[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. 2020/10/04 13:08:49 fuzzer started 2020/10/04 13:08:49 dialing manager at 10.128.0.26:33529 2020/10/04 13:08:49 syscalls: 3450 2020/10/04 13:08:49 code coverage: enabled 2020/10/04 13:08:49 comparison tracing: enabled 2020/10/04 13:08:49 extra coverage: enabled 2020/10/04 13:08:49 setuid sandbox: enabled 2020/10/04 13:08:49 namespace sandbox: enabled 2020/10/04 13:08:49 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/04 13:08:49 fault injection: enabled 2020/10/04 13:08:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/04 13:08:49 net packet injection: enabled 2020/10/04 13:08:49 net device setup: enabled 2020/10/04 13:08:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/04 13:08:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/04 13:08:49 USB emulation: enabled 2020/10/04 13:08:49 hci packet injection: enabled 2020/10/04 13:08:49 wifi device emulation: enabled 13:12:15 executing program 0: 13:12:15 executing program 1: 13:12:15 executing program 2: 13:12:15 executing program 3: 13:12:16 executing program 4: 13:12:16 executing program 5: syzkaller login: [ 269.648346][ T6879] IPVS: ftp: loaded support on port[0] = 21 [ 269.881713][ T6881] IPVS: ftp: loaded support on port[0] = 21 [ 269.919173][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 270.109311][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.131300][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.141645][ T6879] device bridge_slave_0 entered promiscuous mode [ 270.182487][ T6883] IPVS: ftp: loaded support on port[0] = 21 [ 270.191709][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.202422][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.211261][ T6879] device bridge_slave_1 entered promiscuous mode [ 270.349184][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 270.381272][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.430708][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.465372][ T6885] IPVS: ftp: loaded support on port[0] = 21 [ 270.534879][ T6887] IPVS: ftp: loaded support on port[0] = 21 [ 270.590482][ T6879] team0: Port device team_slave_0 added [ 270.629256][ T6879] team0: Port device team_slave_1 added [ 270.699984][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.707106][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.734709][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.750682][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.757860][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.783841][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.986835][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.993940][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.004089][ T6881] device bridge_slave_0 entered promiscuous mode [ 271.024330][ T6922] IPVS: ftp: loaded support on port[0] = 21 [ 271.026578][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 271.055523][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.063993][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.074019][ T6881] device bridge_slave_1 entered promiscuous mode [ 271.112422][ T6879] device hsr_slave_0 entered promiscuous mode [ 271.120245][ T6879] device hsr_slave_1 entered promiscuous mode [ 271.233240][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.269645][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.351400][ T6885] chnl_net:caif_netlink_parms(): no params data found [ 271.417223][ T6881] team0: Port device team_slave_0 added [ 271.428887][ T6881] team0: Port device team_slave_1 added [ 271.522438][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 271.546033][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.553065][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.579326][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.613342][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.637178][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 271.643990][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.652860][ T6883] device bridge_slave_0 entered promiscuous mode [ 271.682861][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.690179][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.717244][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.747912][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.754988][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.765051][ T6883] device bridge_slave_1 entered promiscuous mode [ 271.814682][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.833140][ T6881] device hsr_slave_0 entered promiscuous mode [ 271.843490][ T6881] device hsr_slave_1 entered promiscuous mode [ 271.851613][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.860711][ T6881] Cannot create hsr debugfs directory [ 271.871989][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.879446][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.886221][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 271.888790][ T6885] device bridge_slave_0 entered promiscuous mode [ 271.916069][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.945562][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.953180][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.962941][ T6885] device bridge_slave_1 entered promiscuous mode [ 272.079416][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.091873][ T6879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.116210][ T2654] Bluetooth: hci2: command 0x0409 tx timeout [ 272.132126][ T6883] team0: Port device team_slave_0 added [ 272.150802][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.179245][ T6879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.201504][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.208867][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.218245][ T6887] device bridge_slave_0 entered promiscuous mode [ 272.229511][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.237909][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.245969][ T6887] device bridge_slave_1 entered promiscuous mode [ 272.259968][ T6883] team0: Port device team_slave_1 added [ 272.271007][ T6879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.302308][ T6879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.329473][ T6885] team0: Port device team_slave_0 added [ 272.346547][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 272.356230][ T2654] Bluetooth: hci3: command 0x0409 tx timeout [ 272.387997][ T6885] team0: Port device team_slave_1 added [ 272.401702][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.408877][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.434885][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.452211][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.459683][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.485857][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.498924][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.516158][ T7354] Bluetooth: hci4: command 0x0409 tx timeout [ 272.573631][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.609346][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.618658][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.645308][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.661343][ T6883] device hsr_slave_0 entered promiscuous mode [ 272.669030][ T6883] device hsr_slave_1 entered promiscuous mode [ 272.675580][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.684134][ T6883] Cannot create hsr debugfs directory [ 272.698366][ T6887] team0: Port device team_slave_0 added [ 272.709784][ T6887] team0: Port device team_slave_1 added [ 272.722920][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.730658][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.757175][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.841502][ T6881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.851255][ T6881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.880275][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.888441][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.896297][ T6922] device bridge_slave_0 entered promiscuous mode [ 272.904093][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.915818][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.944462][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 272.951363][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.964122][ T6881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.985886][ T6881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.002552][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.013082][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.024135][ T6922] device bridge_slave_1 entered promiscuous mode [ 273.033580][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.041287][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.068917][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.103601][ T6885] device hsr_slave_0 entered promiscuous mode [ 273.110556][ T6885] device hsr_slave_1 entered promiscuous mode [ 273.118479][ T6885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.126760][ T6885] Cannot create hsr debugfs directory [ 273.201598][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.244983][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.281902][ T6887] device hsr_slave_0 entered promiscuous mode [ 273.289915][ T6887] device hsr_slave_1 entered promiscuous mode [ 273.300670][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.309952][ T6887] Cannot create hsr debugfs directory [ 273.349451][ T6922] team0: Port device team_slave_0 added [ 273.409006][ T6922] team0: Port device team_slave_1 added [ 273.503855][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.516731][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.548602][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.581765][ T6883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.592146][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.599823][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.626711][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.682684][ T6883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.716020][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 273.732201][ T6883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.752844][ T6922] device hsr_slave_0 entered promiscuous mode [ 273.761212][ T6922] device hsr_slave_1 entered promiscuous mode [ 273.768933][ T6922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.776937][ T6922] Cannot create hsr debugfs directory [ 273.796977][ T6883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.885105][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.934223][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.970421][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 273.983516][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.002822][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.011830][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.020119][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.036277][ T6885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.057199][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.069362][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.090598][ T6885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.100754][ T6885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.134505][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.144153][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.153928][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.161248][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.190122][ T6885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.197007][ T8156] Bluetooth: hci2: command 0x041b tx timeout [ 274.229476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.238466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.248166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.260894][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.268050][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.277244][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.285793][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.294599][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.301746][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.310303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.323181][ T6887] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.388072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.398512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.407998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.417665][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.424749][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.432662][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.442768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.451911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.461481][ T6887] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.466599][ T2654] Bluetooth: hci3: command 0x041b tx timeout [ 274.483986][ T6887] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.495171][ T6887] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.557135][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.569686][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.578858][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.588374][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.597687][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.606435][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.607254][ T2654] Bluetooth: hci4: command 0x041b tx timeout [ 274.626870][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.635582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.688696][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.701179][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.711561][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.722584][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.733718][ T6922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.747990][ T6922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.765033][ T6922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.784557][ T6881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.803195][ T6881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.818084][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.841318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.850933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.861192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.870139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.878816][ T6922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.929818][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.939754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.947724][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.955163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.964334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.991835][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.995975][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 275.023798][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.049079][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.062894][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.075228][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.097769][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.144984][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.162804][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.176588][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.184083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.199026][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.209475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.228152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.238104][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.248832][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.255990][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.264078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.273731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.283054][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.290197][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.325175][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.333532][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.343380][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.352956][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.360105][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.382558][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.415061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.423578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.433113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.442434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.452434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.461487][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.468623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.478163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.487791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.509832][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.520521][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.530079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.591757][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.601696][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.611208][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.620335][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.630021][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.639826][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.649253][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.658712][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.668105][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.708238][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.718134][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.726895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.735668][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.746869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.755130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.765570][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.774264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.783217][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.792147][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.805452][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.806218][ T12] Bluetooth: hci0: command 0x040f tx timeout [ 275.822573][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.832649][ T6881] device veth0_vlan entered promiscuous mode [ 275.844320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.852296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.860588][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.871932][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.884604][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.900020][ T6879] device veth0_vlan entered promiscuous mode [ 275.912716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.924400][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.934265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.943365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.952075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.960566][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.978934][ T6883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.002659][ T6879] device veth1_vlan entered promiscuous mode [ 276.030887][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.046593][ T12] Bluetooth: hci1: command 0x040f tx timeout [ 276.063384][ T6881] device veth1_vlan entered promiscuous mode [ 276.078990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.088718][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.098949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.108590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.117929][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.125106][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.133672][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.141735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.185163][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.195506][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.206642][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.218534][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.227529][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.237073][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.244168][ T8156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.252298][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.260435][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.268324][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.286280][ T12] Bluetooth: hci2: command 0x040f tx timeout [ 276.327450][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.338127][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.348590][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.355835][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.365424][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.374584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.383632][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.390787][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.399222][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.408941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.418044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.425507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.456165][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.471227][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.479588][ T6879] device veth0_macvtap entered promiscuous mode [ 276.495313][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.503689][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.512246][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.523611][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.533423][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.543021][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.551850][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.560789][ T2654] Bluetooth: hci3: command 0x040f tx timeout [ 276.567526][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.575441][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.584684][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.616034][ T6879] device veth1_macvtap entered promiscuous mode [ 276.625928][ T6881] device veth0_macvtap entered promiscuous mode [ 276.638527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.652091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.661460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.675180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.676102][ T2654] Bluetooth: hci4: command 0x040f tx timeout [ 276.689012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.702374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.711383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.724200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.734912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.757033][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.781530][ T6887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.794881][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.808607][ T6881] device veth1_macvtap entered promiscuous mode [ 276.834754][ T6922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.846837][ T6922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.859702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.872073][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.880727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.894363][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.903021][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.912040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.923805][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.932720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.941624][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.950592][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.965494][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.009620][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.018717][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.030408][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.039040][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.047841][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.057341][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.067338][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.075177][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.087257][ T17] Bluetooth: hci5: command 0x040f tx timeout [ 277.107926][ T6885] device veth0_vlan entered promiscuous mode [ 277.141787][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.150262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.164466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.172521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.186111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.202454][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.245482][ T6879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.261098][ T6879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.270316][ T6879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.279542][ T6879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.293006][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.305818][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.320448][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.328709][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.336961][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.344473][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.354471][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.368912][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.381196][ T6885] device veth1_vlan entered promiscuous mode [ 277.404270][ T6883] device veth0_vlan entered promiscuous mode [ 277.429228][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.451158][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.468977][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.483237][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.492408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.501782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.512761][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.568837][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.577597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.591900][ T6881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.605675][ T6881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.614406][ T6881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.624239][ T6881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.641451][ T6883] device veth1_vlan entered promiscuous mode [ 277.767020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.775220][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.790405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.800545][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.810438][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.833420][ T6885] device veth0_macvtap entered promiscuous mode [ 277.875819][ T8185] Bluetooth: hci0: command 0x0419 tx timeout [ 277.930412][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.952772][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.959837][ T6885] device veth1_macvtap entered promiscuous mode [ 277.987793][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.006279][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.014653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.031694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.041949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.050523][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.069143][ T6883] device veth0_macvtap entered promiscuous mode [ 278.080675][ T6887] device veth0_vlan entered promiscuous mode [ 278.111968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.122057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.132327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.142670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.152588][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.162058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.171632][ T17] Bluetooth: hci1: command 0x0419 tx timeout [ 278.174661][ T6883] device veth1_macvtap entered promiscuous mode [ 278.221538][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.231733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.241472][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.251713][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.264125][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.276788][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.287001][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.297526][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.309805][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.327851][ T6887] device veth1_vlan entered promiscuous mode [ 278.337709][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.346961][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.349431][ T6922] device veth0_vlan entered promiscuous mode [ 278.356540][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 278.368583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.381856][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.390328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.402599][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.411657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.422011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.432729][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.445815][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.456159][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.466686][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.478674][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.508328][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.515197][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.524408][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.536152][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.557553][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.571047][ T6885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.582846][ T6885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.592370][ T6885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.603528][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 278.610353][ T6885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.644568][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 13:12:25 executing program 0: [ 278.656635][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.668410][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.680816][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.694396][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.705826][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.718534][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 13:12:25 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, 0x0, 0x0) [ 278.758016][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.786389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.796650][ T17] Bluetooth: hci4: command 0x0419 tx timeout [ 278.799904][ T6922] device veth1_vlan entered promiscuous mode 13:12:25 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x87, 0x0, &(0x7f0000000480)) [ 278.910940][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.935429][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.945284][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 13:12:25 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) [ 278.962690][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.986019][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 13:12:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3}], {0x14}}, 0x3c}}, 0x0) [ 279.013681][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.028058][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.071779][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.106125][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 13:12:26 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x20008850) [ 279.114842][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 13:12:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) [ 279.152456][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.187539][ T6887] device veth0_macvtap entered promiscuous mode [ 279.205543][ T8156] Bluetooth: hci5: command 0x0419 tx timeout [ 279.241701][ T6883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.258843][ T6883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.268532][ T6883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.280930][ T6883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.298989][ T2542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.347351][ T6887] device veth1_macvtap entered promiscuous mode [ 279.369514][ T2542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.383268][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.397206][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.427633][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.522534][ T6922] device veth0_macvtap entered promiscuous mode [ 279.552368][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 13:12:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5450) [ 279.569861][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.602366][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.639929][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.641946][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.666893][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.684082][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.695337][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.702960][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.714048][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.735920][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.754441][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.775369][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.816353][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.829541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.846283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.866229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.877233][ T6922] device veth1_macvtap entered promiscuous mode [ 279.900559][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.945506][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.983352][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.022821][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.033451][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.056343][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.066439][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.077114][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.088668][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.114755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.124532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.133685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.151664][ T6887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.161817][ T6887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.171350][ T6887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.180572][ T6887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.204600][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.218352][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.228729][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.239437][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.249712][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.260609][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.270521][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.281837][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.291792][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.302626][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.314069][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.331055][ T2542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.348875][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.360411][ T2542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.369743][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.380930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.381445][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.401672][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.424266][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.432156][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.450646][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.461212][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.472631][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.485246][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.495067][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.507041][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.525360][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.536192][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.548106][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.582276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.591572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.603467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.619211][ T6922] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.632811][ T6922] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.642788][ T6922] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.652484][ T6922] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.691728][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.702020][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.728194][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:12:27 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0xc0045878, 0x0) 13:12:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x10}, 0x40) [ 280.984638][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.020752][ T8258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.034710][ T8258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.035997][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.083129][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.092415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.161253][ T8258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.196432][ T8258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.209252][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.214118][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.248799][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.276694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 13:12:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1267) 13:12:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 13:12:28 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_buf(r0, 0x10d, 0x0, 0x0, 0x0) 13:12:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x0, 0x0, 0x6a}, 0x40) 13:12:28 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x82, 0x0) write$cgroup_devices(r0, 0x0, 0x8) 13:12:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'WR$C'}, 0x0, 0x0, @userptr}) 13:12:28 executing program 0: getresuid(&(0x7f00000002c0), 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5452, &(0x7f0000000040)) 13:12:28 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={0x0, 0x0, 0x2b4d7b2a9a288fe2}, 0x10) 13:12:28 executing program 2: r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) 13:12:28 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x454802, 0x0) 13:12:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1260, 0xffffffffffffffff) 13:12:28 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 13:12:28 executing program 2: r0 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 13:12:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5421) 13:12:28 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 13:12:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 13:12:28 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000580)='ethtool\x00') 13:12:28 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vcsu\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000000000)=""/68, 0x44) 13:12:28 executing program 5: getresuid(&(0x7f00000002c0), 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) 13:12:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x38}}, 0x0) 13:12:28 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) 13:12:28 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) 13:12:29 executing program 2: syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 13:12:29 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000440), &(0x7f0000000480)=0x4) 13:12:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5452) 13:12:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x33fe0}}, 0x0) 13:12:29 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5450, 0x0) 13:12:29 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)='4', 0x1}], 0x1}, 0x0) 13:12:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 13:12:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\t\a\x00\x00\x00\x00\x00\x00\x00\x00\r'], 0x3c}}, 0x0) 13:12:29 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 13:12:29 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x5e}}}}}]}}]}}, 0x0) 13:12:29 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x89, 0x0, &(0x7f0000000480)) 13:12:29 executing program 3: syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x6040) [ 282.467427][ T8419] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.503312][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:12:29 executing program 2: select(0x40, &(0x7f00000000c0), &(0x7f00000001c0)={0x3}, 0x0, &(0x7f0000000240)={0x77359400}) 13:12:29 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @nl=@unspec, @hci, @ax25={0x3, @null, 0x6}}) 13:12:29 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f0000000080), 0x40) 13:12:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c03, 0xffffffffffffffff) 13:12:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 13:12:29 executing program 1: r0 = memfd_create(&(0x7f0000000040)='?{}\']\'*\'{*{/{\\\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 13:12:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5451) 13:12:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000600)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b906e982"}}) 13:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp(r0, 0x0, 0x0) [ 282.885262][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 283.135206][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 283.255125][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 283.445236][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 283.454654][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.485055][ T17] usb 1-1: Product: syz [ 283.489299][ T17] usb 1-1: Manufacturer: syz [ 283.493911][ T17] usb 1-1: SerialNumber: syz [ 283.764758][ T8185] usb 1-1: USB disconnect, device number 2 [ 284.544889][ T17] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 284.784942][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 284.904949][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 285.075118][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 285.084172][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.092637][ T17] usb 1-1: Product: syz [ 285.096970][ T17] usb 1-1: Manufacturer: syz [ 285.101670][ T17] usb 1-1: SerialNumber: syz 13:12:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf", 0x66}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:12:32 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000240)="0e", 0x1}], 0x2}, 0x0) 13:12:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x40101283) 13:12:32 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9341112a"}}) 13:12:32 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) 13:12:32 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002b00)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000380)={0x0, 0x0}) [ 285.350360][ T12] usb 1-1: USB disconnect, device number 3 13:12:32 executing program 2: set_mempolicy(0x1, &(0x7f0000000340)=0x8, 0x81f) 13:12:32 executing program 1: memfd_create(&(0x7f0000001880)='\x00', 0x7) 13:12:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004d8535"], 0x14}}, 0x0) 13:12:32 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x88242, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 13:12:32 executing program 5: select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x2}, &(0x7f0000000240)={0x77359400}) 13:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090700000000000000000d00e600280001"], 0x3c}}, 0x0) 13:12:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c04) 13:12:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000040)) 13:12:35 executing program 1: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x77359400}) 13:12:35 executing program 2: socketpair(0x18, 0x0, 0x0, &(0x7f0000000140)) 13:12:35 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x4020940d, 0x0) 13:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\t\a\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00('], 0x3c}}, 0x0) 13:12:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1268, 0xffffffffffffffff) 13:12:35 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) 13:12:35 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001500)={&(0x7f0000000100)=@id, 0x10, &(0x7f0000001400)=[{&(0x7f0000000140)='w', 0x1}, {0x0}, {&(0x7f0000000240)="0e", 0x1}], 0x3}, 0x40000c1) 13:12:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fe", 0x35}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:12:35 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x4200, 0x0) 13:12:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1268, 0xffffffffffffffff) 13:12:35 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 13:12:35 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 289.201888][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd 13:12:36 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000000080), 0x40) 13:12:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 13:12:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1268, 0xffffffffffffffff) 13:12:36 executing program 0: socketpair(0x22, 0x0, 0x3, &(0x7f0000000000)) [ 289.464829][ T23] usb 3-1: Using ep0 maxpacket: 8 13:12:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 13:12:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1268, 0xffffffffffffffff) 13:12:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vcsu\x00', 0x0, 0x0) accept4$tipc(r0, 0x0, 0x0, 0xc0000) [ 289.624747][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 289.832193][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 289.854457][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.862489][ T23] usb 3-1: Product: syz [ 289.876188][ T23] usb 3-1: Manufacturer: syz [ 289.880816][ T23] usb 3-1: SerialNumber: syz [ 290.151810][ T12] usb 3-1: USB disconnect, device number 2 [ 290.924275][ T12] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 291.164197][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 291.285492][ T12] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 291.454256][ T12] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 291.463442][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.472423][ T12] usb 3-1: Product: syz [ 291.477183][ T12] usb 3-1: Manufacturer: syz [ 291.481769][ T12] usb 3-1: SerialNumber: syz 13:12:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 13:12:38 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:38 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) 13:12:38 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0xc0189436, 0x0) [ 291.744515][ T12] usb 3-1: USB disconnect, device number 3 13:12:38 executing program 2: add_key(&(0x7f0000000400)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 13:12:38 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9f, 0x2, 0x7, 0x1, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x80, 0x5e}}, [{{0x9, 0x5, 0x82, 0x2, 0x20}}]}}}]}}]}}, 0x0) 13:12:38 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) 13:12:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x80081272) 13:12:38 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x80041284, 0xffffffffffffffff) 13:12:38 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 13:12:39 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:39 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/65, 0x41}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 13:12:39 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) 13:12:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001700)={&(0x7f0000000040)=@name, 0x10, &(0x7f0000001640)=[{&(0x7f0000000080)="c2", 0x1}], 0x1}, 0x0) [ 292.154130][ T8156] usb 1-1: new high-speed USB device number 4 using dummy_hcd 13:12:39 executing program 3: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000002800)='\',\\\x00\xe0|\x0e5a\x17}Ih\xe1\xfb\x167\a\xf6\x19\xf0\x1b}\xfa\x93u}\xcc\x8c\xf5\xe5=\xde\xc4\f\xb7\xd4-\xb4\xf3\xecSsm\x06r\x01i\v\xa8\xee-\x16\xf5\xf9C\xbb\xac/\x81\xd9\x8aqE\x11\xd8\x9c\xd05q\x83\x11*\xb1\xaeX\x7fZ\xf3o\xfc~\xee:\v\xf6S\xf3\xadw\xa3q#;\xa9\xb1\xaf\x94\xf1:\xa9Q\\L}C\xd8\xceH{\xa4\v\xaa2\x96j\xfb}\x11\xe1\x84\xe6\xf9~\xf3$', 0x0) 13:12:39 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) [ 292.414073][ T8156] usb 1-1: Using ep0 maxpacket: 8 [ 292.562309][ T8156] usb 1-1: config 1 interface 0 altsetting 159 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.578146][ T8156] usb 1-1: config 1 interface 0 altsetting 159 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.598715][ T8156] usb 1-1: config 1 interface 0 altsetting 159 bulk endpoint 0x82 has invalid maxpacket 32 [ 292.616479][ T8156] usb 1-1: config 1 interface 0 has no altsetting 0 [ 292.784187][ T8156] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 292.784209][ T8156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.784223][ T8156] usb 1-1: Product: syz [ 292.784237][ T8156] usb 1-1: Manufacturer: syz [ 292.784251][ T8156] usb 1-1: SerialNumber: syz [ 292.805003][ T8636] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 293.081528][ T8156] usb 1-1: USB disconnect, device number 4 [ 293.814019][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 294.053973][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 294.174081][ T5] usb 1-1: config 1 interface 0 altsetting 159 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.184256][ T5] usb 1-1: config 1 interface 0 altsetting 159 bulk endpoint 0x1 has invalid maxpacket 0 [ 294.194756][ T5] usb 1-1: config 1 interface 0 altsetting 159 bulk endpoint 0x82 has invalid maxpacket 32 [ 294.204877][ T5] usb 1-1: config 1 interface 0 has no altsetting 0 [ 294.364285][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 294.373354][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.382587][ T5] usb 1-1: Product: syz [ 294.387156][ T5] usb 1-1: Manufacturer: syz [ 294.393338][ T5] usb 1-1: SerialNumber: syz [ 294.424625][ T8636] raw-gadget gadget: fail, usb_ep_enable returned -22 13:12:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 13:12:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x5421, 0xffffffffffffffff) 13:12:41 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1268, 0xffffffffffffffff) 13:12:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1262) 13:12:41 executing program 1: sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:41 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8901, &(0x7f0000000040)) [ 294.686716][ T5] usb 1-1: USB disconnect, device number 5 13:12:41 executing program 1: sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:41 executing program 5: io_setup(0xfff, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:12:41 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8940, &(0x7f0000000040)) 13:12:41 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1268, 0xffffffffffffffff) 13:12:41 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) 13:12:41 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='/proc/self/net/pfkey\x00', 0xae800, 0x0) 13:12:41 executing program 1: sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:41 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1268, 0xffffffffffffffff) 13:12:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1274, 0xffffffffffffffff) 13:12:42 executing program 2: sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0xc, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) 13:12:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1269) 13:12:42 executing program 5: setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0xffffff11) 13:12:42 executing program 1: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:42 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) 13:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 13:12:42 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 13:12:42 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000000)=@name={0x2}, 0x10, 0x0}, 0x0) 13:12:42 executing program 1: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:42 executing program 3: socket(0x2c, 0x3, 0x10000) 13:12:42 executing program 0: add_key(&(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000100)="424a816869c3441d74a5cf62", 0xc, 0xfffffffffffffffc) 13:12:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4020940d) 13:12:42 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) 13:12:42 executing program 1: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="03", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:42 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_val]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xa3, &(0x7f0000000300)=""/174, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f00000002c0)={0x2}, 0x10}, 0x81) 13:12:42 executing program 3: getresuid(&(0x7f00000002c0), 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000040)) 13:12:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x125d) 13:12:42 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) 13:12:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}}, 0x0) 13:12:42 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 13:12:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x127b) 13:12:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) 13:12:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 13:12:42 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x894c, 0x0) 13:12:42 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') 13:12:42 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:12:42 executing program 3: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 13:12:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003b40)={'wg1\x00'}) [ 295.968680][ T8782] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? 13:12:43 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0xe0000, 0x0) 13:12:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1608, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x300}], 0x1) 13:12:43 executing program 3: memfd_create(&(0x7f00000000c0)='(\x00\xa6/\f\xcc,\x95\x13\x10\xc2\xf8B\a\aAi\\n\x99W\xa4\x8e[\xe2DS\x03|0^\xf4i\xadM\xf8\x81\xd3\x91\xd2\x8c@\xa4^\xef\x18\x05\xc6\xd6\x18\xd8\x7f\xe0\xb5\x1c!\x06\xd51\xca\x80p\xeb\x88/\xaai\xef\xeb\x89\xfd0\x8c)\x026H\xb7G\a\xacS\xcc]\f\xd0 p\xb5\xd7IREVzK\xdd\xc2\xa5\b\xcb<\xf0\xd1\x98\xce\x9c\xe7\xec\xea\xc7\x04\xd7~#\x8b59P\x87\xfa', 0x2) 13:12:43 executing program 2: 13:12:43 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:12:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000180)={'netpci0\x00', @ifru_data=0x0}) 13:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'veth0_to_hsr\x00', @ifru_data=0x0}) 13:12:43 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) 13:12:43 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13:12:43 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:12:43 executing program 5: socketpair(0x2, 0x0, 0xdbc7, &(0x7f00000000c0)) 13:12:43 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 13:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, 0x0}, 0x0) 13:12:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={0x0}}, 0x0) 13:12:43 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @private}, 0x10) 13:12:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x2c, 0x0, 0x0, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}}, 0x0) 13:12:43 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:12:43 executing program 3: io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) 13:12:43 executing program 4: syz_genetlink_get_family_id$wireguard(0x0) 13:12:44 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) 13:12:44 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) 13:12:44 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @private}, 0x10) 13:12:44 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0)='wireguard\x00') 13:12:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 13:12:44 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0xe0000, 0x0) 13:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_data=0x0}) 13:12:44 executing program 0: 13:12:44 executing program 4: 13:12:44 executing program 5: 13:12:44 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @private}, 0x10) 13:12:44 executing program 3: 13:12:45 executing program 4: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) clock_gettime(0x0, &(0x7f00000042c0)) 13:12:45 executing program 1: 13:12:45 executing program 2: 13:12:45 executing program 0: 13:12:45 executing program 3: 13:12:45 executing program 5: 13:12:45 executing program 5: 13:12:45 executing program 1: 13:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x0) 13:12:45 executing program 0: 13:12:45 executing program 4: 13:12:45 executing program 2: 13:12:45 executing program 0: 13:12:45 executing program 1: 13:12:45 executing program 5: 13:12:45 executing program 3: 13:12:45 executing program 4: 13:12:45 executing program 2: 13:12:45 executing program 0: 13:12:45 executing program 1: 13:12:45 executing program 3: 13:12:45 executing program 4: 13:12:45 executing program 5: 13:12:45 executing program 2: 13:12:45 executing program 0: 13:12:45 executing program 1: 13:12:45 executing program 3: 13:12:45 executing program 4: 13:12:45 executing program 5: 13:12:45 executing program 2: 13:12:45 executing program 0: 13:12:46 executing program 1: 13:12:46 executing program 3: 13:12:46 executing program 4: 13:12:46 executing program 5: 13:12:46 executing program 2: 13:12:46 executing program 0: 13:12:46 executing program 1: 13:12:46 executing program 3: 13:12:46 executing program 5: 13:12:46 executing program 4: 13:12:46 executing program 0: 13:12:46 executing program 2: 13:12:46 executing program 1: 13:12:46 executing program 3: 13:12:46 executing program 5: 13:12:46 executing program 4: 13:12:46 executing program 0: 13:12:46 executing program 2: 13:12:46 executing program 1: 13:12:46 executing program 3: 13:12:46 executing program 5: 13:12:46 executing program 4: 13:12:46 executing program 2: 13:12:46 executing program 0: 13:12:46 executing program 3: 13:12:46 executing program 1: 13:12:46 executing program 4: 13:12:46 executing program 5: 13:12:46 executing program 2: 13:12:46 executing program 0: 13:12:46 executing program 3: 13:12:46 executing program 4: 13:12:47 executing program 1: 13:12:47 executing program 2: 13:12:47 executing program 5: 13:12:47 executing program 0: 13:12:47 executing program 3: 13:12:47 executing program 4: 13:12:47 executing program 2: 13:12:47 executing program 1: 13:12:47 executing program 5: 13:12:47 executing program 0: 13:12:47 executing program 3: 13:12:47 executing program 4: 13:12:47 executing program 5: 13:12:47 executing program 2: 13:12:47 executing program 0: 13:12:47 executing program 1: 13:12:47 executing program 3: 13:12:47 executing program 5: 13:12:47 executing program 4: 13:12:47 executing program 2: 13:12:47 executing program 0: 13:12:47 executing program 1: 13:12:47 executing program 3: 13:12:47 executing program 2: 13:12:47 executing program 5: 13:12:47 executing program 4: 13:12:47 executing program 0: 13:12:47 executing program 3: 13:12:47 executing program 1: 13:12:47 executing program 2: 13:12:47 executing program 5: 13:12:48 executing program 4: 13:12:48 executing program 0: 13:12:48 executing program 1: 13:12:48 executing program 3: 13:12:48 executing program 2: 13:12:48 executing program 5: 13:12:48 executing program 4: 13:12:48 executing program 0: 13:12:48 executing program 1: 13:12:48 executing program 3: 13:12:48 executing program 2: 13:12:48 executing program 4: 13:12:48 executing program 5: 13:12:48 executing program 0: 13:12:48 executing program 1: 13:12:48 executing program 3: 13:12:48 executing program 5: 13:12:48 executing program 2: 13:12:48 executing program 4: 13:12:48 executing program 0: 13:12:48 executing program 3: 13:12:48 executing program 1: 13:12:48 executing program 2: 13:12:48 executing program 5: 13:12:48 executing program 4: 13:12:48 executing program 0: 13:12:48 executing program 3: 13:12:48 executing program 1: 13:12:48 executing program 4: 13:12:48 executing program 2: 13:12:49 executing program 5: 13:12:49 executing program 0: 13:12:49 executing program 1: 13:12:49 executing program 3: 13:12:49 executing program 4: 13:12:49 executing program 2: 13:12:49 executing program 5: 13:12:49 executing program 0: 13:12:49 executing program 1: 13:12:49 executing program 3: 13:12:49 executing program 4: 13:12:49 executing program 5: 13:12:49 executing program 2: 13:12:49 executing program 0: 13:12:49 executing program 1: 13:12:49 executing program 3: 13:12:49 executing program 4: 13:12:49 executing program 5: 13:12:49 executing program 2: 13:12:49 executing program 0: 13:12:49 executing program 1: 13:12:49 executing program 3: 13:12:49 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x6011, 0xffffffffffffffff, 0x0) 13:12:49 executing program 2: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:12:49 executing program 5: write(0xffffffffffffffff, &(0x7f0000000180), 0x0) 13:12:49 executing program 0: lstat(&(0x7f0000000180)='./file0\x00', 0x0) 13:12:49 executing program 3: 13:12:49 executing program 1: 13:12:49 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, 0x0, 0x5f) 13:12:49 executing program 2: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000380)={0x7}, 0xfffffeb8) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0x14) 13:12:49 executing program 5: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000380)={0x7}, 0xfffffeb8) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14}, 0x14) 13:12:49 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RWSTAT(r0, &(0x7f0000000380)={0x7}, 0xfffffeb8) write$P9_ROPEN(r0, &(0x7f0000000000)={0x18}, 0x18) 13:12:50 executing program 3: pipe2$9p(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, &(0x7f0000001e00), 0x0) 13:12:50 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, 0x0, 0x3b) 13:12:50 executing program 4: poll(0x0, 0x0, 0xfffffffb) 13:12:50 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0) 13:12:50 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000900)='./file\x00') 13:12:50 executing program 1: setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) 13:12:50 executing program 0: semget$private(0x0, 0x3, 0x92) 13:12:50 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0) 13:12:50 executing program 1: socket$inet6(0x18, 0x3, 0x20) 13:12:50 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000140)="02", 0x1}, {0x0}], 0x3, 0x0, 0x0) 13:12:50 executing program 0: select(0x40, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x6}, 0x0) 13:12:50 executing program 3: socket$inet6(0x18, 0x3, 0x9) 13:12:50 executing program 1: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000080)) 13:12:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, 0x0, 0x0) 13:12:51 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 13:12:51 executing program 0: select(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x3}) 13:12:51 executing program 3: select(0x40, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={0x5}, 0x0, 0x0) 13:12:51 executing program 1: madvise(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1) 13:12:51 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x0) 13:12:51 executing program 2: nanosleep(&(0x7f0000000040)={0x0, 0xfffffffffffffffa}, 0x0) 13:12:51 executing program 3: 13:12:51 executing program 5: 13:12:51 executing program 1: 13:12:51 executing program 2: 13:12:51 executing program 4: 13:12:51 executing program 3: 13:12:51 executing program 5: 13:12:52 executing program 0: 13:12:52 executing program 1: 13:12:52 executing program 3: 13:12:52 executing program 2: 13:12:52 executing program 5: 13:12:52 executing program 4: 13:12:52 executing program 1: 13:12:52 executing program 2: 13:12:52 executing program 3: 13:12:52 executing program 5: 13:12:52 executing program 4: 13:12:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045878, 0x0) 13:12:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x2}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:12:52 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) 13:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff91) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="2e42dec866ba4200b89ab106c7ef3666400f6fb47600000000f30f1eff460f1683000000800f00d766bad00466b8070066efc4a1fe2dc16741239924090000b9650b0000b800000080ba000000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:12:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000130000002a000280294193b8f9bbc4bd9f4fd5"], 0x38}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:12:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$isdn_base(0x22, 0x3, 0x0) 13:12:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x40}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000000008, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 305.623936][ T9153] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:12:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) 13:12:52 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000100)=0x28) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000280)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b9345d03f008deb9800000c00f3235000400000f300202f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:12:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local, 0xfffffffd}], 0x1c) [ 305.853278][ T9155] ------------[ cut here ]------------ [ 305.870182][ T9155] WARNING: CPU: 1 PID: 9155 at arch/x86/kvm/vmx/vmx.c:4809 handle_exception_nmi+0x10e1/0x12d0 [ 305.919054][ T9155] Modules linked in: [ 305.935430][ T9155] CPU: 1 PID: 9155 Comm: syz-executor.5 Not tainted 5.9.0-rc7-next-20201002-syzkaller #0 13:12:52 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 305.961795][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.975015][ T9155] RIP: 0010:handle_exception_nmi+0x10e1/0x12d0 [ 305.985204][ T9155] Code: 0f 84 16 f3 ff ff e8 0e 4c 59 00 48 89 ef c7 85 ac 0e 00 00 00 00 00 00 e8 6c 9c f0 ff 41 89 c4 e9 fd f2 ff ff e8 ef 4b 59 00 <0f> 0b e9 85 f8 ff ff e8 e3 4b 59 00 be f5 ff ff ff bf 01 00 00 00 [ 306.005709][ T9155] RSP: 0018:ffffc90005747b58 EFLAGS: 00010216 [ 306.013710][ T9155] RAX: 000000000000abd2 RBX: 0000000000000000 RCX: ffffc90013650000 [ 306.024776][ T9155] RDX: 0000000000040000 RSI: ffffffff811bfb01 RDI: 0000000000000001 [ 306.049235][ T9155] RBP: ffff888043ad8040 R08: 0000000000000001 R09: ffff888043ad8387 13:12:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x40}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000000008, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 306.063915][ T9155] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 306.081597][ T9155] R13: 00000000c706b19a R14: ffff888043ad8380 R15: 0000000000000000 [ 306.109869][ T9155] FS: 00007fdc9b41f700(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 13:12:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)) [ 306.157125][ T9155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.195273][ T9155] CR2: 0000001b31e22000 CR3: 00000000a688a000 CR4: 00000000001526e0 [ 306.212221][ T9155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 306.220916][ T9155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.229471][ T9155] Call Trace: [ 306.253947][ T9155] ? vmx_skip_emulated_instruction+0x250/0x250 [ 306.286827][ T9155] vmx_handle_exit+0x2a6/0x1510 [ 306.306263][ T9155] vcpu_enter_guest+0x18f4/0x3b20 [ 306.320914][ T9155] ? kvm_vcpu_reload_apic_access_page+0x80/0x80 [ 306.335369][ T9155] ? lock_release+0x890/0x890 [ 306.355207][ T9155] ? handle_emulation_failure+0x560/0x560 [ 306.372340][ T9155] ? mark_held_locks+0x9f/0xe0 [ 306.387517][ T9155] ? kvm_load_guest_fpu+0xa1/0x390 [ 306.398790][ T9155] ? kvm_arch_vcpu_ioctl_run+0x440/0x1780 [ 306.418943][ T9155] kvm_arch_vcpu_ioctl_run+0x440/0x1780 [ 306.427864][ T9155] kvm_vcpu_ioctl+0x467/0xd90 [ 306.433411][ T9155] ? kvm_gfn_to_hva_cache_init+0x1a0/0x1a0 [ 306.439452][ T9155] ? generic_block_fiemap+0x60/0x60 [ 306.445330][ T9155] ? lapic_next_event+0x4d/0x80 [ 306.450398][ T9155] ? __fget_files+0x294/0x400 [ 306.457853][ T9155] ? bpf_lsm_file_ioctl+0x5/0x10 [ 306.463674][ T9155] ? kvm_gfn_to_hva_cache_init+0x1a0/0x1a0 [ 306.469686][ T9155] __x64_sys_ioctl+0x193/0x200 [ 306.476303][ T9155] do_syscall_64+0x2d/0x70 [ 306.481006][ T9155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 306.489535][ T9155] RIP: 0033:0x45de89 [ 306.501863][ T9155] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.533725][ T9155] RSP: 002b:00007fdc9b41ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.542292][ T9155] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de89 [ 306.558839][ T9155] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 306.568810][ T9155] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 306.579130][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 306.587688][ T9155] R13: 00007ffe74f628bf R14: 00007fdc9b41f9c0 R15: 000000000118bf2c [ 306.601718][ T9155] Kernel panic - not syncing: panic_on_warn set ... [ 306.608355][ T9155] CPU: 1 PID: 9155 Comm: syz-executor.5 Not tainted 5.9.0-rc7-next-20201002-syzkaller #0 [ 306.618167][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.631099][ T9155] Call Trace: [ 306.634457][ T9155] dump_stack+0x198/0x1fb [ 306.638857][ T9155] panic+0x382/0x7fb [ 306.642776][ T9155] ? __warn_printk+0xf3/0xf3 [ 306.647392][ T9155] ? __warn.cold+0x1d/0xbb [ 306.651829][ T9155] ? handle_exception_nmi+0x10e1/0x12d0 [ 306.657388][ T9155] __warn.cold+0x38/0xbb [ 306.661645][ T9155] ? handle_exception_nmi+0x10e1/0x12d0 [ 306.667286][ T9155] report_bug+0x1bd/0x210 [ 306.671637][ T9155] handle_bug+0x38/0x90 [ 306.675801][ T9155] exc_invalid_op+0x14/0x40 [ 306.680317][ T9155] asm_exc_invalid_op+0x12/0x20 [ 306.685185][ T9155] RIP: 0010:handle_exception_nmi+0x10e1/0x12d0 [ 306.691353][ T9155] Code: 0f 84 16 f3 ff ff e8 0e 4c 59 00 48 89 ef c7 85 ac 0e 00 00 00 00 00 00 e8 6c 9c f0 ff 41 89 c4 e9 fd f2 ff ff e8 ef 4b 59 00 <0f> 0b e9 85 f8 ff ff e8 e3 4b 59 00 be f5 ff ff ff bf 01 00 00 00 [ 306.710975][ T9155] RSP: 0018:ffffc90005747b58 EFLAGS: 00010216 [ 306.717060][ T9155] RAX: 000000000000abd2 RBX: 0000000000000000 RCX: ffffc90013650000 [ 306.725073][ T9155] RDX: 0000000000040000 RSI: ffffffff811bfb01 RDI: 0000000000000001 [ 306.733055][ T9155] RBP: ffff888043ad8040 R08: 0000000000000001 R09: ffff888043ad8387 [ 306.741037][ T9155] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 306.749022][ T9155] R13: 00000000c706b19a R14: ffff888043ad8380 R15: 0000000000000000 [ 306.757038][ T9155] ? handle_exception_nmi+0x10e1/0x12d0 [ 306.762612][ T9155] ? handle_exception_nmi+0x10e1/0x12d0 [ 306.768184][ T9155] ? vmx_skip_emulated_instruction+0x250/0x250 [ 306.774354][ T9155] vmx_handle_exit+0x2a6/0x1510 [ 306.779230][ T9155] vcpu_enter_guest+0x18f4/0x3b20 [ 306.784281][ T9155] ? kvm_vcpu_reload_apic_access_page+0x80/0x80 [ 306.790533][ T9155] ? lock_release+0x890/0x890 [ 306.795226][ T9155] ? handle_emulation_failure+0x560/0x560 [ 306.800955][ T9155] ? mark_held_locks+0x9f/0xe0 [ 306.805736][ T9155] ? kvm_load_guest_fpu+0xa1/0x390 [ 306.810876][ T9155] ? kvm_arch_vcpu_ioctl_run+0x440/0x1780 [ 306.816607][ T9155] kvm_arch_vcpu_ioctl_run+0x440/0x1780 [ 306.822177][ T9155] kvm_vcpu_ioctl+0x467/0xd90 [ 306.826868][ T9155] ? kvm_gfn_to_hva_cache_init+0x1a0/0x1a0 [ 306.832686][ T9155] ? generic_block_fiemap+0x60/0x60 [ 306.837897][ T9155] ? lapic_next_event+0x4d/0x80 [ 306.842780][ T9155] ? __fget_files+0x294/0x400 [ 306.847499][ T9155] ? bpf_lsm_file_ioctl+0x5/0x10 [ 306.852451][ T9155] ? kvm_gfn_to_hva_cache_init+0x1a0/0x1a0 [ 306.858271][ T9155] __x64_sys_ioctl+0x193/0x200 [ 306.863048][ T9155] do_syscall_64+0x2d/0x70 [ 306.867487][ T9155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 306.873384][ T9155] RIP: 0033:0x45de89 [ 306.877286][ T9155] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.896904][ T9155] RSP: 002b:00007fdc9b41ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.905341][ T9155] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de89 [ 306.913327][ T9155] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 306.921310][ T9155] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 306.929294][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 306.937306][ T9155] R13: 00007ffe74f628bf R14: 00007fdc9b41f9c0 R15: 000000000118bf2c [ 306.946855][ T9155] Kernel Offset: disabled [ 306.951336][ T9155] Rebooting in 86400 seconds..