last executing test programs: 5.115248057s ago: executing program 0 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05032200d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.773527978s ago: executing program 0 (id=34): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.149201248s ago: executing program 2 (id=41): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) close(r0) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b=A|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 3.985097853s ago: executing program 4 (id=43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000ac0)={0x1000, 0x9b000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x50000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000003c0)={0xb000, 0xd000, 0x1}) 3.369699623s ago: executing program 4 (id=45): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xc, 0x1, 0x2}, &(0x7f0000000100)=0x10) 3.341546334s ago: executing program 4 (id=46): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740), 0x0, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 2.988987824s ago: executing program 0 (id=57): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) close(r0) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b=A|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2.988308404s ago: executing program 2 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_io_uring_setup(0x356e, &(0x7f0000000180)={0x0, 0x7be7, 0x40, 0x2, 0x1c}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) 2.592083697s ago: executing program 2 (id=51): semtimedop(0x0, &(0x7f0000000380)=[{0x2, 0x7, 0x800}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc0100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010000}, 0x804) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.218764829s ago: executing program 2 (id=54): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000937fed)=""/3, &(0x7f0000000000)=0x3) 2.065610704s ago: executing program 2 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0xb, 0x5, 0xa, 0x9, 0x9, 0x0, 0x1041, 0x4, 0x0, 0x33a, 0x1000, 0x2000000100000002, 0x49, 0x9, 0x1000, 0x6b], 0xeeef0000, 0x101052}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.065425844s ago: executing program 4 (id=56): r0 = socket(0x2, 0x805, 0x0) pipe(&(0x7f0000000000)) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0x41, 0x20, 0xaefc}, &(0x7f0000000240)=0x18) 1.951128598s ago: executing program 4 (id=58): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.949999048s ago: executing program 0 (id=68): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) close(r0) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b=A|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1.726118825s ago: executing program 2 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000001c0)={0xc844e400, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mbind(&(0x7f00006c6000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x400, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r5, &(0x7f0000000000)={[0x7ffffffffffffffd]}, 0x8, 0x80000) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="48b801000000000000000f21f8640f808c6a060623f848b8fcffffffffffffff0f23d80f21f835800000100f23f86464660f38807d0036400f23f440dec93e460f01c4af0f20d835200000000f22d8b91e0200000f32440f01d1", 0x5a}], 0x1, 0x10, 0x0, 0x0) r6 = creat(&(0x7f0000000240)='./file1\x00', 0x183) r7 = open(&(0x7f00000002c0)='./file1\x00', 0x4c27e, 0x1bb) fallocate(r7, 0x0, 0x9e1f, 0x575) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000005300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x480}], 0x1, 0x40000) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) fallocate(r6, 0x0, 0x200ae11, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2, 0xe4) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x8, 0x9, 0x90fe, 0xfffffffffe000003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.725865385s ago: executing program 3 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.157290103s ago: executing program 1 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0xfffffffc, 0xffffffffffffffff, 0x1}) 1.157016733s ago: executing program 3 (id=62): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000104, 0x0, 0x100000000}]}) 1.017114627s ago: executing program 0 (id=63): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r0, &(0x7f0000000240)={0x2}, 0x8, 0x0) 842.559723ms ago: executing program 1 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x4, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x3, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) 749.693176ms ago: executing program 3 (id=65): semtimedop(0x0, &(0x7f0000000380)=[{0x2, 0x7, 0x800}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc0100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010000}, 0x804) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 736.842856ms ago: executing program 4 (id=66): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740), 0x0, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 580.015001ms ago: executing program 1 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000780)=[@cpuid={0x64, 0x18, {0xb, 0x7}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 507.377304ms ago: executing program 3 (id=69): syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2a0210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x1, "00ffffffffff"}, {0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8000000000"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) 329.562689ms ago: executing program 3 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 322.68163ms ago: executing program 1 (id=71): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0xffffffff, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 230.470862ms ago: executing program 1 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 41.526828ms ago: executing program 0 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x9, 0xa08, 0x54f, 0x3, 0x4, 0xe8c0, 0x80, 0x4, 0x400, 0x9, 0x4, 0x2, 0x7f, 0x40, 0x3, 0x6], 0xb000, 0xa0204}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.185819ms ago: executing program 3 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfffd}, &(0x7f0000000000)=0x90) 0s ago: executing program 1 (id=75): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) close(r0) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b=A|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 57.813345][ T4176] cgroup: Unknown subsys name 'net' [ 57.927899][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.423931][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.428546][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.471946][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.489777][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.527779][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.538419][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 61.672316][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.680155][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.688340][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.702313][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.709700][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.718137][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.726242][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.733894][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.741839][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.755023][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.762118][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.770810][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.778351][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.785532][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.794012][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.816988][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.824278][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.832047][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.839607][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.846944][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.855497][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.880634][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.887929][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.895752][ T4200] device bridge_slave_0 entered promiscuous mode [ 61.904078][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.911235][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.919953][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.940963][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.951305][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.958946][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.967244][ T4200] device bridge_slave_1 entered promiscuous mode [ 61.996501][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.007270][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.030797][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.042972][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.054025][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.065338][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.095558][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.119405][ T4192] team0: Port device team_slave_0 added [ 62.134940][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.154083][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.178287][ T4192] team0: Port device team_slave_1 added [ 62.187104][ T4188] team0: Port device team_slave_0 added [ 62.195334][ T4189] team0: Port device team_slave_0 added [ 62.203712][ T4190] team0: Port device team_slave_0 added [ 62.221282][ T4188] team0: Port device team_slave_1 added [ 62.228385][ T4189] team0: Port device team_slave_1 added [ 62.236024][ T4190] team0: Port device team_slave_1 added [ 62.251372][ T4200] team0: Port device team_slave_0 added [ 62.270561][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.277708][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.304610][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.330164][ T4200] team0: Port device team_slave_1 added [ 62.344477][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.351450][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.377847][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.389769][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.397228][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.423369][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.441515][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.448814][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.475387][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.498788][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.506124][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.532224][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.555736][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.563126][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.589270][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.601680][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.609114][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.635460][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.647088][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.654211][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.680417][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.719493][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.726621][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.753486][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.768812][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.776103][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.802687][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.817504][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.827586][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.864419][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.870976][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.878144][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.886269][ T4188] Cannot create hsr debugfs directory [ 62.942177][ T4200] device hsr_slave_0 entered promiscuous mode [ 62.949222][ T4200] device hsr_slave_1 entered promiscuous mode [ 62.956373][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.964382][ T4200] Cannot create hsr debugfs directory [ 62.980019][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.988067][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.995355][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.004794][ T4189] Cannot create hsr debugfs directory [ 63.012922][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.021515][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.028197][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.037175][ T4190] Cannot create hsr debugfs directory [ 63.053365][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 63.063460][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 63.142675][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.149325][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.156150][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 63.363256][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.376362][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.387965][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.398612][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.465683][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.475782][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.485034][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.498943][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.585548][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.597346][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.629777][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.637875][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.651673][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.661380][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.677486][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.684916][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.701059][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.709907][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.719451][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.726710][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.735423][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.755278][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.765627][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.775219][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.784410][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.791565][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.816137][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.827176][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.837179][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.845765][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.857810][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.869823][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.879170][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.889341][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.896452][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.910802][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.927544][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.947876][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.961949][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.972345][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.999585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.010391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.019082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.029690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.040775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.053367][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.063919][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.073371][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.080448][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.106206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.122310][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.132625][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.142669][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.153475][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.167563][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.177689][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.219126][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.233173][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.241827][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.251326][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.261066][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.286009][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.300852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.310630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.319961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.330253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.339129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.348613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.357212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.387457][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.399711][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.420744][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.446886][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.457159][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.465727][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.476158][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.502466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.524375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.540114][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.547469][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.578935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.588603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.600872][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.608034][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.633764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.643354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.652282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.692242][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.710413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.718218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.726262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.737511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.746531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.763945][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.779202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.788377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.809406][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.826581][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.835397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.844796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.854596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.864242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.893691][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.905405][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.919921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.928790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.937392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.946818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.958819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.966784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.976895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.986893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.995783][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.003013][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.010795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.029577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.039122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.048654][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.055878][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.091407][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.108956][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.126041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.134325][ T1110] Bluetooth: hci0: command 0x041b tx timeout [ 65.140450][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 65.143439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.155264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.165305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.174888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.182977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.190678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.202710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.213194][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 65.215739][ T4188] device veth0_vlan entered promiscuous mode [ 65.219370][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 65.232952][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 65.259988][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.268044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.279366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.288586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.298268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.307546][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.314812][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.323794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.331355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.339070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.349026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.357832][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.365500][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.374944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.383829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.398794][ T4188] device veth1_vlan entered promiscuous mode [ 65.416833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.425991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.438632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.448944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.458721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.468410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.478527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.489465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.500480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.525152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.540002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.552131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.563672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.572175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.581408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.600131][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.613524][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.624522][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.641175][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.650936][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.677963][ T4188] device veth0_macvtap entered promiscuous mode [ 65.687764][ T4192] device veth0_vlan entered promiscuous mode [ 65.701010][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.714636][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.723635][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.732064][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.741334][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.757611][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.768713][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.790314][ T4188] device veth1_macvtap entered promiscuous mode [ 65.799432][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.816125][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.826506][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.836099][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.845984][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.856070][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.865321][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.889851][ T4192] device veth1_vlan entered promiscuous mode [ 65.935838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.946789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.966247][ T4190] device veth0_vlan entered promiscuous mode [ 65.997092][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.017184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.028205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.036896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.045993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.060636][ T4190] device veth1_vlan entered promiscuous mode [ 66.079173][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.087665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.097678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.107834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.117414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.126936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.154487][ T4192] device veth0_macvtap entered promiscuous mode [ 66.170438][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.181928][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.191556][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.200560][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.211560][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.235173][ T4190] device veth0_macvtap entered promiscuous mode [ 66.244538][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.255872][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.264731][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.272155][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.279823][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.288302][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.298204][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.314403][ T4192] device veth1_macvtap entered promiscuous mode [ 66.331203][ T4190] device veth1_macvtap entered promiscuous mode [ 66.344262][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.360172][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.369338][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.377203][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.396095][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.407760][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.418933][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.444495][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.455905][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.467868][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.485446][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.496059][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.508948][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.520324][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.530785][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.541974][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.555672][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.566340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.577755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.594122][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.606610][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.618454][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.651951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.667319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.679490][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.690542][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.699658][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.708768][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.720341][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.731211][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.743148][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.753795][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.765458][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.786683][ T4200] device veth0_vlan entered promiscuous mode [ 66.795330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.804344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.815184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.824088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.856458][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.866140][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875441][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.884557][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905448][ T4200] device veth1_vlan entered promiscuous mode [ 66.914055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.921829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.930462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.939577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.983555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.994239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.014232][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.024198][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.034765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.046094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.054718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.075791][ T4189] device veth0_vlan entered promiscuous mode [ 67.102304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.119884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.152448][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.160395][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.176519][ T4189] device veth1_vlan entered promiscuous mode [ 67.194347][ T4200] device veth0_macvtap entered promiscuous mode [ 67.203869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.212169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.220501][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 67.222895][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 67.228586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.246120][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.257258][ T4200] device veth1_macvtap entered promiscuous mode [ 67.264511][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.280447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.290081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.298914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.307230][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 67.313982][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 67.318903][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.328841][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 67.335597][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.381414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.400131][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.410851][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.418504][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.429077][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.429929][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.439930][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.439947][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.439964][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.465860][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.565750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.576477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.604196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.615439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.624845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.645320][ T4189] device veth0_macvtap entered promiscuous mode [ 67.665003][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.703532][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.720136][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.731951][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.735240][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.747767][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.788328][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.810898][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.822729][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.831115][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.839211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.853752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.870829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.898865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.947066][ T4189] device veth1_macvtap entered promiscuous mode [ 67.967499][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.977858][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.002460][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.011219][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.061481][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.081972][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.094174][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.114631][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.130497][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.142894][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.161110][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.173726][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.212996][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.250493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.276325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.297760][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.333331][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.349128][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.360849][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.371844][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.393190][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.417610][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.432502][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.446317][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.459884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.471331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.526647][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.559623][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.569637][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.581451][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.704818][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.730940][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.763376][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.831439][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.849854][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.856450][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.866070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.870592][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.920571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.958062][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.997137][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.033810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.295492][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 69.310055][ T4238] Bluetooth: hci1: command 0x0419 tx timeout [ 69.373672][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 69.380924][ T4238] Bluetooth: hci4: command 0x0419 tx timeout [ 69.396427][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 69.659008][ T4320] device syzkaller0 entered promiscuous mode [ 70.644337][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 70.655038][ T4342] process 'syz.3.22' launched './file1' with NULL argv: empty string added [ 70.667495][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 70.675105][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 70.685257][ T4201] Workqueue: hci4 hci_rx_work [ 70.689975][ T4201] Call Trace: [ 70.693278][ T4201] [ 70.696314][ T4201] dump_stack_lvl+0x188/0x250 [ 70.701024][ T4201] ? show_regs_print_info+0x20/0x20 [ 70.706262][ T4201] ? load_image+0x400/0x400 [ 70.710822][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 70.715977][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 70.720801][ T4201] ? process_one_work+0x85f/0x1010 [ 70.725960][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 70.731213][ T4201] kobject_add_internal+0x6e0/0xd90 [ 70.736463][ T4201] kobject_add+0x160/0x230 [ 70.741179][ T4201] ? kobject_init+0x1d0/0x1d0 [ 70.745903][ T4201] ? klist_children_get+0x50/0x50 [ 70.751047][ T4201] ? get_device_parent+0x121/0x3f0 [ 70.756200][ T4201] device_add+0x483/0xfb0 [ 70.760617][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 70.765607][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 70.771118][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 70.776461][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 70.782188][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 70.787087][ T4201] ? hci_event_packet+0x37b/0x1370 [ 70.792430][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 70.797622][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 70.803934][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 70.809731][ T4201] ? mark_lock+0x94/0x320 [ 70.814189][ T4201] ? mutex_unlock+0x10/0x10 [ 70.818746][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 70.825181][ T4201] ? lock_chain_count+0x20/0x20 [ 70.830083][ T4201] ? __rwlock_init+0x140/0x140 [ 70.834889][ T4201] hci_event_packet+0xe48/0x1370 [ 70.839865][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 70.845124][ T4201] ? rcu_lock_release+0x20/0x20 [ 70.850007][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 70.855239][ T4201] hci_rx_work+0x255/0xa10 [ 70.859770][ T4201] process_one_work+0x85f/0x1010 [ 70.864730][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 70.870368][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 70.875764][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 70.880792][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 70.886347][ T4201] ? wq_worker_running+0x97/0x170 [ 70.891380][ T4201] worker_thread+0xaa6/0x1290 [ 70.896087][ T4201] kthread+0x436/0x520 [ 70.900161][ T4201] ? rcu_lock_release+0x20/0x20 [ 70.905012][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 70.909610][ T4201] ret_from_fork+0x1f/0x30 [ 70.914047][ T4201] [ 70.926320][ T4201] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.939893][ T4201] Bluetooth: hci4: failed to register connection device [ 71.296455][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.303737][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.504872][ T4368] device syzkaller0 entered promiscuous mode [ 71.956279][ T4381] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.974038][ T4381] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 72.301729][ T4388] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 72.317846][ T4388] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 72.666888][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 72.676878][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 72.684460][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.694556][ T4201] Workqueue: hci3 hci_rx_work [ 72.699273][ T4201] Call Trace: [ 72.702572][ T4201] [ 72.705524][ T4201] dump_stack_lvl+0x188/0x250 [ 72.710246][ T4201] ? show_regs_print_info+0x20/0x20 [ 72.715484][ T4201] ? load_image+0x400/0x400 [ 72.720025][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 72.725149][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 72.729826][ T4201] ? process_one_work+0x85f/0x1010 [ 72.734976][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 72.740186][ T4201] kobject_add_internal+0x6e0/0xd90 [ 72.745656][ T4201] kobject_add+0x160/0x230 [ 72.750082][ T4201] ? kobject_init+0x1d0/0x1d0 [ 72.754766][ T4201] ? klist_children_get+0x50/0x50 [ 72.759809][ T4201] ? get_device_parent+0x121/0x3f0 [ 72.764953][ T4201] device_add+0x483/0xfb0 [ 72.769448][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 72.774497][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 72.779832][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 72.784963][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 72.790619][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 72.795509][ T4201] ? hci_event_packet+0x37b/0x1370 [ 72.800800][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 72.805835][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 72.811920][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 72.817932][ T4201] ? mark_lock+0x94/0x320 [ 72.822313][ T4201] ? mutex_unlock+0x10/0x10 [ 72.826844][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 72.832852][ T4201] ? lock_chain_count+0x20/0x20 [ 72.837711][ T4201] ? __rwlock_init+0x140/0x140 [ 72.842482][ T4201] hci_event_packet+0xe48/0x1370 [ 72.847428][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 72.852742][ T4201] ? rcu_lock_release+0x20/0x20 [ 72.857604][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 72.862806][ T4201] hci_rx_work+0x255/0xa10 [ 72.867358][ T4201] process_one_work+0x85f/0x1010 [ 72.872329][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 72.878078][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 72.883464][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 72.888662][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 72.894210][ T4201] ? wq_worker_running+0x97/0x170 [ 72.899240][ T4201] worker_thread+0xaa6/0x1290 [ 72.904045][ T4201] kthread+0x436/0x520 [ 72.908201][ T4201] ? rcu_lock_release+0x20/0x20 [ 72.913055][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 72.917650][ T4201] ret_from_fork+0x1f/0x30 [ 72.922176][ T4201] [ 72.936877][ T4201] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 72.950611][ T4201] Bluetooth: hci3: failed to register connection device [ 73.194826][ T4412] device syzkaller0 entered promiscuous mode [ 73.780288][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 73.790455][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 73.798056][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 73.808147][ T4201] Workqueue: hci0 hci_rx_work [ 73.812955][ T4201] Call Trace: [ 73.816260][ T4201] [ 73.819220][ T4201] dump_stack_lvl+0x188/0x250 [ 73.823935][ T4201] ? show_regs_print_info+0x20/0x20 [ 73.829170][ T4201] ? load_image+0x400/0x400 [ 73.833751][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 73.838914][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 73.843635][ T4201] ? process_one_work+0x85f/0x1010 [ 73.848878][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 73.854124][ T4201] kobject_add_internal+0x6e0/0xd90 [ 73.859365][ T4201] kobject_add+0x160/0x230 [ 73.863957][ T4201] ? kobject_init+0x1d0/0x1d0 [ 73.868671][ T4201] ? klist_children_get+0x50/0x50 [ 73.873816][ T4201] ? get_device_parent+0x121/0x3f0 [ 73.878968][ T4201] device_add+0x483/0xfb0 [ 73.883358][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 73.888417][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 73.893760][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 73.898927][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 73.904696][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 73.909590][ T4201] ? hci_event_packet+0x37b/0x1370 [ 73.914840][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 73.919909][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 73.926018][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 73.931694][ T4201] ? mark_lock+0x94/0x320 [ 73.936056][ T4201] ? mutex_unlock+0x10/0x10 [ 73.940598][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 73.946626][ T4201] ? lock_chain_count+0x20/0x20 [ 73.951517][ T4201] ? __rwlock_init+0x140/0x140 [ 73.956361][ T4201] hci_event_packet+0xe48/0x1370 [ 73.961356][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 73.966697][ T4201] ? rcu_lock_release+0x20/0x20 [ 73.971586][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 73.976909][ T4201] hci_rx_work+0x255/0xa10 [ 73.981385][ T4201] process_one_work+0x85f/0x1010 [ 73.986373][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 73.992047][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 73.997373][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 74.002434][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 74.008146][ T4201] ? wq_worker_running+0x97/0x170 [ 74.013199][ T4201] worker_thread+0xaa6/0x1290 [ 74.018188][ T4201] kthread+0x436/0x520 [ 74.022393][ T4201] ? rcu_lock_release+0x20/0x20 [ 74.027255][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 74.031864][ T4201] ret_from_fork+0x1f/0x30 [ 74.036414][ T4201] [ 74.044251][ T4201] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 74.058635][ T4201] Bluetooth: hci0: failed to register connection device [ 74.773179][ T4463] device syzkaller0 entered promiscuous mode [ 74.806304][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 74.819846][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 74.827448][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.837654][ T4201] Workqueue: hci0 hci_rx_work [ 74.842362][ T4201] Call Trace: [ 74.845655][ T4201] [ 74.848591][ T4201] dump_stack_lvl+0x188/0x250 [ 74.853290][ T4201] ? show_regs_print_info+0x20/0x20 [ 74.858583][ T4201] ? load_image+0x400/0x400 [ 74.863100][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 74.868218][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 74.872895][ T4201] ? process_one_work+0x85f/0x1010 [ 74.878101][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 74.883419][ T4201] kobject_add_internal+0x6e0/0xd90 [ 74.888631][ T4201] kobject_add+0x160/0x230 [ 74.893140][ T4201] ? kobject_init+0x1d0/0x1d0 [ 74.897823][ T4201] ? klist_children_get+0x50/0x50 [ 74.902852][ T4201] ? get_device_parent+0x121/0x3f0 [ 74.907978][ T4201] device_add+0x483/0xfb0 [ 74.912418][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 74.917365][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 74.922666][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 74.927873][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 74.933518][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 74.938372][ T4201] ? hci_event_packet+0x37b/0x1370 [ 74.943508][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 74.948537][ T4201] ? release_firmware_map_entry+0x190/0x190 [ 74.954446][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 74.960615][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 74.966251][ T4201] ? mark_lock+0x94/0x320 [ 74.970585][ T4201] ? mutex_unlock+0x10/0x10 [ 74.975092][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 74.981176][ T4201] ? lock_chain_count+0x20/0x20 [ 74.986040][ T4201] ? __rwlock_init+0x140/0x140 [ 74.990909][ T4201] hci_event_packet+0xe48/0x1370 [ 74.995947][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 75.001352][ T4201] ? rcu_lock_release+0x20/0x20 [ 75.006309][ T4201] ? lock_acquire+0x208/0x400 [ 75.011222][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.017225][ T4201] hci_rx_work+0x255/0xa10 [ 75.021658][ T4201] process_one_work+0x85f/0x1010 [ 75.026875][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 75.032517][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 75.037998][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.043205][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.048756][ T4201] ? wq_worker_running+0x97/0x170 [ 75.053795][ T4201] worker_thread+0xaa6/0x1290 [ 75.058733][ T4201] kthread+0x436/0x520 [ 75.062827][ T4201] ? rcu_lock_release+0x20/0x20 [ 75.067830][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 75.072445][ T4201] ret_from_fork+0x1f/0x30 [ 75.077062][ T4201] [ 75.084057][ T4201] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 75.098107][ T4201] Bluetooth: hci0: failed to register connection device [ 76.305864][ T4495] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.314152][ T4495] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.318246][ T4502] device syzkaller0 entered promiscuous mode [ 76.578611][ T4504] ------------[ cut here ]------------ [ 76.596485][ T4504] WARNING: CPU: 0 PID: 4504 at arch/x86/kvm/vmx/vmx.c:1714 vmx_queue_exception+0x2b9/0x470 [ 76.627666][ T4504] Modules linked in: [ 76.635297][ T4504] CPU: 0 PID: 4504 Comm: syz.0.73 Not tainted syzkaller #0 [ 76.643179][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.663946][ T4504] RIP: 0010:vmx_queue_exception+0x2b9/0x470 [ 76.705779][ T4504] Code: 01 00 00 e8 d9 92 58 00 eb 0c e8 d2 92 58 00 eb 05 e8 cb 92 58 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 92 58 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 3e [ 76.790818][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 76.799500][ T4504] RSP: 0018:ffffc90004b37590 EFLAGS: 00010287 [ 76.800815][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 76.811554][ T4504] [ 76.814576][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.814617][ T4201] Workqueue: hci2 hci_rx_work [ 76.814647][ T4201] Call Trace: [ 76.814655][ T4201] [ 76.814664][ T4201] dump_stack_lvl+0x188/0x250 [ 76.814692][ T4201] ? show_regs_print_info+0x20/0x20 [ 76.814712][ T4201] ? load_image+0x400/0x400 [ 76.814745][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 76.814770][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 76.814786][ T4201] ? process_one_work+0x85f/0x1010 [ 76.860403][ T4504] RAX: ffffffff8120a359 RBX: ffff88805f020000 RCX: 0000000000080000 [ 76.862994][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 76.863032][ T4201] kobject_add_internal+0x6e0/0xd90 [ 76.863064][ T4201] kobject_add+0x160/0x230 [ 76.863090][ T4201] ? kobject_init+0x1d0/0x1d0 [ 76.863115][ T4201] ? klist_children_get+0x50/0x50 [ 76.863139][ T4201] ? get_device_parent+0x121/0x3f0 [ 76.863165][ T4201] device_add+0x483/0xfb0 [ 76.863198][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 76.915417][ T4504] RDX: ffffc90003d03000 RSI: 000000000000185f RDI: 0000000000001860 [ 76.915746][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 76.929028][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 76.934187][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 76.939776][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 76.944669][ T4201] ? hci_event_packet+0x37b/0x1370 [ 76.949903][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 76.955165][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 76.956500][ T4504] RBP: 0000000000000000 R08: ffff888026599dc0 R09: 0000000000000002 [ 76.961306][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 76.961345][ T4201] ? mark_lock+0x94/0x320 [ 76.961365][ T4201] ? mutex_unlock+0x10/0x10 [ 76.984181][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 76.990206][ T4201] ? lock_chain_count+0x20/0x20 [ 76.991780][ T4504] R10: 000000000000000e R11: 0000000000000002 R12: ffff88805f0226fc [ 76.995095][ T4201] ? __rwlock_init+0x140/0x140 [ 76.995129][ T4201] hci_event_packet+0xe48/0x1370 [ 76.995151][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 76.995184][ T4201] ? rcu_lock_release+0x20/0x20 [ 76.995209][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 76.995233][ T4201] hci_rx_work+0x255/0xa10 [ 76.995272][ T4201] process_one_work+0x85f/0x1010 [ 76.995311][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 76.995331][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 76.995358][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 76.995378][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 77.059633][ T4201] ? wq_worker_running+0x97/0x170 [ 77.064691][ T4201] worker_thread+0xaa6/0x1290 [ 77.069427][ T4201] kthread+0x436/0x520 [ 77.071078][ T4504] R13: dffffc0000000000 R14: 000000000000000e R15: 000000008000080e [ 77.073613][ T4201] ? rcu_lock_release+0x20/0x20 [ 77.073641][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 77.073663][ T4201] ret_from_fork+0x1f/0x30 [ 77.073699][ T4201] [ 77.080061][ T4201] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.091364][ T4504] FS: 00007f7a1d02e6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 77.091616][ T4201] Bluetooth: hci2: failed to register connection device [ 77.096998][ T4504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.136944][ T4504] CR2: 0000001b32821ff8 CR3: 000000001eb30000 CR4: 00000000003526f0 [ 77.145782][ T4504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.154344][ T4504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.163581][ T4504] Call Trace: [ 77.166969][ T4504] [ 77.169960][ T4504] ? kvm_inject_exception+0x15f/0x320 [ 77.175681][ T4504] vcpu_enter_guest+0x1258/0x7010 [ 77.181031][ T4504] ? local_bh_enable+0x20/0x20 [ 77.188169][ T4504] ? memcpy+0x3c/0x60 [ 77.192305][ T4504] ? paging64_gva_to_gpa+0x17e/0x230 [ 77.197683][ T4504] ? paging64_page_fault+0xbd0/0xbd0 [ 77.203095][ T4504] ? mark_lock+0x94/0x320 [ 77.207467][ T4504] ? __lock_acquire+0x12e8/0x7d10 [ 77.212818][ T4504] ? vcpu_match_mmio_gen+0xe3/0x200 [ 77.219072][ T4504] ? emulator_read_write_onepage+0x3e4/0x960 [ 77.225273][ T4504] ? emulator_read_write+0x1d9/0x550 [ 77.230604][ T4504] ? verify_lock_unused+0x140/0x140 [ 77.235902][ T4504] ? writeback+0x57e/0x860 [ 77.240544][ T4504] ? x86_emulate_insn+0x415/0x36e0 [ 77.245791][ T4504] ? kvm_inject_page_fault+0x55e/0xbc0 [ 77.251285][ T4504] ? rcu_lock_release+0x9/0x20 [ 77.256221][ T4504] ? vmx_check_nested_events+0x158a/0x2390 [ 77.262170][ T4504] ? read_lock_is_recursive+0x10/0x10 [ 77.267815][ T4504] ? handle_vmfunc+0xfb0/0xfb0 [ 77.272837][ T4504] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 77.278445][ T4504] kvm_vcpu_ioctl+0x8f7/0xc10 [ 77.283213][ T4504] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 77.288975][ T4504] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.294644][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 77.303323][ T4504] ? security_file_ioctl+0x7c/0xa0 [ 77.308667][ T4504] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 77.314757][ T4504] __se_sys_ioctl+0xfa/0x170 [ 77.319904][ T4504] do_syscall_64+0x4c/0xa0 [ 77.325116][ T4504] ? clear_bhb_loop+0x30/0x80 [ 77.329830][ T4504] ? clear_bhb_loop+0x30/0x80 [ 77.334656][ T4504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.340660][ T4504] RIP: 0033:0x7f7a1edd4e59 [ 77.346822][ T4504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.371442][ T4504] RSP: 002b:00007f7a1d02e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.380675][ T4504] RAX: ffffffffffffffda RBX: 00007f7a1f04dfa0 RCX: 00007f7a1edd4e59 [ 77.401899][ T4504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 77.417258][ T4504] RBP: 00007f7a1ee6ad6f R08: 0000000000000000 R09: 0000000000000000 [ 77.429159][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.444467][ T4504] R13: 00007f7a1f04e038 R14: 00007f7a1f04dfa0 R15: 00007ffd49d8af68 [ 77.457042][ T4504] [ 77.460119][ T4504] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.467832][ T4504] CPU: 1 PID: 4504 Comm: syz.0.73 Not tainted syzkaller #0 [ 77.475066][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.485268][ T4504] Call Trace: [ 77.488751][ T4504] [ 77.491779][ T4504] dump_stack_lvl+0x188/0x250 [ 77.496466][ T4504] ? show_regs_print_info+0x20/0x20 [ 77.501793][ T4504] ? load_image+0x400/0x400 [ 77.506303][ T4504] panic+0x2e5/0x810 [ 77.510206][ T4504] ? bpf_jit_dump+0xd0/0xd0 [ 77.514723][ T4504] ? vmx_queue_exception+0x2b9/0x470 [ 77.520538][ T4504] __warn+0x248/0x2b0 [ 77.524749][ T4504] ? vmx_queue_exception+0x2b9/0x470 [ 77.530345][ T4504] report_bug+0x1b7/0x2e0 [ 77.535407][ T4504] handle_bug+0x3a/0x70 [ 77.539802][ T4504] exc_invalid_op+0x16/0x40 [ 77.544476][ T4504] asm_exc_invalid_op+0x16/0x20 [ 77.549714][ T4504] RIP: 0010:vmx_queue_exception+0x2b9/0x470 [ 77.555917][ T4504] Code: 01 00 00 e8 d9 92 58 00 eb 0c e8 d2 92 58 00 eb 05 e8 cb 92 58 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 92 58 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 3e [ 77.575997][ T4504] RSP: 0018:ffffc90004b37590 EFLAGS: 00010287 [ 77.582098][ T4504] RAX: ffffffff8120a359 RBX: ffff88805f020000 RCX: 0000000000080000 [ 77.590100][ T4504] RDX: ffffc90003d03000 RSI: 000000000000185f RDI: 0000000000001860 [ 77.598251][ T4504] RBP: 0000000000000000 R08: ffff888026599dc0 R09: 0000000000000002 [ 77.606378][ T4504] R10: 000000000000000e R11: 0000000000000002 R12: ffff88805f0226fc [ 77.614876][ T4504] R13: dffffc0000000000 R14: 000000000000000e R15: 000000008000080e [ 77.622995][ T4504] ? vmx_queue_exception+0x2b9/0x470 [ 77.628375][ T4504] ? kvm_inject_exception+0x15f/0x320 [ 77.633856][ T4504] vcpu_enter_guest+0x1258/0x7010 [ 77.639078][ T4504] ? local_bh_enable+0x20/0x20 [ 77.644249][ T4504] ? memcpy+0x3c/0x60 [ 77.648273][ T4504] ? paging64_gva_to_gpa+0x17e/0x230 [ 77.653572][ T4504] ? paging64_page_fault+0xbd0/0xbd0 [ 77.658885][ T4504] ? mark_lock+0x94/0x320 [ 77.663228][ T4504] ? __lock_acquire+0x12e8/0x7d10 [ 77.668280][ T4504] ? vcpu_match_mmio_gen+0xe3/0x200 [ 77.673508][ T4504] ? emulator_read_write_onepage+0x3e4/0x960 [ 77.679616][ T4504] ? emulator_read_write+0x1d9/0x550 [ 77.684906][ T4504] ? verify_lock_unused+0x140/0x140 [ 77.690132][ T4504] ? writeback+0x57e/0x860 [ 77.694567][ T4504] ? x86_emulate_insn+0x415/0x36e0 [ 77.699793][ T4504] ? kvm_inject_page_fault+0x55e/0xbc0 [ 77.705257][ T4504] ? rcu_lock_release+0x9/0x20 [ 77.710021][ T4504] ? vmx_check_nested_events+0x158a/0x2390 [ 77.715827][ T4504] ? read_lock_is_recursive+0x10/0x10 [ 77.721194][ T4504] ? handle_vmfunc+0xfb0/0xfb0 [ 77.726141][ T4504] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 77.731724][ T4504] kvm_vcpu_ioctl+0x8f7/0xc10 [ 77.736494][ T4504] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 77.742146][ T4504] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.747092][ T4504] ? security_file_ioctl+0x7c/0xa0 [ 77.752226][ T4504] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 77.757861][ T4504] __se_sys_ioctl+0xfa/0x170 [ 77.762467][ T4504] do_syscall_64+0x4c/0xa0 [ 77.767011][ T4504] ? clear_bhb_loop+0x30/0x80 [ 77.771683][ T4504] ? clear_bhb_loop+0x30/0x80 [ 77.776355][ T4504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.782257][ T4504] RIP: 0033:0x7f7a1edd4e59 [ 77.786766][ T4504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.806891][ T4504] RSP: 002b:00007f7a1d02e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.815479][ T4504] RAX: ffffffffffffffda RBX: 00007f7a1f04dfa0 RCX: 00007f7a1edd4e59 [ 77.823662][ T4504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 77.831660][ T4504] RBP: 00007f7a1ee6ad6f R08: 0000000000000000 R09: 0000000000000000 [ 77.839644][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.847704][ T4504] R13: 00007f7a1f04e038 R14: 00007f7a1f04dfa0 R15: 00007ffd49d8af68 [ 77.855695][ T4504] [ 77.858863][ T4504] Kernel Offset: disabled [ 77.863305][ T4504] Rebooting in 86400 seconds..