last executing test programs: 8.555318332s ago: executing program 4 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010200000000000000000a0000040900020073797a31f5ffffff08000a40fffffffc0900010073797a3100000000080005400000000b"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.378810625s ago: executing program 4 (id=174): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001180)=""/4081, 0xff1}, {0x0}], 0x2) 5.1710197s ago: executing program 1 (id=190): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000880) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.702622009s ago: executing program 4 (id=192): get_mempolicy(0x0, &(0x7f0000003340), 0x8e09, &(0x7f0000ffe000/0x2000)=nil, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000340), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, r4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r3, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', r6, 0x1, 0x10, 0x5, 0xe, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x66, 0x0, 0xb5, 0x29, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x10, 0x72, 0x0, 0x1, [0xaf, 0xdc9, 0xfb]}]}}}}}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001600), 0x40040, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)={0x14, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa390d4260751288a8440081"], 0x0) 4.018711531s ago: executing program 4 (id=194): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0xffffffff, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000", @ANYRESDEC=r1], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x0) 3.538730309s ago: executing program 4 (id=195): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x2e, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.209365664s ago: executing program 2 (id=196): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7c}, 0x1c, 0x0, 0x0, &(0x7f0000000180)}, 0x24004800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.093185527s ago: executing program 1 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c5}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) unshare(0x24020400) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb6", 0xd3, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) connect$qrtr(r3, &(0x7f0000004d80)={0x2a, 0xffffffffffffffff, 0x3ffe}, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x6f70, 0xb}}) 2.87476347s ago: executing program 1 (id=198): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 2.695977714s ago: executing program 3 (id=200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 2.670665464s ago: executing program 2 (id=201): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.624447464s ago: executing program 1 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2.544922456s ago: executing program 2 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x24}}, 0x0) 2.430594748s ago: executing program 2 (id=204): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c22, 0x2, 0x4, 0x17f}, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, 0x0, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000280)={0x3, {0xfffffff7, 0x2, 0x1, 0x6}, {0x5, 0x4, 0x0, 0x9}, {0x5, 0xa}}) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002943, &(0x7f0000000540)={0x0, 0x0, 0x10, 0x0, 0xfffffffe}, &(0x7f00000002c0), &(0x7f00000014c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x1, 0x49433553, 0x2, 0xa, [{0x2, 0x6}, {0x0, 0x2}, {0xf, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0x400000b}, {0xa, 0x80000006}, {0x80005, 0x1}], 0xc, 0x2, 0x3, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r4 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0x8000f36f, 0x200, 0x0, 0x27}, &(0x7f0000000100)=0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 1.774646109s ago: executing program 1 (id=209): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x5f}, 0x20004001) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000000c0)=0x80, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) 1.630675292s ago: executing program 1 (id=210): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) unshare(0x2040400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) io_uring_enter(r3, 0x47f6, 0x40, 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 1.611922972s ago: executing program 0 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.295785577s ago: executing program 0 (id=212): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.046741732s ago: executing program 3 (id=213): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 883.892785ms ago: executing program 0 (id=214): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 852.227166ms ago: executing program 3 (id=215): unshare(0x26020480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x1, 0x0, &(0x7f0000002180)) 778.758907ms ago: executing program 2 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7c}, 0x1c, 0x0, 0x0, &(0x7f0000000180)}, 0x24004800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 690.886858ms ago: executing program 3 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000c0003006e6574646e7673696d3000000000000014000000110001"], 0xa4}}, 0x0) 654.735639ms ago: executing program 0 (id=218): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES8=r0], 0x54}}, 0x0) 426.599513ms ago: executing program 3 (id=219): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) rmdir(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socketpair(0x18, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)=0xfffffff7) 420.485723ms ago: executing program 4 (id=220): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 372.714434ms ago: executing program 0 (id=221): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xae37, 0x3000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 99.582969ms ago: executing program 2 (id=222): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) syz_usb_ep_write(r3, 0x80, 0x0, 0x0) syz_usb_disconnect(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90000cf47d16331aef6ee13ff7f266e13da7be839b35e9ae1a333f2d8fd8e1983903166f4d8f3d5e043b8eb3a4dd0a04b39df97c82009b793cd734558a268aac6cea0ca6aa40899810bc164d8ad6b2ce23bf4b88d9b72991218c6c68e9a992582d217f639c8ad76405b511163edb9ca95e8123830003ab82fc86a517ac2aff77866914ebb9aca4a6e530d80f19ee31eeb1e5b8139b72264f8fceb54ee9980e771c5f11155b69e12e65e6a3699d1b80648dd949081f1a612b7b5950f41554c9b832f7cf9efa4987bd88887917199318d28808204e7638ca5932c066d2a662e600ac0a8f27b86c066f2bceabd1b3af66c12fefa311c5afe0821a14432925187a05476e0a972e85f26a24832c357d70d354ade966e6963234e4956658ac9ece3780485fcb3decb69a029ffbeda1c7b27bb020f4137624286d8a2d22221028b3efd3433e7fd3ba291446947a274a748f45bb347fa49e295cfa305f5dd46b662afde61cfee33ea823d23f46a662146886c6e3c30e660d765f46dcc14914b3e342e44436410fedeb6594f37ac94cd336dea463e0541daadbe70b5b925741db16240afc85f391539569ac14e5dccb9ca5790c33f8a6cdd7abc1cb762972634968ecb9f1dff8b6b6cd6f5f56db31c24ac5b2b1bed2efea1f4e67f686a8abfa41f297a165b9fcb4800230ed07af34727fe6c2cc6daf796cc38e8f03ee4fb786a92fabfbded442086d657dec598edb21ba428d4bb28ac974c38218bcf08ad3b4f6698ae05855769dbe5693eac83a223b76a5f452195795d3d485e5c0a18caf2315c3a21acb4bb661082b1c4fccfff8f0c52c353dedd3b9e575b800cfec557e43527228abf820e16411b45c77e99f308dcc5dcd1c3b8ddb828e6481c1fc6275c3e1ed4a1f0fe6d97db39cb3ad5b08400cc990ed5797e23fcd81ee76eed1caaf2ec709c18b014dfcfac7eb658f1c07a894dca1d8e23ebbc18c7b0acefacd915235a54637d13965681a6a527325d13b4a88a21505860873038bc6ca68e25bed80496e65b53a4817e7dba3cbe31eebb770ab04202486634b7210500238707cd664735c07e539e8ccb09ec82d7fad69c4f31113b4a01089a81d4a1787d69957a2dfcf371f0c357eba5a587f0d09d64588f3fade99726d786085b513e720fd1d889104e1d98bf4fe23d6bd8c408c44fc702880e6c53a733aaafec836a80b9e69d1432225dda63a755bde5103fbba7af46f81b3b0c3457d49e187c7fa53e9410d4ff7dd1c9a954d549b49197f350e8451e850279ba4690a4ff3fa4f91ebfa4dda7d2a60257d70c09ad6520387baf2cd734bf1f993565f7ccf80f29b1414e595de79ec03faf7afbeff3daf0034aeecfe41640366ae3c1d1b9437cb7580b9a94fe71a5ffe7be4f959cc5972e1672c5f5c5d252a63804d1a292aac2582b78ac73ea143095bc1283b210c66ecc5b5b9be4d6649920118d51429328f8a983a89f8f5d6ec383c89f07e91e0726ed40776d72d7499652a84f9d0bb086e9479a6d703907ee17345ed763ae817751515c744d428ac51fb10eba495f9a477809a4c1b447a94a3f6d1a092b109478ca36c3da494552d34f30d74a32958c53ec091e32ca8aaf5c814881d4bb3add2b07f362e9e4ea17b3f8b6e7310fcbea4ea6f2d9f5505b011011b75eb4dbf2455f665027abe2bb73dd37dff9c6aab6e9454bbd7bb887aef12f19f446bcbf257ada0e5144f708ccf350f07b861b813eb4cdab02d74b660d960c737f553f84b2d027da58f02345704583717199f693c913bfc2704cfde1b31270c43f17d51c82b672796fd6e1d09e34659d7e5fd9a1a69dcdde367c074b47beeb88f374740a64d9e9a99f4fabdbfca311174da518f868704e3fe259e6069330b04d2d3804a3428d2e04a483599f5ff47ff8c877601fcae33999575180fb540ff00c55728d0ee8eb6550658c7cbc8be4f87b50a9650a33aa164c6bae4044dfc080cf43a1c80e8a8132f973faefcf2ee23f9c2f3119fa93c0e5875832d4f8b6c2a1c347d480f15ead27ba7fb6e2ba9f2204982023b15b0f9df44ce9bba765c9598810593dd32a520ba72a5bfc375f36f4ea4a55017b1494c392568ef6828c18a1f2cec1442f705687695e42f62734ac2c1b0fed399ccf29b20fccd476afc72217182a73c970029c7679dffaebfc2ab9e8d18f5e757ccde87ac69b2bb0243b2e86d225dd2edad4919977bde1806bd6305eff22f2d63646c3a856a002aaea40d96e4811fe0cf5ad942e087c55551fdccc65835686320aa635ec50872f1c30cd8a732515b4dbfa132f905205f4b2ec64d1b9a9101ee2c3d0a110e40fd40d2c0b19f9a77b43f0b14e283ad1038de31cb21c2857d278933fd4bf106a7a93e16b28d71dfa73fa0695c77c0b1236e4cc7f17837be252d1011edf8ba626315e416b2963e96172b3294ec1f087672b0fc404edb79ca9b8e7a46f69b7a6f8b0488ec6c10f937632cc29bdb6f2c0ca86b978db6ca3cb9aa9b5f253fb5ba52e5b3738468236bd3ed26da1158e14881860f37f586b3b004ff7233a7427ece1c1365bb273aa1ce801c6d61b35a247c38917df23b9f12f7e764dabf9af18885e447a952de7796c3dd27e77325be816eb82ae9026ef5a855ddfb9aaf4a0bfc153f079c95337d2ee3c2ac36e5b4e8c5da765bf5d11edcf01ef11a3748d7ca0b1fd6f8882fbfd3423bd429c8592ec28a98bba845e7fe829ae2b11f5215ce819bf777ab45d73e9afe3cc76840b7d368161ee140efdec81ca1d5716c2ea5b255fabb5a4698864c8d427738837c45f1006cbf1f68bbedbfdf70e5b65b21b1934826c06d4d3da4f08e3ad376cec5aafb2f9eae9a06cab375ef5a44f30a563e5245077d84823b88d71912f458fe17d36e4b2a88260ad121af2e5a43a555ef61ffd242c09d5011b9be422c4c310a834f664c732930c1d329212aa9f063356c85130c965d919180e62afd193224d3792db6a069ff2bc8770bd6294a6884cbfb71301859a26b7572440ee12719e8753831bf73d353a33ea64c57df0bac0cc8938ea28370724439170824d1b55d415eed14f620d3a28bb5009edd12e9322df3573bbd9b0d0ff2cbd2e48c0c297f63c100116097c48c8f4cf0a7c4fb5156723fcb615236b6db175442b2db90c3e426cca9de56f55effdbb981c75c99a8dd084a619882fb216b000cb99eae616f0b5d7a8a2cc675cbd3e0a61b6f602250b040ae57f998471095563334e165f35139ec22aabf8ada15b890e2cf038a4f40d129760e39b166f58cfb4bfee7d4455ce06ad098745e0edac9434e4c61f889cbe6d7cf74da35f1b6d2b4455abf954223d1638ff808508228a3060d390e9ce539d2dcb032ae5d6c5abcd4df4bfb63f9851e45bb961cca2150eb386abd67dab2a12c096aa8df742e41ff7718f9dd77099d9bc87a2a46d8d6ffb903b23b429747c9acb21c0e88067eb6c7fa2507ef0673e6b65a15767cfa4ef9b52adbce41ea3461f77b0e705a2d5cbcf3841bd22414f3ef2402a915705a18113d370d35619fdbbfb4fe6e1581a8520525e863d931aaaed58d06d093905b0d83dd1345f4b8213954102abf8048be627d437f267d4a0a6e6f181891562b61be55f1e646120cfe17d8d2961ad86d1575856fff39791b90ccc6895495cc0f3a1e2604f5b729aec7452b133b9c822bbc74df480670f34cf0335d42b5ad6a7009c49050d97ef8c09eff8716dbb9ce5a5d67ffad2541860017bfe982c0e48390f987f470c7b600fb29be4d3a74251d85ef1cf1fe3b5a146bb9f6fee2369cba1f2be75782b14a422b0820fa00c1250f4d437f24914a94a8564fa079fe803b39c528707dd2906120d53020000b725596b68553f1653aad2fdd23114e4a7ca3402fcdf0b060323a683a03109ffbec9627c803da8a55665e156a335528f113eb730bb28c0480daf8f2b65483d0f3805e1c512b680d8698e63a80b45aa8c7e12ad0f0e072eefc806fde42455bc4d157e402a86218896d5638f8fdadb1fbffaf4fe92f526475612980f0c5a539a9cec3c63e4efa5b893611af45c8003650888dc5b958a18848cffe11e0636f40e3ade10da702b71a69e6941e506ec3f0297349867949246310909ff445005f68910308df1e44f7ef04efbcb6ade53086aeb80b0ca96b94c9e6353c77bc1ce575edd6a1ab76e000d2ca0bc80c09d76d2bf25d90c93d5fcf6c123a9e83a3354b798356aeb2e99721732d52b1ec6c84d79d6f1237186260e7e63f29cfe8050a8fd44d57b52582b45e1fe027792c07ef33a0ac686606dd009ef3839e179190aca20d01db1d2263898a6953feb5d2e8093a4b4a2b18f6cb06a0251d3862672814b5165213c65174fe5dad7673186293e336348fc77a6d545cc07355c07a8b9a98c95d76fa5dc4c19181578a6dc4f2b29b647ab6a09f6756994c8e389c7c165766f154468b380e1e67cb2edbc7f67b6bfad1de690c3f472908b11d1c502ca61b5e869cd2cf8e11e39eceb9d31fca090fd5dd15e1f5a8c4de58531df3fa96d655653a5b99ea449d3865e07401ecb63fb4ac4042c893841c2b70b4a133937ac0dca8d6f442de175f138ab7cf19477c2483caf524fc443b3243d31f15f3f518b2d7964314d7d34754ae417dd9d46a83e443cef18eb673f46f34aeaba592a171bb4710002da17d9d6554208fc384de22bff7e05d2bfb821656e78bfa084be46fe6b0f04a06c6bc80afbd406a918a57d582345b260360cec7168142ef0e0da8ad70ac9703d6206c6da23558374ad8bc1e8fe5cdede25e8ad5d0d0741d85e86566b7b9172f457e36feabb881f14a04d182b6971bb1aa1c37a608ff0eeaba1b6c37c4bdb15696afb0e031ef8b214a7a72892593c910829c820f773135f3441afc90cadeb50f76d4a5bbd713c8b3dc441599dcae659b9ad417affde5d9ee3933f00ea69323fd33e0b9a12b1ee29b2e97c7b1db3fa0a900678c6490a847fdd85fa93bb134e3239638052359774bc22405a0abb698081ce1dce2dfe0c0430b641f00d230013944df65581f6b5f458165b16aad8b92b44bf28b3236cac5239c91fe2351c5f53359d072aa34ffee18ff275afdc0dc7b889da928fdd4e300a52699cb5a4fea8cc42f636b15e449daef52df3586d4b55fd047b04e96734aa2c45bcad8f05dbf3c97daefcd6bad396a6aed71849e484eb0e3526970973db9b268b71e726748aacb5c2203cde2992af74cac612d33cecba7f3e5d66e2a2e449eb00e770af4fe13be6d16877cfa46c108c29d8db1efff5356433fc627741d12605056ec78c02bf143afc9e2161c15ce65a0f8c9f13a6b7a916"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.39326ms ago: executing program 0 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x200004, 0x804, 0x4, 0xf, 0x120000, 0x83, 0xfffffffffffffffc, 0x8, 0xa000000000000001, 0x2, 0x0, 0x101, 0x6, 0x10000000000001], 0xffff1000, 0x141210}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x7, 0x72, 0x81, 0x0, 0xd8, 0x7, 0x8, 0xff, 0x78, 0xd4, 0x21, 0x5, 0x0, 0x200004, 0x8, 0x4, 0x1, 0x3, 0x0, '\x00', 0x79, 0xe}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 3 (id=224): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 58.623880][ T4173] cgroup: Unknown subsys name 'net' [ 58.746654][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.223456][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.694407][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.711878][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.779104][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.822424][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.914742][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.969541][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.977336][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.985936][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.998940][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.006088][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.014201][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.026593][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.033701][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.042180][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.050067][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.057425][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.065419][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.073515][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.080730][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.089661][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.117424][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.124539][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.132545][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.200292][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.214492][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.226022][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.236835][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.246339][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.253431][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.261828][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.270864][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.286207][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.303255][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.310504][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.318807][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.359770][ T4188] team0: Port device team_slave_0 added [ 62.398127][ T4188] team0: Port device team_slave_1 added [ 62.415340][ T4186] team0: Port device team_slave_0 added [ 62.423659][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.435650][ T4184] team0: Port device team_slave_0 added [ 62.441849][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.449182][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.457455][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.473597][ T4186] team0: Port device team_slave_1 added [ 62.489208][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.500050][ T4184] team0: Port device team_slave_1 added [ 62.512494][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.519892][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.528066][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.575082][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.582087][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.608133][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.620737][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.628042][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.654104][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.666483][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.673456][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.699476][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.718071][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.725552][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.751836][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.770194][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.777380][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.803603][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.831039][ T4187] team0: Port device team_slave_0 added [ 62.837760][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.844730][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.870949][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.891021][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.911936][ T4187] team0: Port device team_slave_1 added [ 62.939737][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.992166][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.999504][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.006968][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.013941][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.040159][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.063225][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.070515][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.077657][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.085923][ T4186] Cannot create hsr debugfs directory [ 63.099693][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.107240][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.133262][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.148328][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.156076][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.162896][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.170967][ T4184] Cannot create hsr debugfs directory [ 63.189173][ T4185] team0: Port device team_slave_0 added [ 63.227889][ T4185] team0: Port device team_slave_1 added [ 63.289963][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.297346][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.304000][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.311650][ T4187] Cannot create hsr debugfs directory [ 63.333421][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.340536][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.367855][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.367864][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 63.384963][ T4196] Bluetooth: hci4: command 0x0409 tx timeout [ 63.385950][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.392218][ T4196] Bluetooth: hci2: command 0x0409 tx timeout [ 63.399042][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.436225][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.443211][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.469592][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.642698][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.650217][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.657103][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.664674][ T4185] Cannot create hsr debugfs directory [ 63.758283][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.773263][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.782902][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.804323][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.867010][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.877292][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.888748][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.907194][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.966452][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.980956][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.990972][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.002362][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.144008][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.160400][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.185400][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.195295][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.212348][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.227797][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.242485][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.252136][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.266279][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.276672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.285689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.317923][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.333666][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.343361][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.356137][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.364188][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.375969][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.384707][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.402787][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.417273][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.437892][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.447014][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.457771][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.465093][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.474172][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.489885][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.500007][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.507266][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.516716][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.525613][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.534055][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.541177][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.551356][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.561181][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.569989][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.577135][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.585609][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.594417][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.621085][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.629905][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.638391][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.648273][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.657448][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.667489][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.676437][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.686444][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.695126][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.702205][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.710038][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.719268][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.731426][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.739932][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.748952][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.778004][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.789117][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.811368][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.820291][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.829170][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.836306][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.844384][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.853813][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.863873][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.872720][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.882825][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.891734][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.900348][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.909111][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.919148][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.947372][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.971298][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.000563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.016758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.026578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.036145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.044561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.063046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.091099][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.119548][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.163798][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.176387][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.192115][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.204064][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.213068][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.221747][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.231653][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.253626][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.267932][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.290827][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.299803][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.314795][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.324216][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.333158][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.341523][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.367569][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.383568][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.400082][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.411254][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.429381][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.436543][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 65.436578][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 65.445797][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 65.455830][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.466292][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.471466][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 65.476349][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.481253][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 65.493471][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.501714][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.511067][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.527585][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.537680][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.544773][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.552851][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.579569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.607447][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.635550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.649274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.657970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.667547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.677759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.686833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.696376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.705014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.713668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.722774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.743022][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.755882][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.787798][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.815574][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.832108][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.842980][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.851806][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.861780][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.870899][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.881340][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.888589][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.896824][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.905682][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.914021][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.922909][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.931767][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.938895][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.946817][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.954296][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.962232][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.971475][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.980079][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.988791][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.999192][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.008618][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.016698][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.024694][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.032817][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.040872][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.049623][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.074540][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.089352][ T4184] device veth0_vlan entered promiscuous mode [ 66.103509][ T4186] device veth0_vlan entered promiscuous mode [ 66.125856][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.143402][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.168522][ T4186] device veth1_vlan entered promiscuous mode [ 66.196235][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.213822][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.223621][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.235627][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.244099][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.253673][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.262347][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.272785][ T4184] device veth1_vlan entered promiscuous mode [ 66.283830][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.326101][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.356143][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.367947][ T4186] device veth0_macvtap entered promiscuous mode [ 66.402062][ T4186] device veth1_macvtap entered promiscuous mode [ 66.433787][ T4184] device veth0_macvtap entered promiscuous mode [ 66.460325][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.470780][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.479766][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.488863][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.497954][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.522032][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.532159][ T4184] device veth1_macvtap entered promiscuous mode [ 66.553530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.564035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.574801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.588208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.601162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.614247][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.638282][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.649440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.660375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.669281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.677355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.692486][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.703438][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.716653][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.736795][ T4187] device veth0_vlan entered promiscuous mode [ 66.743638][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.755825][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.767168][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.778682][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.788629][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.797779][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.806666][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.818129][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.827187][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.836575][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.845755][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.856185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.865764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.874479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.884281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.894150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.903632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.928571][ T4187] device veth1_vlan entered promiscuous mode [ 66.947442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.957028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.965488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.973792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.981750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.018653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.027770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.037048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.055879][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.078054][ T4187] device veth0_macvtap entered promiscuous mode [ 67.089131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.098640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.128618][ T4187] device veth1_macvtap entered promiscuous mode [ 67.136109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.152201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.173340][ T4188] device veth0_vlan entered promiscuous mode [ 67.204348][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.215493][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.225701][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.236442][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.248262][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.261945][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.270477][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.280562][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.291041][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.300014][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.309574][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.318375][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.327400][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.361174][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.371832][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.382125][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.392784][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.404725][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.421492][ T4188] device veth1_vlan entered promiscuous mode [ 67.451567][ T4185] device veth0_vlan entered promiscuous mode [ 67.459905][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.468497][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.477752][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.486931][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.495849][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.504316][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.512914][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.520594][ T4248] Bluetooth: hci1: command 0x040f tx timeout [ 67.527054][ T4248] Bluetooth: hci4: command 0x040f tx timeout [ 67.533155][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.542154][ T4248] Bluetooth: hci3: command 0x040f tx timeout [ 67.546540][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.548795][ T4248] Bluetooth: hci0: command 0x040f tx timeout [ 67.563454][ T4248] Bluetooth: hci2: command 0x040f tx timeout [ 67.563555][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.580499][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.611973][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.623628][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.629133][ T4185] device veth1_vlan entered promiscuous mode [ 67.652756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.661274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.670536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.698121][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.707890][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.759154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.767751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.777301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.787838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.802426][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.811111][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.820138][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.829247][ T4188] device veth0_macvtap entered promiscuous mode [ 67.844288][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.857290][ T4185] device veth0_macvtap entered promiscuous mode [ 67.869015][ T4188] device veth1_macvtap entered promiscuous mode [ 67.881050][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.893965][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.903299][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.911302][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.920067][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.930335][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.951160][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.969436][ T4185] device veth1_macvtap entered promiscuous mode [ 68.014397][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.026638][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.038709][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.049809][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.059963][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.071335][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.084818][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.097077][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.107202][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.116519][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.148952][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.164766][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.177633][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.184484][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.197056][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.204263][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.214712][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.233367][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.267514][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.277407][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.290847][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.301553][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.336458][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.347081][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.357828][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.367861][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.378925][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.390974][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.407017][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.425408][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.447729][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.456852][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.471921][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.485661][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.494526][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.510931][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.520233][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.553341][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.573163][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.584684][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.598949][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.613809][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.632486][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.643943][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.657076][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.668342][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.692195][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.723591][ T4299] IPv6: Can't replace route, no match found [ 68.735927][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.754332][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.772849][ T3073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.774678][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.793378][ T3073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.817859][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.831774][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.841660][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.887599][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.025341][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.044215][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.078690][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.099338][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.114302][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.147242][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.154569][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.178553][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.232906][ T23] usb 4-1: config 0 descriptor?? [ 69.246172][ T4309] futex_wake_op: syz.4.5 tries to shift op by 36; fix this program [ 69.258182][ T3073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.275623][ T3073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.285484][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.331216][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.367002][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.388299][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.432087][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.482990][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.492232][ T4313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.530524][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.596467][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 69.603154][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 69.622384][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 69.638949][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 69.650089][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 69.779928][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.816723][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.850693][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.871634][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.917070][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.947439][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.997611][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.025059][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.054607][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.080431][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 70.133503][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 70.223033][ T23] usb 4-1: USB disconnect, device number 2 [ 70.444445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 70.645138][ T4248] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.015113][ T4248] usb 3-1: config 0 has no interfaces? [ 71.057306][ T4334] fido_id[4334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 71.175275][ T4248] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 71.210794][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.233915][ T4248] usb 3-1: Product: syz [ 71.256575][ T4248] usb 3-1: Manufacturer: syz [ 71.278918][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.285691][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.296798][ T4248] usb 3-1: SerialNumber: syz [ 71.311875][ T4248] usb 3-1: config 0 descriptor?? [ 71.840151][ T26] audit: type=1326 audit(1753453797.432:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2018d9a9 code=0x7ffc0000 [ 71.906822][ T26] audit: type=1326 audit(1753453797.482:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2018d9a9 code=0x7ffc0000 [ 72.155945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.565373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.578677][ T4380] kvm: pic: non byte write [ 74.142480][ T4390] netlink: 'syz.0.22': attribute type 12 has an invalid length. [ 74.184374][ T2239] usb 3-1: USB disconnect, device number 2 [ 74.655153][ T4196] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.985050][ T2239] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.025407][ T4196] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.039535][ T4196] usb 2-1: config 0 has no interface number 0 [ 75.062184][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 75.083494][ T4413] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 75.203268][ T4413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.235995][ T4413] team0: Port device bond0 added [ 75.248480][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 75.259588][ T4196] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 75.275064][ T4196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.295053][ T4256] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.312871][ T4196] usb 2-1: Product: syz [ 75.320264][ T4196] usb 2-1: Manufacturer: syz [ 75.332120][ T4196] usb 2-1: SerialNumber: syz [ 75.356094][ T4196] usb 2-1: config 0 descriptor?? [ 75.385266][ T2239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.407262][ T2239] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 75.433918][ T2239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.474417][ T2239] usb 4-1: config 0 descriptor?? [ 75.527357][ T2239] pwc: Askey VC010 type 2 USB webcam detected. [ 75.535176][ T4256] usb 3-1: Using ep0 maxpacket: 8 [ 75.561756][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 75.615139][ T4196] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 75.633130][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 75.655418][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.692833][ T4196] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 75.704128][ T4256] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.714412][ T4196] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 75.717824][ T4416] team0 (unregistering): Port device bond0 removed [ 75.723780][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.742948][ T4196] usb 2-1: media controller created [ 75.765164][ T4256] usb 3-1: config 0 descriptor?? [ 75.788731][ T4196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.945356][ T4196] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 75.975326][ T2239] pwc: recv_control_msg error -32 req 02 val 2b00 [ 76.030914][ T2239] pwc: recv_control_msg error -32 req 02 val 2700 [ 76.042486][ T4196] usb 2-1: USB disconnect, device number 2 [ 76.062445][ T4256] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 76.075337][ T2239] pwc: recv_control_msg error -32 req 02 val 2c00 [ 76.168661][ T2239] pwc: recv_control_msg error -32 req 04 val 1000 [ 76.215072][ T2239] pwc: recv_control_msg error -32 req 04 val 1300 [ 76.255183][ T2239] pwc: recv_control_msg error -32 req 04 val 1400 [ 76.295073][ T2239] pwc: recv_control_msg error -32 req 02 val 2000 [ 76.335079][ T2239] pwc: recv_control_msg error -32 req 02 val 2100 [ 76.375109][ T2239] pwc: recv_control_msg error -32 req 04 val 1500 [ 76.435197][ T2239] pwc: recv_control_msg error -32 req 02 val 2500 [ 76.695233][ T2239] pwc: recv_control_msg error -71 req 02 val 2600 [ 76.725252][ T2239] pwc: recv_control_msg error -71 req 02 val 2900 [ 76.755249][ T2239] pwc: recv_control_msg error -71 req 02 val 2800 [ 76.785113][ T2239] pwc: recv_control_msg error -71 req 04 val 1100 [ 76.815154][ T2239] pwc: recv_control_msg error -71 req 04 val 1200 [ 76.837789][ T2239] pwc: Registered as video103. [ 76.864303][ T2239] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 76.942500][ T2239] usb 4-1: USB disconnect, device number 3 [ 77.038528][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.505990][ T4438] syz.4.37 uses obsolete (PF_INET,SOCK_PACKET) [ 78.164207][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 78.274138][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 78.401714][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 78.509380][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.646625][ T2239] usb 3-1: USB disconnect, device number 3 [ 78.653475][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.735547][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.832227][ T4461] netlink: 'syz.0.43': attribute type 10 has an invalid length. [ 78.859613][ T4453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 78.878979][ T4453] netlink: 'syz.4.42': attribute type 4 has an invalid length. [ 78.906931][ T4453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.42'. [ 78.967491][ T4453] device geneve2 entered promiscuous mode [ 79.009130][ T4473] tipc: Started in network mode [ 79.025182][ T4473] tipc: Node identity b25e03eb2d9e, cluster identity 4711 [ 79.036230][ T4473] tipc: Enabled bearer , priority 0 [ 79.056984][ T4474] device syzkaller0 entered promiscuous mode [ 79.120253][ T4473] tipc: Resetting bearer [ 79.151950][ T4469] tipc: Resetting bearer [ 79.174073][ T4469] tipc: Disabling bearer [ 79.245023][ T4196] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.597772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.715410][ T4196] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.744057][ T4196] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 79.775578][ T4196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.809711][ T4196] usb 3-1: config 0 descriptor?? [ 79.859499][ T4196] pwc: Askey VC010 type 2 USB webcam detected. [ 79.983026][ T4504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.285106][ T4196] pwc: recv_control_msg error -32 req 02 val 2b00 [ 80.325212][ T4196] pwc: recv_control_msg error -32 req 02 val 2700 [ 80.396563][ T4196] pwc: recv_control_msg error -32 req 02 val 2c00 [ 80.466182][ T4196] pwc: recv_control_msg error -32 req 04 val 1000 [ 80.525098][ T4196] pwc: recv_control_msg error -32 req 04 val 1300 [ 80.548222][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 80.565056][ T4196] pwc: recv_control_msg error -32 req 04 val 1400 [ 80.605080][ T4196] pwc: recv_control_msg error -32 req 02 val 2000 [ 80.631738][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.656066][ T4196] pwc: recv_control_msg error -32 req 02 val 2100 [ 80.667477][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.702858][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.725461][ T4196] pwc: recv_control_msg error -32 req 04 val 1500 [ 80.785740][ T4196] pwc: recv_control_msg error -32 req 02 val 2500 [ 80.837655][ T4517] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 81.065607][ T4196] pwc: recv_control_msg error -71 req 02 val 2600 [ 81.096255][ T4196] pwc: recv_control_msg error -71 req 02 val 2900 [ 81.236301][ T4196] pwc: recv_control_msg error -71 req 02 val 2800 [ 81.305257][ T4196] pwc: recv_control_msg error -71 req 04 val 1100 [ 81.345418][ T4196] pwc: recv_control_msg error -71 req 04 val 1200 [ 81.397776][ T4196] pwc: Registered as video103. [ 81.453232][ T4196] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 81.595694][ T4196] usb 3-1: USB disconnect, device number 4 [ 82.360490][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 82.395831][ T4553] kvm [4552]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 82.461159][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.536265][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.618226][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.781266][ T4561] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 82.943737][ T4561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.004210][ T4561] team0: Port device bond0 added [ 83.050970][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 83.314778][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 83.450258][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 83.501753][ T4563] team0 (unregistering): Port device bond0 removed [ 83.779401][ T4577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.262872][ T4586] netlink: 'syz.4.79': attribute type 12 has an invalid length. [ 84.287553][ T4586] netlink: 'syz.4.79': attribute type 29 has an invalid length. [ 84.302873][ T4586] netlink: 148 bytes leftover after parsing attributes in process `syz.4.79'. [ 84.312033][ T4586] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 84.339651][ T4586] Zero length message leads to an empty skb [ 84.626758][ T4590] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.646243][ T4590] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.666169][ T4595] kvm [4592]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 85.173445][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 85.189068][ T4617] device geneve1 entered promiscuous mode [ 85.203634][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 85.519973][ T4624] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 85.621455][ T4624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.636690][ T4624] team0: Port device bond0 added [ 85.665319][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 85.701939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 85.800714][ T4626] team0 (unregistering): Port device team_slave_0 removed [ 85.843072][ T4626] team0 (unregistering): Port device team_slave_1 removed [ 85.884436][ T4626] team0 (unregistering): Port device bond0 removed [ 86.236794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.638526][ T13] cfg80211: failed to load regulatory.db [ 86.716273][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 87.009852][ T4649] kvm [4648]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 87.105051][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.475197][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.501505][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.558192][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.589078][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.642074][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.676516][ T13] usb 3-1: config 0 descriptor?? [ 87.954868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 88.157500][ T13] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 88.241536][ T13] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.322411][ T4670] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 88.394065][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.419948][ T4670] team0: Port device bond0 added [ 88.461895][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 88.506498][ T4248] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.578839][ T4674] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 88.585738][ T4674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.659427][ T4674] vhci_hcd vhci_hcd.0: Device attached [ 88.665894][ T4672] team0 (unregistering): Port device team_slave_0 removed [ 88.704564][ T4672] team0 (unregistering): Port device team_slave_1 removed [ 88.749374][ T4672] team0 (unregistering): Port device bond0 removed [ 88.905233][ T4248] usb 4-1: config 0 has no interfaces? [ 88.925140][ T13] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 89.065789][ T4248] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 89.087714][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.109978][ T4248] usb 4-1: Product: syz [ 89.121361][ T4248] usb 4-1: Manufacturer: syz [ 89.130250][ T4248] usb 4-1: SerialNumber: syz [ 89.161795][ T4248] usb 4-1: config 0 descriptor?? [ 89.603426][ T4675] vhci_hcd: connection reset by peer [ 89.611525][ T4291] vhci_hcd: stop threads [ 89.627571][ T4291] vhci_hcd: release socket [ 89.661673][ T4291] vhci_hcd: disconnect device [ 89.681044][ T4664] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.784835][ T4256] usb 4-1: USB disconnect, device number 4 [ 90.303896][ T4664] syz.3.108 (4664) used greatest stack depth: 21120 bytes left [ 90.322971][ T4196] usb 3-1: USB disconnect, device number 5 [ 90.754418][ T4713] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 90.787683][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 91.765463][ T2239] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 92.165258][ T2239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.219470][ T4757] loop4: detected capacity change from 0 to 1 [ 92.226689][ T2239] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 92.297476][ T2239] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.310757][ T4757] Dev loop4: unable to read RDB block 1 [ 92.316898][ T4757] loop4: unable to read partition table [ 92.322873][ T4757] loop4: partition table beyond EOD, truncated [ 92.331832][ T4757] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 92.556494][ T2239] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 92.601115][ T2239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 92.641529][ T2239] usb 2-1: Product: syz [ 92.664009][ T4772] netlink: 'syz.3.137': attribute type 10 has an invalid length. [ 92.664065][ T2239] usb 2-1: Manufacturer: syz [ 92.719672][ T2239] usb 2-1: SerialNumber: syz [ 92.741391][ T2239] usb 2-1: config 0 descriptor?? [ 92.782033][ T4772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.793499][ T2239] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 92.817308][ T2239] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 92.835019][ T4772] team0: Port device bond0 added [ 92.839038][ T2239] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 92.880896][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 93.061414][ T4774] team0 (unregistering): Port device team_slave_0 removed [ 93.109256][ T4774] team0 (unregistering): Port device team_slave_1 removed [ 93.149404][ T4774] team0 (unregistering): Port device bond0 removed [ 93.448860][ T4785] capability: warning: `syz.2.140' uses deprecated v2 capabilities in a way that may be insecure [ 94.075100][ T13] vhci_hcd: vhci_device speed not set [ 94.254866][ T4196] usb 2-1: USB disconnect, device number 3 [ 94.318150][ T4816] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.306638][ T4856] netlink: 'syz.4.156': attribute type 10 has an invalid length. [ 95.338386][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 95.792622][ T4869] process 'syz.3.162' launched './file1' with NULL argv: empty string added [ 95.900358][ T4869] Cannot find add_set index 0 as target [ 96.196153][ T4878] netlink: 996 bytes leftover after parsing attributes in process `syz.3.164'. [ 96.725024][ T4256] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.945281][ T4256] usb 4-1: device descriptor read/64, error -71 [ 97.170500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 97.257800][ T4256] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.375033][ T4261] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.454997][ T4256] usb 4-1: device descriptor read/64, error -71 [ 97.576031][ T4256] usb usb4-port1: attempt power cycle [ 97.669837][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 97.788539][ T4913] netlink: 'syz.0.176': attribute type 10 has an invalid length. [ 97.807931][ T4261] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.822397][ T4261] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.859571][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 97.869408][ T4261] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.885654][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.905198][ T4261] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.926897][ T4261] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.975119][ T4261] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.985745][ T4256] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.014052][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.034328][ T4261] usb 5-1: config 0 descriptor?? [ 98.095249][ T4256] usb 4-1: device descriptor read/8, error -71 [ 98.328069][ T4261] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.375254][ T4256] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.407739][ T4261] usb 5-1: USB disconnect, device number 2 [ 98.482547][ T4261] usblp0: removed [ 98.495364][ T4256] usb 4-1: device descriptor read/8, error -71 [ 98.636353][ T4256] usb usb4-port1: unable to enumerate USB device [ 98.875176][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.125507][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 99.248290][ T4261] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.279277][ T4261] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.324253][ T4261] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.368577][ T4933] input: syz1 as /devices/virtual/input/input7 [ 99.383045][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.407441][ T4261] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.478862][ T4261] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.519539][ T4934] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 99.555054][ T4261] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.616825][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.657001][ T4261] usb 5-1: config 0 descriptor?? [ 99.720421][ T4942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'. [ 99.791619][ T4946] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 99.824432][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 99.938721][ T4261] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.159313][ T2239] usb 5-1: USB disconnect, device number 3 [ 100.194252][ T2239] usblp0: removed [ 102.265084][ T4256] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.485186][ T4256] usb 5-1: device descriptor read/64, error -71 [ 102.755179][ T4256] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.928352][ T5000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 102.965148][ T4256] usb 5-1: device descriptor read/64, error -71 [ 103.015351][ T5005] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 103.061991][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 103.085222][ T4256] usb usb5-port1: attempt power cycle [ 103.245328][ T5013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'. [ 103.285377][ T5013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.205'. [ 103.495022][ T4256] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.595266][ T4256] usb 5-1: device descriptor read/8, error -71 [ 103.875167][ T4256] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.995205][ T4256] usb 5-1: device descriptor read/8, error -71 [ 104.128621][ T4256] usb usb5-port1: unable to enumerate USB device [ 104.893900][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 104.963548][ T5052] device gretap0 entered promiscuous mode [ 105.150436][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.220'. [ 105.170117][ T26] audit: type=1326 audit(1753453830.762:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 105.253955][ T5056] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 105.295638][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 105.300053][ T26] audit: type=1326 audit(1753453830.792:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 105.452674][ T26] audit: type=1326 audit(1753453830.792:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 105.545977][ T26] audit: type=1326 audit(1753453830.792:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 105.607754][ T5072] ------------[ cut here ]------------ [ 105.615697][ T5072] WARNING: CPU: 0 PID: 5072 at arch/x86/kvm/x86.c:10351 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 105.653590][ T5072] Modules linked in: [ 105.680746][ T5072] CPU: 0 PID: 5072 Comm: syz.0.223 Not tainted 5.15.189-syzkaller #0 [ 105.715539][ T26] audit: type=1326 audit(1753453830.812:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 105.758083][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.803013][ T5072] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 105.824015][ T5072] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 105.872690][ T26] audit: type=1326 audit(1753453830.812:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 105.895685][ T5072] RSP: 0018:ffffc9000152fc30 EFLAGS: 00010283 [ 105.901816][ T5072] RAX: ffffffff810eefd4 RBX: ffff88805cbe8000 RCX: 0000000000080000 [ 105.931685][ T5072] RDX: ffffc90004ee9000 RSI: 000000000000041f RDI: 0000000000000420 [ 105.955893][ T26] audit: type=1326 audit(1753453830.812:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 106.015068][ T5072] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 106.031902][ T5072] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff8880752c8001 [ 106.103269][ T5072] R13: 1ffff1100b97d01e R14: ffff88805cbe80f0 R15: ffff8880752c8000 [ 106.113913][ T26] audit: type=1326 audit(1753453830.812:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 106.209764][ T5072] FS: 00007fc56c9676c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 106.223732][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.234198][ T5072] CR2: 00007ffc0224d018 CR3: 0000000058c99000 CR4: 00000000003526f0 [ 106.249088][ T5072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.261721][ T5072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.288989][ T5072] Call Trace: [ 106.299070][ T5072] [ 106.308309][ T5072] ? __lock_acquire+0x7c60/0x7c60 [ 106.314820][ T26] audit: type=1326 audit(1753453830.812:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 106.359410][ T5072] kvm_vcpu_ioctl+0x887/0xb80 [ 106.394113][ T5072] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 106.429437][ T5072] ? bpf_lsm_file_ioctl+0x5/0x10 [ 106.436724][ T26] audit: type=1326 audit(1753453830.812:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870169f9a9 code=0x7ffc0000 [ 106.447625][ T5072] ? security_file_ioctl+0x7c/0xa0 [ 106.532712][ T5072] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 106.554716][ T5072] __se_sys_ioctl+0xfa/0x170 [ 106.576815][ T5072] do_syscall_64+0x4c/0xa0 [ 106.595071][ T5072] ? clear_bhb_loop+0x30/0x80 [ 106.617152][ T5072] ? clear_bhb_loop+0x30/0x80 [ 106.635169][ T5072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.644366][ T5072] RIP: 0033:0x7fc56eaff9a9 [ 106.662229][ T5072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.773187][ T5072] RSP: 002b:00007fc56c967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.794585][ T5072] RAX: ffffffffffffffda RBX: 00007fc56ed26fa0 RCX: 00007fc56eaff9a9 [ 106.830688][ T5072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 106.851928][ T5072] RBP: 00007fc56eb81d69 R08: 0000000000000000 R09: 0000000000000000 [ 106.870550][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.893769][ T5072] R13: 0000000000000000 R14: 00007fc56ed26fa0 R15: 00007ffd582b4158 [ 106.925100][ T5072] [ 106.931725][ T5072] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.939055][ T5072] CPU: 1 PID: 5072 Comm: syz.0.223 Not tainted 5.15.189-syzkaller #0 [ 106.947150][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.957241][ T5072] Call Trace: [ 106.960548][ T5072] [ 106.963502][ T5072] dump_stack_lvl+0x168/0x230 [ 106.968217][ T5072] ? show_regs_print_info+0x20/0x20 [ 106.973455][ T5072] ? load_image+0x3b0/0x3b0 [ 106.978018][ T5072] panic+0x2c9/0x7f0 [ 106.981959][ T5072] ? bpf_jit_dump+0xd0/0xd0 [ 106.986507][ T5072] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 106.992357][ T5072] __warn+0x248/0x2b0 [ 106.996383][ T5072] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 107.002230][ T5072] report_bug+0x1b7/0x2e0 [ 107.006576][ T5072] handle_bug+0x3a/0x70 [ 107.010737][ T5072] exc_invalid_op+0x16/0x40 [ 107.015249][ T5072] asm_exc_invalid_op+0x16/0x20 [ 107.020131][ T5072] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 107.026564][ T5072] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 107.046543][ T5072] RSP: 0018:ffffc9000152fc30 EFLAGS: 00010283 [ 107.052642][ T5072] RAX: ffffffff810eefd4 RBX: ffff88805cbe8000 RCX: 0000000000080000 [ 107.060639][ T5072] RDX: ffffc90004ee9000 RSI: 000000000000041f RDI: 0000000000000420 [ 107.068638][ T5072] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 107.076675][ T5072] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff8880752c8001 [ 107.084674][ T5072] R13: 1ffff1100b97d01e R14: ffff88805cbe80f0 R15: ffff8880752c8000 [ 107.092663][ T5072] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 107.098498][ T5072] ? __lock_acquire+0x7c60/0x7c60 [ 107.103567][ T5072] kvm_vcpu_ioctl+0x887/0xb80 [ 107.108281][ T5072] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 107.113953][ T5072] ? bpf_lsm_file_ioctl+0x5/0x10 [ 107.118914][ T5072] ? security_file_ioctl+0x7c/0xa0 [ 107.124232][ T5072] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 107.130046][ T5072] __se_sys_ioctl+0xfa/0x170 [ 107.134662][ T5072] do_syscall_64+0x4c/0xa0 [ 107.139097][ T5072] ? clear_bhb_loop+0x30/0x80 [ 107.143786][ T5072] ? clear_bhb_loop+0x30/0x80 [ 107.148478][ T5072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.154391][ T5072] RIP: 0033:0x7fc56eaff9a9 [ 107.158819][ T5072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.178452][ T5072] RSP: 002b:00007fc56c967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.186878][ T5072] RAX: ffffffffffffffda RBX: 00007fc56ed26fa0 RCX: 00007fc56eaff9a9 [ 107.194858][ T5072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 107.202929][ T5072] RBP: 00007fc56eb81d69 R08: 0000000000000000 R09: 0000000000000000 [ 107.210915][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.218896][ T5072] R13: 0000000000000000 R14: 00007fc56ed26fa0 R15: 00007ffd582b4158 [ 107.226888][ T5072] [ 107.230282][ T5072] Kernel Offset: disabled [ 107.234785][ T5072] Rebooting in 86400 seconds..