last executing test programs: 3.561648571s ago: executing program 4 (id=169): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) tee(r0, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) 3.113484824s ago: executing program 4 (id=174): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x5, 0xa, 0x3, 0x100}, 0x50) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf250000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.112593054s ago: executing program 2 (id=175): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_complete(r1, 0x0) 2.929469693s ago: executing program 4 (id=177): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 2.869505297s ago: executing program 2 (id=178): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = syz_open_procfs(r2, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000140)='1', 0x1}], 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/210) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4, r6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) timer_delete(r5) 2.869330727s ago: executing program 4 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.650593447s ago: executing program 3 (id=180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_open_dev$radio(&(0x7f0000000240), 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) 2.60010997s ago: executing program 3 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 2.551959382s ago: executing program 4 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000400)="aaa5e0ec2d5ba1f0cda2", 0xa}], 0x1}, 0x2000c014) 2.339653313s ago: executing program 4 (id=185): io_setup(0x5, &(0x7f0000000140)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x4000, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x21000006, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x400c004) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r7 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440)=r6, 0x1) 1.740201063s ago: executing program 0 (id=189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3) unshare(0x24020400) fcntl$dupfd(r0, 0x0, r0) 1.59850359s ago: executing program 3 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x80000001, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff0, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x1}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xa6, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x8003, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0xfff, 0x101, 0x5, 0xfffffc01, 0x800}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0x0, 0x2}, {0x8, 0x7, 0x8, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x9, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x2, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0x7}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x4, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x4, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x1ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x80000001, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x6, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x7, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0x6, 0x80000000, 0x2, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0xe, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x9, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x4, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x7, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.59828835s ago: executing program 0 (id=191): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_open_dev$radio(&(0x7f0000000240), 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) 1.420270319s ago: executing program 1 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.306835184s ago: executing program 0 (id=194): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)={0x0, 0xf}, 0x0, 0x0}) 1.19309559s ago: executing program 3 (id=195): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=@reiserfs_5={0x14, 0x5, {0x0, 0x30000, 0x203, 0x80010002}}, &(0x7f0000001080), 0x1600) 1.108911895s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000400)="aaa5e0ec2d5ba1f0cda2", 0xa}], 0x1}, 0x2000c014) 862.281117ms ago: executing program 1 (id=197): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 708.394184ms ago: executing program 2 (id=198): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) read$FUSE(r0, 0x0, 0x0) socket(0xa, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 610.86699ms ago: executing program 0 (id=199): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x5, 0xa, 0x3, 0x100}, 0x50) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf25000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 571.136451ms ago: executing program 1 (id=200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 503.628715ms ago: executing program 2 (id=201): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 374.822391ms ago: executing program 2 (id=202): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/175, 0xaf}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) 356.784912ms ago: executing program 0 (id=203): r0 = syz_open_dev$video(&(0x7f0000000340), 0x0, 0x2000) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000380)={0x3, 0x1, [0x3, 0x0, 0x9, 0x6, 0x2, 0x9, 0x0, 0x7]}) 347.548633ms ago: executing program 1 (id=204): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x6, 0xa, 0x80, "04d41cad0e91be64a6b79abcffed8ff4cfb5ae6d6071d0f633aee636a0e045e3", 0x32314142}) 214.882319ms ago: executing program 3 (id=205): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000002c0)="eeb6d450b67a2db600", 0x9, 0x0, 0x0, 0x0) 176.261971ms ago: executing program 0 (id=206): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000080)=0x9, 0x8, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0205648, &(0x7f0000000080)={0x800f6b9, 0x0, 0x4, 0x4, 0xa3b, {0x77359400}, {0x3, 0x8, 0x0, 0x9d, 0x0, 0x4, "3acfa8ee"}, 0x40}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@allocspi={0xf4, 0x16, 0x1, 0x70bd2b, 0x25dfdc02, {{{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x3, 0xa, 0xa0, 0x20, 0x67}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x33}, @in=@multicast2, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0x6, 0x6}, {0x10001, 0x4, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a"], 0x38}}, 0x40408c0) sendmmsg$inet6(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x15b}], 0x1}}], 0x1, 0x4000001) r7 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x9ab, 0xc000, 0x3, 0x2c0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2021, 0x4, @thr={0x0, 0x0}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) read$FUSE(r7, &(0x7f00000082c0)={0x2020}, 0x2020) accept4(r1, 0x0, 0x0, 0x800) 133.519593ms ago: executing program 3 (id=207): ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x4) ptrace$pokeuser(0x6, 0x0, 0x105, 0x67000000) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x24008000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000906033e31442b0000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700060000000c000180080001400a0101010c00028008000140200000000c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 38.817588ms ago: executing program 1 (id=208): symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)) r1 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) socket(0x22, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x480) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x2) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000200)={0x2, "90f5ae8b4ffd6190910a11805984d3c9f144d744c7bf982eb50900294657715900"}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) prctl$PR_SET_NAME(0x4, 0x0) syz_clone3(0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) 0s ago: executing program 2 (id=209): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0xfb396f7cefe7849e) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x0, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 336.646521][ T4212] cgroup: Unknown subsys name 'net' [ 336.795971][ T4212] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 338.349684][ T4212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 339.821217][ T4230] chnl_net:caif_netlink_parms(): no params data found [ 339.906820][ T4236] chnl_net:caif_netlink_parms(): no params data found [ 339.951814][ T4226] chnl_net:caif_netlink_parms(): no params data found [ 340.005708][ T4233] chnl_net:caif_netlink_parms(): no params data found [ 340.037938][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.045913][ T4230] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.054686][ T4230] device bridge_slave_0 entered promiscuous mode [ 340.087732][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.095477][ T4230] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.104112][ T4230] device bridge_slave_1 entered promiscuous mode [ 340.121201][ T4238] chnl_net:caif_netlink_parms(): no params data found [ 340.162991][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.170731][ T4236] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.178935][ T4236] device bridge_slave_0 entered promiscuous mode [ 340.213050][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.220571][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.228554][ T4236] device bridge_slave_1 entered promiscuous mode [ 340.237641][ T4230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.256876][ T4230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.292986][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.300444][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.308782][ T4226] device bridge_slave_0 entered promiscuous mode [ 340.337566][ T4236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.357626][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.366056][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.374769][ T4226] device bridge_slave_1 entered promiscuous mode [ 340.390857][ T4236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.416462][ T4230] team0: Port device team_slave_0 added [ 340.443606][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.452849][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.461291][ T4233] device bridge_slave_0 entered promiscuous mode [ 340.477547][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.485538][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.495258][ T4233] device bridge_slave_1 entered promiscuous mode [ 340.504442][ T4230] team0: Port device team_slave_1 added [ 340.522968][ T4226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.532906][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.540573][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.549275][ T4238] device bridge_slave_0 entered promiscuous mode [ 340.559746][ T4236] team0: Port device team_slave_0 added [ 340.586912][ T4230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.594451][ T4230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.622789][ T4230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.636433][ T4226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.646271][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.653838][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.661843][ T4238] device bridge_slave_1 entered promiscuous mode [ 340.670956][ T4236] team0: Port device team_slave_1 added [ 340.687006][ T4233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.697086][ T4230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.706918][ T4230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.735878][ T4230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.775172][ T4233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.805721][ T4238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.816035][ T4236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.824339][ T4236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.852226][ T4236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.883256][ T4226] team0: Port device team_slave_0 added [ 340.893475][ T4226] team0: Port device team_slave_1 added [ 340.902345][ T4238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.913711][ T4236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.921423][ T4236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.952237][ T4236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.974428][ T4233] team0: Port device team_slave_0 added [ 341.006475][ T4233] team0: Port device team_slave_1 added [ 341.037313][ T4238] team0: Port device team_slave_0 added [ 341.047298][ T4230] device hsr_slave_0 entered promiscuous mode [ 341.055157][ T4230] device hsr_slave_1 entered promiscuous mode [ 341.082411][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.090310][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.117813][ T4226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.132134][ T4238] team0: Port device team_slave_1 added [ 341.139953][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.147718][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.175092][ T4226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.187114][ T4233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.194943][ T4233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.223310][ T4233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.260146][ T4236] device hsr_slave_0 entered promiscuous mode [ 341.267582][ T4236] device hsr_slave_1 entered promiscuous mode [ 341.274699][ T4236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.283048][ T4236] Cannot create hsr debugfs directory [ 341.293802][ T4233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.302039][ T4233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.328739][ T4233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.355402][ T4238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.363174][ T4238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.391412][ T4238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.405566][ T4238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.412773][ T4238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.440637][ T4238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.510193][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 341.510193][ T4241] Bluetooth: hci0: command 0x0409 tx timeout [ 341.510751][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 341.560903][ T4233] device hsr_slave_0 entered promiscuous mode [ 341.567676][ T4233] device hsr_slave_1 entered promiscuous mode [ 341.574796][ T4233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.583182][ T4233] Cannot create hsr debugfs directory [ 341.592319][ T4226] device hsr_slave_0 entered promiscuous mode [ 341.599437][ T4241] Bluetooth: hci4: command 0x0409 tx timeout [ 341.606552][ T4241] Bluetooth: hci3: command 0x0409 tx timeout [ 341.606801][ T4226] device hsr_slave_1 entered promiscuous mode [ 341.621183][ T4226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.630398][ T4226] Cannot create hsr debugfs directory [ 341.644009][ T4238] device hsr_slave_0 entered promiscuous mode [ 341.651706][ T4238] device hsr_slave_1 entered promiscuous mode [ 341.658833][ T4238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.666835][ T4238] Cannot create hsr debugfs directory [ 342.006036][ T4230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.025373][ T4230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.040380][ T4230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.050992][ T4230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.087351][ T4236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.098850][ T4236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.124844][ T4236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.135600][ T4236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.203343][ T4233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.214002][ T4233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.225395][ T4233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.248731][ T4233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.311653][ T4238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.340659][ T4238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.361141][ T4238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.373098][ T4238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.390863][ T4230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.446906][ T4236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.456844][ T4226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.468745][ T4226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.484849][ T4226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.503922][ T4226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.526067][ T4230] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.535863][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.546496][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.576198][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.587147][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.597132][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.605835][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.617254][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.627787][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.636178][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.646739][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.656172][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.663966][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.674502][ T4236] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.700569][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.708738][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.732633][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.745740][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.757698][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.767927][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.775460][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.800591][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.810354][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.820795][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.861804][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.872382][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.882345][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.892454][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.900077][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.910014][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.920629][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.930260][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.939612][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.954148][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.963497][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.973604][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.991709][ T4233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.011443][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.021276][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.034110][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.044886][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.054504][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.065791][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.076230][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.101823][ T4236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.113387][ T4236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.144802][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.156478][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.166407][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.176585][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.186376][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.204925][ T4238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.229092][ T4233] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.247711][ T4226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.258688][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.268073][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.287389][ T4238] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.317430][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.329165][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.338918][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.351007][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.362325][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.369842][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.385308][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.395924][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.406552][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.414651][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.424474][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.436161][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.460607][ T4226] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.485571][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.499089][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.512866][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.527239][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.537223][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.554534][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.562232][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.573165][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.586075][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.596992][ T4215] Bluetooth: hci2: command 0x041b tx timeout [ 343.600133][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.620183][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 343.627699][ T4215] Bluetooth: hci1: command 0x041b tx timeout [ 343.628582][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.671124][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 343.678897][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 343.694478][ T4236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.704882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.715989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.728258][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.737278][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.748445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.764233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.775424][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.787371][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.798524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.813655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.827127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.837420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.846835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.862288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.874850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.885960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.915446][ T4233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.929902][ T4233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.958672][ T4230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.981277][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.000206][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.010807][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.021986][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.031705][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.041991][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.051091][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.060404][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.071502][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.081494][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.092064][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.101222][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.111205][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.120598][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.158667][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.167720][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.186938][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.203948][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.223353][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.243161][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.257816][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.268692][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.279075][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.290447][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.300553][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.311306][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.321949][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.335265][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.357521][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.395863][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.412406][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.428939][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.445325][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.455529][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.465505][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.476126][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.496883][ T4233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.535103][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.562939][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.592876][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.614903][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.654706][ T4230] device veth0_vlan entered promiscuous mode [ 344.676440][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.691325][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.704346][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.713072][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.722978][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.742035][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.760563][ T4236] device veth0_vlan entered promiscuous mode [ 344.786967][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.814016][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.842266][ T4230] device veth1_vlan entered promiscuous mode [ 344.860213][ T4236] device veth1_vlan entered promiscuous mode [ 344.894114][ T4226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.905731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.915122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.927010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.982364][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.994561][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.005691][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.015051][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.041774][ T4230] device veth0_macvtap entered promiscuous mode [ 345.058806][ T4238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.074635][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.084371][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.095178][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.105283][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.117098][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.131384][ T4230] device veth1_macvtap entered promiscuous mode [ 345.149545][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.158012][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.167944][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.186502][ T4236] device veth0_macvtap entered promiscuous mode [ 345.204774][ T4236] device veth1_macvtap entered promiscuous mode [ 345.227306][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.252346][ T4226] device veth0_vlan entered promiscuous mode [ 345.264937][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.273895][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.284169][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.294261][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.304538][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.313935][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.323797][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.334074][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.343533][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.355085][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.375610][ T4233] device veth0_vlan entered promiscuous mode [ 345.387696][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.400693][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.411286][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.421213][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.443690][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.453414][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.463257][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.485273][ T4233] device veth1_vlan entered promiscuous mode [ 345.500575][ T4230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.512949][ T4230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.523488][ T4230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.533720][ T4230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.546683][ T4236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.560541][ T4236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.576741][ T4236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.587776][ T4226] device veth1_vlan entered promiscuous mode [ 345.608254][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.618438][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.630123][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.640693][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.651623][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.663099][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.672405][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 345.673140][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.680428][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 345.695802][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 345.696789][ T4236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.716996][ T4236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.732221][ T4236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.764542][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 345.772856][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.781417][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 345.787100][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.799637][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.808652][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.820391][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.832544][ T4238] device veth0_vlan entered promiscuous mode [ 345.851823][ T4236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.864461][ T4236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.874979][ T4236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.886520][ T4236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.918864][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.930838][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.944289][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.955314][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.985863][ T4238] device veth1_vlan entered promiscuous mode [ 345.998872][ T4226] device veth0_macvtap entered promiscuous mode [ 346.011129][ T4233] device veth0_macvtap entered promiscuous mode [ 346.044196][ T4226] device veth1_macvtap entered promiscuous mode [ 346.112449][ T4233] device veth1_macvtap entered promiscuous mode [ 346.204771][ T4238] device veth0_macvtap entered promiscuous mode [ 346.214228][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.214228][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.214287][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.230818][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.234887][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.249476][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.275801][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.287071][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.300576][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.318979][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.333188][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.345433][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.360050][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.374721][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.383747][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.394831][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.405201][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.414565][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.423281][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.437342][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.447878][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.462717][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.473822][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.485059][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.500290][ T4238] device veth1_macvtap entered promiscuous mode [ 346.521776][ T4233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.533268][ T4233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.544811][ T4233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.559264][ T4233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.569731][ T4233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.582523][ T4233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.595562][ T4233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.606651][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.616197][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.624754][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.638031][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.664223][ T4226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.669815][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.675534][ T4226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.694260][ T4226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.695461][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.703878][ T4226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.735192][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.747380][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.759027][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.770212][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.782427][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.794272][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.805896][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.817697][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.830194][ T4238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.841054][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.851158][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.862384][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.875571][ T4233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.887803][ T4233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.899153][ T4233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.910414][ T4233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.920957][ T4233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.932695][ T4233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.944804][ T4233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.970029][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.984202][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.996497][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.008898][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.021133][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.033057][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.044978][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.057026][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.075585][ T4238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.095666][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.105893][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.117683][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.128869][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.143925][ T4233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.157259][ T4233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.167428][ T4233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.177477][ T4233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.200292][ T4238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.210306][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.220463][ T4238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.234578][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.237778][ T4238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.253063][ T4238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.298168][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.441221][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.462782][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.489734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.600371][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.632343][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.652562][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.724215][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.750173][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 347.761810][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 347.771850][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.788922][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 347.809643][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.828715][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.837111][ T4215] Bluetooth: hci3: command 0x0419 tx timeout [ 347.837256][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.859371][ T4215] Bluetooth: hci4: command 0x0419 tx timeout [ 347.868414][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.922070][ T4314] device syzkaller0 entered promiscuous mode [ 347.938397][ T4317] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 347.960788][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.038502][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.100217][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.130818][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.201341][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.217994][ T4322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 348.270403][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.295570][ T4323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 350.216315][ T4351] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13'. [ 350.945324][ T4363] loop9: detected capacity change from 0 to 7 [ 351.132128][ T4305] Dev loop9: unable to read RDB block 7 [ 351.142300][ T4305] loop9: AHDI p2 p3 [ 351.161961][ T4305] loop9: partition table partially beyond EOD, truncated [ 351.213884][ T4305] loop9: p2 size 1701016946 extends beyond EOD, truncated [ 351.285436][ T4363] Dev loop9: unable to read RDB block 7 [ 351.312045][ T4363] loop9: AHDI p2 p3 [ 351.337925][ T4363] loop9: partition table partially beyond EOD, truncated [ 351.398405][ T4363] loop9: p2 size 1701016946 extends beyond EOD, truncated [ 351.544546][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 351.670634][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 352.191245][ T4376] kvm: pic: non byte read [ 352.201632][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 352.222657][ T4376] kvm: pic: non byte read [ 352.227574][ T4376] kvm: pic: non byte read [ 352.257007][ T4376] kvm: pic: non byte read [ 352.269680][ T4376] kvm: pic: non byte read [ 352.298349][ T4376] kvm: pic: non byte read [ 352.324675][ T4376] kvm: pic: non byte read [ 352.367536][ T4376] kvm: pic: non byte read [ 352.402583][ T4376] kvm: pic: non byte read [ 352.422718][ T4376] kvm: pic: non byte read [ 352.549267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 352.648628][ T4392] binder: 4391:4392 ioctl c0306201 0 returned -14 [ 353.166703][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 353.269868][ T4272] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 353.295798][ T4415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.38'. [ 353.530222][ T4272] usb 2-1: Using ep0 maxpacket: 8 [ 353.809537][ T4272] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 353.819111][ T4272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.843642][ T4272] usb 2-1: Product: syz [ 353.848593][ T4272] usb 2-1: Manufacturer: syz [ 353.854493][ T4272] usb 2-1: SerialNumber: syz [ 353.881755][ T4272] usb 2-1: config 0 descriptor?? [ 353.924475][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 354.150388][ T4272] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 354.299811][ T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.324274][ T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.341668][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.349537][ T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.363756][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.439626][ T4241] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 354.669476][ T13] usb 3-1: GET_CAPABILITIES returned 0 [ 354.694579][ T13] usbtmc 3-1:16.0: can't read capabilities [ 354.749347][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 354.878656][ T13] usb 3-1: USB disconnect, device number 2 [ 354.900653][ T4241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.902644][ T4272] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 354.922360][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.987862][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.031812][ T4241] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.063151][ T4241] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.229572][ T4241] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 355.243548][ T4241] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.279583][ T4241] usb 4-1: Manufacturer: syz [ 355.312310][ T4241] usb 4-1: config 0 descriptor?? [ 355.488872][ T4447] capability: warning: `syz.4.48' uses deprecated v2 capabilities in a way that may be insecure [ 355.709494][ T4277] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 355.729451][ T4241] rc_core: IR keymap rc-hauppauge not found [ 355.735943][ T4241] Registered IR keymap rc-empty [ 355.755829][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 355.799373][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 355.871024][ T4241] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 355.901338][ T4241] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 355.946706][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.000582][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.009154][ T4277] usb 1-1: Using ep0 maxpacket: 16 [ 356.039420][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.079802][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.086749][ T13] usb 2-1: USB disconnect, device number 2 [ 356.111829][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.139567][ T4277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.170173][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.185261][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.225775][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 356.236450][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.258615][ T4277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 356.279440][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.288930][ T4277] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.329335][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.369622][ T4241] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.400210][ T4274] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 356.421381][ T4241] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 356.431869][ T4277] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 356.448157][ T4277] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 356.458382][ T4241] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 356.471347][ T4277] usb 1-1: Manufacturer: syz [ 356.512477][ T4241] usb 4-1: USB disconnect, device number 2 [ 356.525596][ T4277] usb 1-1: config 0 descriptor?? [ 356.821878][ T4274] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 356.978006][ T4479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.59'. [ 357.030273][ T4274] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.043079][ T4277] rc_core: IR keymap rc-hauppauge not found [ 357.058533][ T4277] Registered IR keymap rc-empty [ 357.084207][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.093666][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.119382][ T4274] usb 3-1: Product: syz [ 357.138505][ T4274] usb 3-1: Manufacturer: syz [ 357.151500][ T4482] loop9: detected capacity change from 0 to 7 [ 357.153232][ T4274] usb 3-1: SerialNumber: syz [ 357.163803][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.194812][ T4482] Dev loop9: unable to read RDB block 7 [ 357.202106][ T4274] usb 3-1: config 0 descriptor?? [ 357.209553][ T4482] loop9: unable to read partition table [ 357.210087][ T4277] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 357.247376][ T4482] loop9: partition table beyond EOD, truncated [ 357.273806][ T4277] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 357.288756][ T4482] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.299491][ T4460] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 357.345291][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.399797][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.469550][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.502696][ T4274] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 357.529523][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.579501][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.619599][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.642034][ T4305] udevd[4305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.705887][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.749599][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.789842][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.867634][ T4277] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 357.887504][ T4506] device syzkaller0 entered promiscuous mode [ 357.943118][ T4277] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 357.949326][ T4272] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 357.954845][ T4277] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 358.089290][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 358.239293][ T4272] usb 5-1: Using ep0 maxpacket: 8 [ 358.312270][ T4513] input: syz0 as /devices/virtual/input/input7 [ 358.339444][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 358.459714][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.471766][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.483656][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 358.495300][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 358.507265][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.540251][ T4272] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 358.550733][ T4272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.560055][ T4272] usb 5-1: Product: syz [ 358.564670][ T4272] usb 5-1: Manufacturer: syz [ 358.577001][ T4272] usb 5-1: SerialNumber: syz [ 358.592917][ T4272] usb 5-1: config 0 descriptor?? [ 358.599709][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 358.617543][ T13] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.641710][ T13] usb 4-1: Manufacturer: syz [ 358.666514][ T13] usb 4-1: config 0 descriptor?? [ 358.815049][ T4519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.70'. [ 358.879727][ T4272] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.059005][ T4274] usb 3-1: USB disconnect, device number 3 [ 359.059345][ T13] rc_core: IR keymap rc-hauppauge not found [ 359.103804][ T13] Registered IR keymap rc-empty [ 359.147357][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.209369][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.269938][ T13] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 359.323799][ T13] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input8 [ 359.421616][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.489399][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.589388][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.619501][ T4272] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 359.629345][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.659362][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.690224][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.727984][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.764018][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.794040][ T4538] device syzkaller0 entered promiscuous mode [ 359.799351][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.839359][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.849343][ T1325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 359.891305][ T13] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 359.909645][ T13] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 359.961345][ T13] usb 4-1: USB disconnect, device number 3 [ 360.103030][ T4546] netlink: 48 bytes leftover after parsing attributes in process `syz.3.81'. [ 360.112873][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 360.229567][ T1325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.279314][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.339306][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 360.399270][ T1325] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 360.429092][ T1325] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.569635][ T1325] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.588172][ T1325] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 360.607359][ T1325] usb 2-1: Manufacturer: syz [ 360.648928][ T1325] usb 2-1: config 0 descriptor?? [ 360.796248][ T4307] usb 5-1: USB disconnect, device number 2 [ 360.840252][ T4564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.89'. [ 360.958775][ T4567] device syzkaller0 entered promiscuous mode [ 361.021046][ T4570] device syzkaller0 entered promiscuous mode [ 361.089450][ T1325] rc_core: IR keymap rc-hauppauge not found [ 361.099791][ T1325] Registered IR keymap rc-empty [ 361.137287][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.179416][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.221237][ T1325] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 361.238660][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.293168][ T1325] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input9 [ 361.366476][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.442121][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.456257][ T4580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.93'. [ 361.489606][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.529386][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.589379][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.629450][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.671695][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.739352][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.829555][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.910561][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.960538][ T1325] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 362.019390][ T1325] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 362.032314][ T4596] udc-core: couldn't find an available UDC or it's busy [ 362.059285][ T4596] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 362.135547][ T4599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.101'. [ 362.337123][ T4603] device syzkaller0 entered promiscuous mode [ 362.404057][ T4613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.106'. [ 362.506268][ T4614] device syzkaller0 entered promiscuous mode [ 363.038026][ T4632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.114'. [ 363.039293][ T1325] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 363.243369][ T4639] device syzkaller0 entered promiscuous mode [ 363.299306][ T1325] usb 4-1: Using ep0 maxpacket: 16 [ 363.405432][ T4649] udc-core: couldn't find an available UDC or it's busy [ 363.415556][ T4649] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 363.429606][ T1325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.459919][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.486702][ T4647] device syzkaller0 entered promiscuous mode [ 363.494437][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 363.510995][ T4653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.124'. [ 363.522396][ T1325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 363.551338][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.659358][ T1325] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 363.672038][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 363.682282][ T1325] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 363.698399][ T1325] usb 4-1: Manufacturer: syz [ 363.715014][ T1325] usb 4-1: config 0 descriptor?? [ 363.784591][ T4662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.127'. [ 363.845050][ T4664] udc-core: couldn't find an available UDC or it's busy [ 363.854812][ T4664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 364.059532][ T1325] rc_core: IR keymap rc-hauppauge not found [ 364.066462][ T1325] Registered IR keymap rc-empty [ 364.072185][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.109356][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.142382][ T1325] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 364.175588][ T1325] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input10 [ 364.205463][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.239466][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.269301][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.299348][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.339399][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.369394][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.417949][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.471787][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.509456][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.546319][ T1325] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.601421][ T1325] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 364.638979][ T1325] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 364.811240][ T4682] device syzkaller0 entered promiscuous mode [ 365.148339][ T4691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.138'. [ 365.177603][ T4689] device syzkaller0 entered promiscuous mode [ 365.404129][ T4697] device gretap1 entered promiscuous mode [ 365.417302][ T4697] batman_adv: batadv0: Adding interface: gretap1 [ 365.424881][ T4697] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.453825][ T4697] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 365.549303][ T4277] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 365.790152][ T4712] udc-core: couldn't find an available UDC or it's busy [ 365.805753][ T4712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 365.819333][ T4277] usb 5-1: Using ep0 maxpacket: 8 [ 365.876723][ T4714] device syzkaller0 entered promiscuous mode [ 366.077720][ T4719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.150'. [ 366.120400][ T4277] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 366.138762][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.165233][ T4277] usb 5-1: Product: syz [ 366.177487][ T4277] usb 5-1: Manufacturer: syz [ 366.190737][ T4277] usb 5-1: SerialNumber: syz [ 366.207996][ T4277] usb 5-1: config 0 descriptor?? [ 366.268021][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 366.495866][ T4277] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 366.659910][ T4740] fuse: Unknown parameter 'fd0000000000000000000000000000000000000000' [ 367.047997][ T4748] device syzkaller0 entered promiscuous mode [ 367.219763][ T4277] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 367.467443][ T4753] device syzkaller0 entered promiscuous mode [ 367.796756][ T4757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.161'. [ 367.818035][ T4760] udc-core: couldn't find an available UDC or it's busy [ 367.830658][ T4761] udc-core: couldn't find an available UDC or it's busy [ 367.858570][ T4761] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 367.862580][ T4760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 368.178169][ T4769] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 368.187932][ T4769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 368.307920][ T4274] usb 5-1: USB disconnect, device number 3 [ 368.375054][ T4773] device syzkaller0 entered promiscuous mode [ 368.691428][ T4782] device syzkaller0 entered promiscuous mode [ 369.008670][ T4791] device syzkaller0 entered promiscuous mode [ 369.085170][ T4800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.174'. [ 369.140494][ T4806] udc-core: couldn't find an available UDC or it's busy [ 369.175636][ T4806] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 369.273774][ T4795] device bridge1 entered promiscuous mode [ 369.289803][ T4795] team0: Port device bridge1 added [ 369.299914][ T4801] bridge0: port 3(team0) entered blocking state [ 369.307790][ T4801] bridge0: port 3(team0) entered disabled state [ 369.316394][ T4801] device team0 entered promiscuous mode [ 369.322695][ T4801] device team_slave_0 entered promiscuous mode [ 369.333609][ T4801] device team_slave_1 entered promiscuous mode [ 369.341703][ T4801] bridge0: port 3(team0) entered blocking state [ 369.348827][ T4801] bridge0: port 3(team0) entered forwarding state [ 369.363355][ T4810] device syzkaller0 entered promiscuous mode [ 369.447706][ T4815] binder: BINDER_SET_CONTEXT_MGR already set [ 369.456283][ T4815] binder: 4814:4815 ioctl 4018620d 200000004a80 returned -16 [ 369.539321][ T1325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 369.617364][ T4821] device syzkaller0 entered promiscuous mode [ 369.779438][ T1325] usb 3-1: Using ep0 maxpacket: 16 [ 369.899401][ T1325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.921994][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.934540][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.949969][ T1325] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 369.967116][ T1325] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.079491][ T1325] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.102106][ T1325] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.123603][ T1325] usb 3-1: Manufacturer: syz [ 370.138279][ T1325] usb 3-1: config 0 descriptor?? [ 370.296154][ T4834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 370.561956][ T4843] binder: BINDER_SET_CONTEXT_MGR already set [ 370.579947][ T1325] rc_core: IR keymap rc-hauppauge not found [ 370.586904][ T1325] Registered IR keymap rc-empty [ 370.599521][ T4843] binder: 4841:4843 ioctl 4018620d 200000004a80 returned -16 [ 370.619526][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.646654][ T4844] device syzkaller0 entered promiscuous mode [ 370.658225][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.715327][ T1325] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc3 [ 370.749154][ T1325] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc3/input11 [ 370.769606][ T4851] udc-core: couldn't find an available UDC or it's busy [ 370.791190][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.798875][ T4854] Zero length message leads to an empty skb [ 370.798900][ T4851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 370.842369][ T4854] device syzkaller0 entered promiscuous mode [ 370.850437][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.889540][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.949552][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.999362][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.039517][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.077328][ T4860] device syzkaller0 entered promiscuous mode [ 371.079397][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.140270][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.169474][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.199585][ T1325] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.272512][ T1325] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 371.301925][ T1325] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 371.544592][ T4867] netlink: 36 bytes leftover after parsing attributes in process `syz.0.199'. [ 372.090185][ T4885] ------------[ cut here ]------------ [ 372.096119][ T4885] WARNING: CPU: 0 PID: 4885 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 372.148210][ T4885] Modules linked in: [ 372.168048][ T4885] CPU: 0 PID: 4885 Comm: syz.0.206 Not tainted syzkaller #0 [ 372.184912][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.204515][ T4885] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 372.214611][ T4885] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 04 24 8a 8d 80 e1 07 80 c1 03 38 c1 [ 372.221220][ T4893] udc-core: couldn't find an available UDC or it's busy [ 372.242599][ T4885] RSP: 0018:ffffc9000322fb50 EFLAGS: 00010287 [ 372.249126][ T4885] RAX: ffffffff81b98c07 RBX: 0000200000000000 RCX: 0000000000080000 [ 372.264782][ T4885] RDX: ffffc90003c93000 RSI: 00000000000000f9 RDI: 00000000000000fa [ 372.274347][ T4885] RBP: 0000000000000000 R08: ffff888064e9e2bf R09: 1ffff1100c9d3c57 [ 372.287197][ T4885] R10: dffffc0000000000 R11: ffffed100c9d3c58 R12: ffff88806025dd00 [ 372.303424][ T4893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.317605][ T4885] R13: dffffc0000000000 R14: ffff88806025dc60 R15: ffff888078fbf840 [ 372.337840][ T4885] FS: 00007f47592566c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 372.395972][ T4885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.423093][ T4885] CR2: 000000110c2c08bb CR3: 000000005dec6000 CR4: 00000000003506e0 [ 372.434421][ T4885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.454842][ T4885] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 372.478901][ T4885] Call Trace: [ 372.482925][ T4885] [ 372.486528][ T4885] __vma_adjust+0x2b6/0x1c10 [ 372.491768][ T4885] ? memset+0x1e/0x40 [ 372.497165][ T4885] __split_vma+0x34b/0x410 [ 372.502602][ T4885] mbind_range+0x593/0x990 [ 372.507437][ T4885] __se_sys_mbind+0x51c/0x770 [ 372.515038][ T4885] ? __x64_sys_mbind+0xf0/0xf0 [ 372.520738][ T4885] ? lock_chain_count+0x20/0x20 [ 372.526449][ T4885] ? __x64_sys_mbind+0x1d/0xf0 [ 372.532420][ T4885] do_syscall_64+0x4c/0xa0 [ 372.537582][ T4885] ? clear_bhb_loop+0x30/0x80 [ 372.543659][ T4885] ? clear_bhb_loop+0x30/0x80 [ 372.548538][ T4885] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.562701][ T4885] RIP: 0033:0x7f475affcdd9 [ 372.570731][ T4885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.592876][ T4885] RSP: 002b:00007f4759256028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 372.607175][ T4885] RAX: ffffffffffffffda RBX: 00007f475b275fa0 RCX: 00007f475affcdd9 [ 372.617625][ T4885] RDX: 0000000000008001 RSI: 0000000000600000 RDI: 0000200000000000 [ 372.632639][ T4885] RBP: 00007f475b092d69 R08: 0000000000000008 R09: 0000000000000000 [ 372.643851][ T4885] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 372.657294][ T4885] R13: 00007f475b276038 R14: 00007f475b275fa0 R15: 00007ffc27b4be48 [ 372.668683][ T4885] [ 372.676216][ T4885] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 372.684092][ T4885] CPU: 1 PID: 4885 Comm: syz.0.206 Not tainted syzkaller #0 [ 372.691607][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.702562][ T4885] Call Trace: [ 372.705963][ T4885] [ 372.709005][ T4885] dump_stack_lvl+0x188/0x250 [ 372.713734][ T4885] ? show_regs_print_info+0x20/0x20 [ 372.719083][ T4885] ? load_image+0x400/0x400 [ 372.723631][ T4885] panic+0x2e5/0x810 [ 372.727866][ T4885] ? bpf_jit_dump+0xd0/0xd0 [ 372.732417][ T4885] ? hugetlb_split+0x237/0x2a0 [ 372.737512][ T4885] __warn+0x248/0x2b0 [ 372.741874][ T4885] ? hugetlb_split+0x237/0x2a0 [ 372.747108][ T4885] report_bug+0x1b7/0x2e0 [ 372.751664][ T4885] handle_bug+0x3a/0x70 [ 372.756192][ T4885] exc_invalid_op+0x16/0x40 [ 372.760884][ T4885] asm_exc_invalid_op+0x16/0x20 [ 372.766077][ T4885] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 372.771556][ T4885] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 04 24 8a 8d 80 e1 07 80 c1 03 38 c1 [ 372.791796][ T4885] RSP: 0018:ffffc9000322fb50 EFLAGS: 00010287 [ 372.798574][ T4885] RAX: ffffffff81b98c07 RBX: 0000200000000000 RCX: 0000000000080000 [ 372.807254][ T4885] RDX: ffffc90003c93000 RSI: 00000000000000f9 RDI: 00000000000000fa [ 372.816170][ T4885] RBP: 0000000000000000 R08: ffff888064e9e2bf R09: 1ffff1100c9d3c57 [ 372.824943][ T4885] R10: dffffc0000000000 R11: ffffed100c9d3c58 R12: ffff88806025dd00 [ 372.833368][ T4885] R13: dffffc0000000000 R14: ffff88806025dc60 R15: ffff888078fbf840 [ 372.841747][ T4885] ? hugetlb_split+0x237/0x2a0 [ 372.846871][ T4885] __vma_adjust+0x2b6/0x1c10 [ 372.851769][ T4885] ? memset+0x1e/0x40 [ 372.855803][ T4885] __split_vma+0x34b/0x410 [ 372.860665][ T4885] mbind_range+0x593/0x990 [ 372.865370][ T4885] __se_sys_mbind+0x51c/0x770 [ 372.870068][ T4885] ? __x64_sys_mbind+0xf0/0xf0 [ 372.875172][ T4885] ? lock_chain_count+0x20/0x20 [ 372.880405][ T4885] ? __x64_sys_mbind+0x1d/0xf0 [ 372.885372][ T4885] do_syscall_64+0x4c/0xa0 [ 372.889904][ T4885] ? clear_bhb_loop+0x30/0x80 [ 372.895480][ T4885] ? clear_bhb_loop+0x30/0x80 [ 372.900456][ T4885] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.906587][ T4885] RIP: 0033:0x7f475affcdd9 [ 372.912890][ T4885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.934239][ T4885] RSP: 002b:00007f4759256028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 372.942926][ T4885] RAX: ffffffffffffffda RBX: 00007f475b275fa0 RCX: 00007f475affcdd9 [ 372.951262][ T4885] RDX: 0000000000008001 RSI: 0000000000600000 RDI: 0000200000000000 [ 372.959906][ T4885] RBP: 00007f475b092d69 R08: 0000000000000008 R09: 0000000000000000 [ 372.968190][ T4885] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 372.976352][ T4885] R13: 00007f475b276038 R14: 00007f475b275fa0 R15: 00007ffc27b4be48 [ 372.984706][ T4885] [ 372.987936][ T4885] Kernel Offset: disabled [ 372.992596][ T4885] Rebooting in 86400 seconds..