.404504][ T7736] device bond_slave_1 entered promiscuous mode [ 422.412608][ T7736] device macvtap1 entered promiscuous mode [ 422.418643][ T7736] device bond0 entered promiscuous mode [ 422.438989][ T7736] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 422.471577][ T7739] device bond0 left promiscuous mode [ 422.511725][ T7739] device bond_slave_0 left promiscuous mode [ 422.517801][ T7739] device bond_slave_1 left promiscuous mode [ 422.562266][ T7739] device macvtap1 left promiscuous mode [ 422.735256][ T1042] block nbd3: Attempted send on invalid socket [ 422.741608][ T1042] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 422.751147][ T7745] FAT-fs (nbd3): unable to read boot sector [ 426.775149][ T7763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.052179][ T1042] block nbd1: Attempted send on invalid socket [ 429.067000][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 429.076137][ T7780] FAT-fs (nbd1): unable to read boot sector [ 433.500248][ T7813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.261139][ T52] block nbd1: Attempted send on invalid socket [ 434.275581][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 434.284852][ T7831] FAT-fs (nbd1): unable to read boot sector [ 435.516779][ T7841] tipc: Enabled bearer , priority 0 [ 435.581641][ T7840] tipc: Disabling bearer [ 436.603940][ T7851] device syzkaller0 entered promiscuous mode [ 439.869028][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.875444][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.172829][ T7890] tipc: Enabled bearer , priority 0 [ 441.197521][ T4321] tipc: Node number set to 1714860256 [ 441.451373][ T7889] tipc: Disabling bearer [ 447.305965][ T7941] tipc: Enabled bearer , priority 0 [ 447.371081][ T7939] tipc: Disabling bearer [ 448.843884][ T7959] xt_hashlimit: size too large, truncated to 1048576 [ 452.704314][ T7980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.768112][ T7980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 452.797442][ T7980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 453.586498][ T7980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 453.592693][ T7980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.587334][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 454.836421][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 454.836764][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 455.626558][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 455.626605][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.146988][ T8014] tc action pedit 'at' offset 6 out of bounds [ 456.619571][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 456.653479][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.593335][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.437525][ T8057] tipc: Enabling of bearer rejected, failed to enable media [ 464.773510][ T8105] tipc: Enabling of bearer rejected, failed to enable media [ 466.652590][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 468.636802][ T8172] tipc: Enabling of bearer rejected, failed to enable media [ 469.080852][ T8184] netlink: 'syz.5.1033': attribute type 1 has an invalid length. [ 469.155107][ T8184] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1033'. [ 469.456339][ T4321] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 470.320433][ T4321] usb 5-1: config 0 has no interfaces? [ 470.325501][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'. [ 470.328742][ T4321] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 472.193125][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.225876][ T4321] usb 5-1: Product: syz [ 472.241647][ T4321] usb 5-1: Manufacturer: syz [ 472.253050][ T4321] usb 5-1: SerialNumber: syz [ 472.301502][ T4321] usb 5-1: config 0 descriptor?? [ 472.347300][ T4321] usb 5-1: can't set config #0, error -71 [ 472.374365][ T4321] usb 5-1: USB disconnect, device number 4 [ 472.477314][ T8212] syz.4.1045 uses obsolete (PF_INET,SOCK_PACKET) [ 472.986709][ T8223] tipc: Enabling of bearer rejected, failed to enable media [ 473.918359][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 476.386346][ T4321] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 476.570626][ T4321] usb 4-1: config 0 has no interfaces? [ 476.582798][ T4321] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 476.637086][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.467781][ T4321] usb 4-1: Product: syz [ 477.486336][ T4321] usb 4-1: Manufacturer: syz [ 477.490986][ T4321] usb 4-1: SerialNumber: syz [ 477.560450][ T4321] usb 4-1: config 0 descriptor?? [ 477.630177][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 477.697992][ T8273] tipc: Enabling of bearer rejected, failed to enable media [ 478.928469][ T4321] usb 4-1: USB disconnect, device number 7 [ 481.213787][ T8305] device syzkaller0 entered promiscuous mode [ 485.731606][ T41] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 485.929535][ T41] usb 6-1: config 0 has no interfaces? [ 485.941747][ T41] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 485.980896][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.024404][ T41] usb 6-1: Product: syz [ 486.189315][ T41] usb 6-1: Manufacturer: syz [ 486.195239][ T41] usb 6-1: SerialNumber: syz [ 486.201937][ T41] usb 6-1: config 0 descriptor?? [ 486.216339][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 487.531525][ T41] usb 6-1: USB disconnect, device number 5 [ 487.586699][ T8348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 487.592818][ T8348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 487.598968][ T8348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 487.604993][ T8348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 487.611059][ T8348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 489.648909][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 489.648927][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 489.648956][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 489.654933][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 489.661329][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.191021][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 493.757440][ T8404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.763512][ T8404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.769601][ T8404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.775597][ T8404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.781629][ T8404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.898602][ T4321] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 494.087993][ T4321] usb 6-1: config 0 has no interfaces? [ 494.097658][ T4321] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 494.113418][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.148773][ T4321] usb 6-1: Product: syz [ 494.184784][ T4321] usb 6-1: Manufacturer: syz [ 494.191868][ T4321] usb 6-1: SerialNumber: syz [ 494.209073][ T4321] usb 6-1: config 0 descriptor?? [ 494.523407][ T8421] usb 6-1: USB disconnect, device number 6 [ 497.065222][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.065242][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 497.065274][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 497.071278][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 497.077326][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 499.469918][ T8444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 499.476013][ T8444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 499.482096][ T8444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 499.488696][ T8444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 499.494705][ T8444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.308738][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.315420][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.616509][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 501.623765][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 501.630550][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 501.638030][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 501.644419][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.935372][ T8498] device syzkaller0 entered promiscuous mode [ 506.277235][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1130'. [ 508.289942][ T4317] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 508.530851][ T4317] usb 4-1: config 0 has no interfaces? [ 508.561495][ T4317] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 508.668545][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.758524][ T4317] usb 4-1: Product: syz [ 508.814536][ T4317] usb 4-1: Manufacturer: syz [ 508.866575][ T4317] usb 4-1: SerialNumber: syz [ 509.008963][ T4317] usb 4-1: config 0 descriptor?? [ 509.291444][ T4315] usb 4-1: USB disconnect, device number 8 [ 510.890568][ T52] block nbd1: Attempted send on invalid socket [ 510.897238][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.909027][ T8535] FAT-fs (nbd1): unable to read boot sector [ 512.297754][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1145'. [ 517.566126][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1158'. [ 517.852223][ T4317] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 518.763129][ T4317] usb 5-1: config 0 has no interfaces? [ 518.881511][ T4317] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 518.946677][ T8493] Set syz1 is full, maxelem 65536 reached [ 519.039031][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.886223][ T4317] usb 5-1: Product: syz [ 519.890454][ T4317] usb 5-1: Manufacturer: syz [ 519.922804][ T4317] usb 5-1: SerialNumber: syz [ 520.681844][ T4317] usb 5-1: config 0 descriptor?? [ 520.722587][ T4317] usb 5-1: can't set config #0, error -71 [ 520.756525][ T4317] usb 5-1: USB disconnect, device number 5 [ 520.940190][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 524.906662][ T8665] netlink: 'syz.0.1170': attribute type 20 has an invalid length. [ 524.914689][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 527.222567][ T8683] device syzkaller0 entered promiscuous mode [ 528.588486][ T8713] autofs4:pid:8713:autofs_fill_super: called with bogus options [ 534.417898][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1205'. [ 534.544552][ T8762] autofs4:pid:8762:autofs_fill_super: called with bogus options [ 537.546772][ T8791] tipc: Enabling of bearer rejected, failed to enable media [ 537.788027][ T8797] autofs4:pid:8797:autofs_fill_super: called with bogus options [ 538.280956][ T8804] device syzkaller0 entered promiscuous mode [ 538.532121][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 538.678365][ T8817] autofs4:pid:8817:autofs_fill_super: called with bogus options [ 542.279607][ T8849] tipc: Enabled bearer , priority 0 [ 542.302150][ T8836] tipc: Disabling bearer [ 542.801317][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 543.519509][ T8075] block nbd5: Attempted send on invalid socket [ 543.526210][ T8075] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.536806][ T8864] FAT-fs (nbd5): unable to read boot sector [ 543.889106][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 546.645640][ T8902] autofs4:pid:8902:autofs_fill_super: called with bogus options [ 548.650751][ T8909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 548.943169][ T8915] tipc: Enabled bearer , priority 0 [ 549.779563][ T8914] tipc: Disabling bearer [ 549.847835][ T8919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.853965][ T8919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 549.860039][ T8919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.866075][ T8919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.872137][ T8919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.497162][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 551.866299][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 551.872359][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 551.878502][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.884510][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 553.596703][ T8957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.597021][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.868586][ T8968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 554.874711][ T8968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 554.881675][ T8968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 554.888312][ T8968] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 554.894340][ T8968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 555.285940][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1268'. [ 556.906518][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 556.912623][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 556.918942][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 556.924957][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 556.931250][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 557.008070][ T9001] device syzkaller0 entered promiscuous mode [ 557.079936][ T9001] tipc: Enabled bearer , priority 0 [ 557.135139][ T9000] tipc: Resetting bearer [ 557.204843][ T9000] tipc: Disabling bearer [ 560.278973][ T9040] device syzkaller0 entered promiscuous mode [ 561.760463][ T9050] device syzkaller0 entered promiscuous mode [ 561.795891][ T9050] tipc: Enabled bearer , priority 0 [ 561.846716][ T9049] tipc: Resetting bearer [ 561.917336][ T9049] tipc: Disabling bearer [ 561.952675][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 563.105457][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.447614][ T9078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.514217][ T9094] device syzkaller0 entered promiscuous mode [ 566.594736][ T9094] tipc: Enabled bearer , priority 0 [ 566.632611][ T9093] tipc: Resetting bearer [ 566.733701][ T9093] tipc: Disabling bearer [ 566.744292][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 571.172941][ T9130] autofs4:pid:9130:autofs_fill_super: called with bogus options [ 572.150226][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 572.150265][ T9136] device syzkaller0 entered promiscuous mode [ 572.236591][ T9136] tipc: Enabled bearer , priority 0 [ 572.332825][ T9135] tipc: Resetting bearer [ 574.995717][ T9135] tipc: Disabling bearer [ 577.436340][ T9172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 577.718952][ T9178] autofs4:pid:9178:autofs_fill_super: called with bogus options [ 578.897886][ T9181] device syzkaller0 entered promiscuous mode [ 581.839767][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 586.243855][ T8421] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 586.486319][ T8421] usb 5-1: Using ep0 maxpacket: 16 [ 586.745436][ T8421] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.801569][ T8421] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.892584][ T8421] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.960171][ T8421] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 587.021823][ T8421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.077300][ T8421] usb 5-1: config 0 descriptor?? [ 587.291403][ T8421] usbhid 5-1:0.0: can't add hid device: -71 [ 587.312565][ T8421] usbhid: probe of 5-1:0.0 failed with error -71 [ 587.416717][ T8421] usb 5-1: USB disconnect, device number 6 [ 588.917564][ T9244] device syzkaller0 entered promiscuous mode [ 589.004115][ T9246] device syzkaller0 entered promiscuous mode [ 589.209604][ T9252] autofs4:pid:9252:autofs_fill_super: called with bogus options [ 595.420517][ T9280] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 595.469534][ T9280] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 595.536402][ T9284] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 595.709284][ T9290] device syzkaller0 entered promiscuous mode [ 596.069881][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 596.148978][ T9302] autofs4:pid:9302:autofs_fill_super: called with bogus options [ 597.018292][ T9305] device syzkaller0 entered promiscuous mode [ 599.912411][ T4288] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 600.196841][ T9334] device syzkaller0 entered promiscuous mode [ 600.522980][ T9342] autofs4:pid:9342:autofs_fill_super: called with bogus options [ 602.146684][ T9358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 602.152807][ T9358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 602.159564][ T9358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.165536][ T9358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 602.171585][ T9358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 603.112091][ T9369] device syzkaller0 entered promiscuous mode [ 604.435009][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.441345][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 604.447866][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 604.454107][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 604.460445][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout [ 606.947972][ T9397] autofs4:pid:9397:autofs_fill_super: called with bogus options [ 610.416544][ T9410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 610.422662][ T9410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 610.428734][ T9410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.434774][ T9410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 610.440809][ T9410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.506273][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout [ 612.512431][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 612.586324][ T4279] Bluetooth: hci2: command 0x0c1a tx timeout [ 612.592384][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 612.598542][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 613.065259][ T9453] autofs4:pid:9453:autofs_fill_super: called with bogus options [ 616.910052][ T9493] device syzkaller0 entered promiscuous mode [ 616.974875][ T9495] autofs4:pid:9495:autofs_fill_super: called with bogus options [ 619.406896][ T9513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 619.412964][ T9513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 619.419000][ T9513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 619.425003][ T9513] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 619.431002][ T9513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 620.166287][ T4321] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 620.376281][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 620.385021][ T4321] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 620.387801][ T9538] device syzkaller0 entered promiscuous mode [ 620.410082][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.436338][ T4321] usb 5-1: Product: syz [ 620.440541][ T4321] usb 5-1: Manufacturer: syz [ 620.445148][ T4321] usb 5-1: SerialNumber: syz [ 620.504284][ T4321] usb 5-1: config 0 descriptor?? [ 620.591704][ T9545] autofs4:pid:9545:autofs_fill_super: called with bogus options [ 620.727907][ T4321] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 621.437632][ T9550] tc_dump_action: action bad kind [ 621.444501][ T4321] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 621.458660][ T4321] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 621.506543][ T4321] usb 5-1: USB disconnect, device number 7 [ 622.105386][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 622.105404][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 622.105435][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout [ 622.111540][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 622.117451][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 622.253873][ T9560] autofs4:pid:9560:autofs_fill_super: called with bogus options [ 623.163805][ T9564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 623.170176][ T9564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 623.176125][ T9564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.182093][ T9564] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.188416][ T9564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 624.104395][ T9586] autofs4:pid:9586:autofs_fill_super: called with bogus options [ 624.191245][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.306590][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 625.306880][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 625.319452][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.325897][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout [ 625.332793][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 625.951398][ T9602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.957526][ T9602] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 625.963536][ T9602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 625.969587][ T9602] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 625.975578][ T9602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 626.080210][ T9603] sctp: [Deprecated]: syz.3.1444 (pid 9603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.080210][ T9603] Use struct sctp_sack_info instead [ 627.626348][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 628.026365][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 628.032451][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 628.038546][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout [ 628.038579][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 628.117155][ T9623] autofs4:pid:9623:autofs_fill_super: called with bogus options [ 629.162959][ T9640] autofs4:pid:9640:autofs_fill_super: called with bogus options [ 631.662220][ T9656] netlink: 'syz.4.1461': attribute type 1 has an invalid length. [ 631.730885][ T9659] autofs4:pid:9659:autofs_fill_super: called with bogus options [ 632.649696][ T9656] bond2: (slave gretap1): making interface the new active one [ 632.661071][ T9656] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 633.019036][ T9678] autofs4:pid:9678:autofs_fill_super: called with bogus options [ 635.008544][ T9656] syz.4.1461 (9656) used greatest stack depth: 19920 bytes left [ 635.383864][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'. [ 635.461106][ T9692] device syzkaller0 entered promiscuous mode [ 635.549959][ T9700] autofs4:pid:9700:autofs_fill_super: called with bogus options [ 637.280830][ T9720] autofs4:pid:9720:autofs_fill_super: called with bogus options [ 640.394117][ T9741] autofs4:pid:9741:autofs_fill_super: called with bogus options [ 641.381214][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 642.319639][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 643.615934][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 643.635241][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1497'. [ 643.756594][ T4315] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 645.088511][ T4315] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 645.113598][ T4315] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 645.155376][ T9775] device syzkaller0 entered promiscuous mode [ 645.164238][ T4315] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 645.184753][ T9775] tipc: Enabled bearer , priority 0 [ 645.213128][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.214709][ T9774] tipc: Resetting bearer [ 645.264279][ T4315] usb 6-1: config 0 descriptor?? [ 645.287318][ T4315] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 645.361762][ T9774] tipc: Disabling bearer [ 645.705399][ T9782] autofs4:pid:9782:autofs_fill_super: called with bogus options [ 647.243061][ T9810] autofs4:pid:9810:autofs_fill_super: called with bogus options [ 648.067434][ T4321] usb 6-1: USB disconnect, device number 7 [ 651.828402][ T9838] device syzkaller0 entered promiscuous mode [ 652.344065][ T9851] autofs4:pid:9851:autofs_fill_super: called with bogus options [ 656.749643][ T4285] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 662.554974][ T9918] device syzkaller0 entered promiscuous mode [ 662.721521][ T9927] autofs4:pid:9927:autofs_fill_super: called with bogus options [ 663.590089][ T9935] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 663.632603][ T9935] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 663.704536][ T9941] ------------[ cut here ]------------ [ 663.710307][ T9941] WARNING: CPU: 0 PID: 9941 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 663.720655][ T9941] Modules linked in: [ 663.724586][ T9941] CPU: 0 PID: 9941 Comm: syz.5.1541 Not tainted syzkaller #0 [ 663.732059][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 663.742658][ T9941] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 663.749273][ T9941] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 663.768980][ T9941] RSP: 0018:ffffc90005537c48 EFLAGS: 00010287 [ 663.775105][ T9941] RAX: ffffffff81100f7c RBX: ffff88807f06a7c0 RCX: 0000000000080000 [ 663.783152][ T9941] RDX: ffffc90004ad2000 RSI: 00000000000003bf RDI: 00000000000003c0 [ 663.791177][ T9941] RBP: ffff88807d5f4000 R08: dffffc0000000000 R09: 1ffffffff215f26b [ 663.799221][ T9941] R10: dffffc0000000000 R11: fffffbfff215f26c R12: ffff88807f06aab4 [ 663.807259][ T9941] R13: ffff88807f06a898 R14: dffffc0000000000 R15: 0000000000000000 [ 663.815257][ T9941] FS: 00007f85e83de6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 663.824353][ T9941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.831003][ T9941] CR2: 00007f85e83ddff8 CR3: 000000002f196000 CR4: 00000000003526f0 [ 663.839060][ T9941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 663.847091][ T9941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 663.855091][ T9941] Call Trace: [ 663.858456][ T9941] [ 663.861415][ T9941] ? mutex_lock_nested+0x10/0x10 [ 663.866435][ T9941] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 663.872455][ T9941] kvm_vcpu_ioctl+0x8f7/0xc10 [ 663.877205][ T9941] ? xa_release+0x50/0x50 [ 663.881582][ T9941] ? __fget_files+0x28/0x4b0 [ 663.886241][ T9941] ? __fget_files+0x28/0x4b0 [ 663.890878][ T9941] ? bpf_lsm_file_ioctl+0x5/0x10 [ 663.895847][ T9941] ? security_file_ioctl+0x7c/0xa0 [ 663.901017][ T9941] ? xa_release+0x50/0x50 [ 663.905390][ T9941] __se_sys_ioctl+0xfa/0x170 [ 663.910039][ T9941] do_syscall_64+0x4c/0xa0 [ 663.914479][ T9941] ? clear_bhb_loop+0x60/0xb0 [ 663.919199][ T9941] ? clear_bhb_loop+0x60/0xb0 [ 663.923896][ T9941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.929834][ T9941] RIP: 0033:0x7f85e759ce59 [ 663.934279][ T9941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.953932][ T9941] RSP: 002b:00007f85e83de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.962400][ T9941] RAX: ffffffffffffffda RBX: 00007f85e7816090 RCX: 00007f85e759ce59 [ 663.970414][ T9941] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 663.978429][ T9941] RBP: 00007f85e7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 663.986438][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.994423][ T9941] R13: 00007f85e7816128 R14: 00007f85e7816090 R15: 00007fffb8f39008 [ 664.002453][ T9941] [ 664.005481][ T9941] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 664.012761][ T9941] CPU: 0 PID: 9941 Comm: syz.5.1541 Not tainted syzkaller #0 [ 664.020135][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.030198][ T9941] Call Trace: [ 664.033489][ T9941] [ 664.036429][ T9941] dump_stack_lvl+0x188/0x24e [ 664.041134][ T9941] ? memcpy+0x3c/0x60 [ 664.045131][ T9941] ? show_regs_print_info+0x12/0x12 [ 664.050355][ T9941] ? load_image+0x400/0x400 [ 664.054891][ T9941] panic+0x2e5/0x730 [ 664.058812][ T9941] ? bpf_jit_dump+0xd0/0xd0 [ 664.063349][ T9941] __warn+0x2f8/0x4f0 [ 664.067345][ T9941] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 664.073176][ T9941] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 664.078998][ T9941] report_bug+0x2ba/0x4f0 [ 664.083359][ T9941] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 664.089193][ T9941] handle_bug+0x3a/0x70 [ 664.093375][ T9941] exc_invalid_op+0x16/0x40 [ 664.097899][ T9941] asm_exc_invalid_op+0x16/0x20 [ 664.102765][ T9941] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 664.109204][ T9941] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 664.128826][ T9941] RSP: 0018:ffffc90005537c48 EFLAGS: 00010287 [ 664.134905][ T9941] RAX: ffffffff81100f7c RBX: ffff88807f06a7c0 RCX: 0000000000080000 [ 664.142889][ T9941] RDX: ffffc90004ad2000 RSI: 00000000000003bf RDI: 00000000000003c0 [ 664.150870][ T9941] RBP: ffff88807d5f4000 R08: dffffc0000000000 R09: 1ffffffff215f26b [ 664.158856][ T9941] R10: dffffc0000000000 R11: fffffbfff215f26c R12: ffff88807f06aab4 [ 664.166837][ T9941] R13: ffff88807f06a898 R14: dffffc0000000000 R15: 0000000000000000 [ 664.174832][ T9941] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 664.180665][ T9941] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 664.186485][ T9941] ? mutex_lock_nested+0x10/0x10 [ 664.191448][ T9941] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 664.197189][ T9941] kvm_vcpu_ioctl+0x8f7/0xc10 [ 664.201887][ T9941] ? xa_release+0x50/0x50 [ 664.206245][ T9941] ? __fget_files+0x28/0x4b0 [ 664.210858][ T9941] ? __fget_files+0x28/0x4b0 [ 664.215483][ T9941] ? bpf_lsm_file_ioctl+0x5/0x10 [ 664.220440][ T9941] ? security_file_ioctl+0x7c/0xa0 [ 664.225572][ T9941] ? xa_release+0x50/0x50 [ 664.229921][ T9941] __se_sys_ioctl+0xfa/0x170 [ 664.234710][ T9941] do_syscall_64+0x4c/0xa0 [ 664.239151][ T9941] ? clear_bhb_loop+0x60/0xb0 [ 664.243850][ T9941] ? clear_bhb_loop+0x60/0xb0 [ 664.248548][ T9941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.254456][ T9941] RIP: 0033:0x7f85e759ce59 [ 664.258883][ T9941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.278514][ T9941] RSP: 002b:00007f85e83de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.286943][ T9941] RAX: ffffffffffffffda RBX: 00007f85e7816090 RCX: 00007f85e759ce59 [ 664.294933][ T9941] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 664.302917][ T9941] RBP: 00007f85e7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 664.310898][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.318879][ T9941] R13: 00007f85e7816128 R14: 00007f85e7816090 R15: 00007fffb8f39008 [ 664.326877][ T9941] [ 664.330303][ T9941] Kernel Offset: disabled [ 664.334671][ T9941] Rebooting in 86400 seconds..