last executing test programs: 3.23178089s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010002, 0x24000000, 0x555503}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0xffffff}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.3038775s ago: executing program 0 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x6c, {"2e450fe0dfb805000000b9e2e3ffff0f01c10fc7b80050000066ba210066edc74424000d000000c7442402fdffff7fc7442406000000000f011c240f20c035000000800f22c066420f2900c4a3e144fe5e420f01cbc421ee586f00"}}], 0x6c}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_crn={0x67, 0x20, {0x4, 0x1ff}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.951416185s ago: executing program 0 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x40000, 0x54, 0x101, 0x0, 0x4, 0x3, 0xde, 0x1, 0x1, 0xc1, 0xffffffff8df20c36, 0x4, 0x6fd9d5fd, 0x1c7, 0x91ba, 0x4], 0x80a0000, 0x50000}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.816349731s ago: executing program 3 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0x80000007, 0xfffffffe}}], 0x18}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x10, 0x5, 0x8, '\x00', 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x0, 0x1000002000002, 0x0, 0x2004c7, 0x0, 0x0, 0x68ff, 0x9, 0x0, 0x3, 0x3], 0x1, 0x3cb1b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x2, 0xf, 0x5, 0x4, 0x9, 0x3, 0xb, 0x0, 0x1, 0x3, 0x3}, {0x4, 0xdddd0000, 0xe, 0x14, 0x1, 0x9, 0x3, 0xe, 0x40, 0x10, 0x6}, {0x8080000, 0x5000, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x8, 0x5, 0x3}, {0x100000, 0x3000, 0x1a, 0xf9, 0x7f, 0x3, 0x8, 0x7f, 0x9, 0x2, 0x3, 0x6}, {0xd000, 0xdddd1000, 0x0, 0xd, 0x3, 0x2d, 0x6, 0xc, 0xfc, 0x0, 0xff, 0xe5}, {0x2, 0x10000, 0xd, 0x5, 0x6, 0x28, 0x10, 0x1, 0xbf, 0x98, 0x2, 0x4}, {0x5000, 0x8000000, 0x3, 0x9, 0x0, 0xb, 0xb, 0x3, 0x4, 0x0, 0x4, 0x9}, {0xdddd0000, 0x1, 0x10, 0x4, 0x3, 0xff, 0x0, 0xf9, 0x9e, 0x8, 0x0, 0xfe}, {0xffff1000, 0xcb}, {0xffff1000, 0x17}, 0x40019, 0x0, 0x2000, 0x0, 0x7, 0x1000, 0xdddd1000, [0x2, 0x7, 0x9, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xffff, 0xfffffffffffffffb, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.788021802s ago: executing program 1 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x8, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x1, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x8, 0x90, 0x4, '\x00', 0x8}, {0x1, 0xaf, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0xd, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x6, '\x00', 0xa}, {0x8, 0x84, 0x2, '\x00', 0xd8}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x1, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x80, 0x0, [{0x7, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40000000}, {}, {}, {0x0, 0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x80000007}, {}, {}, {}, {}, {}, {0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0xd}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x9, 0x6, 0x0, 0xee4, 0x2, 0x6, 0x1, 0x3b, 0x8, 0x5, 0xff, 0x0, 0x7, 0x9, 0x5, 0xa, 0x1, 0x2, '\x00', 0x1, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1.668616887s ago: executing program 2 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x1, 0x1, 0x8, 0xf8, 0x8, 0x5, 0x68, 0x2, 0x3, 0x9c, 0xfd, 0xa6, 0x81, 0x1, 0x2, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x444, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.508118934s ago: executing program 4 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x0, 0x6, 0x4, 0x7, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x1, 0x4, 0xf, 0x5, 0x6, 0xc5, 0xe7, 0x3, 0x6, 0x7, 0x3}, {0x2, 0x0, 0xe, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x100000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xfc}, {0x2, 0x10000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x1, 0x8000000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x0, 0x8, 0x4, 0x81, 0x2}, {0x2, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x222, 0x100000002, 0x900, 0x9000, [0x6, 0x8000001, 0x4000000000000009, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8000000000000000, 0xf6, 0x20001, 0x7, 0x2000000, 0x0, 0x2004cc, 0xfffffffffffffe8b, 0xffff, 0xfffffffffffffffb, 0x1, 0xffffffffffffffff, 0x7ffffffffffffffb, 0x200, 0x0, 0x2], 0x1, 0x272c2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.501623494s ago: executing program 3 (id=250): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x4000005, 0x11, r5, 0x0) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r6 = eventfd2(0x0, 0x0) close(r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) 1.311999392s ago: executing program 2 (id=251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009b, 0x0, 0xfffffffffffffffc}]}) 1.251959775s ago: executing program 1 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) 1.196390148s ago: executing program 4 (id=253): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x339}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000002c0)={"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"}) 1.115758841s ago: executing program 3 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000105, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.093958222s ago: executing program 1 (id=255): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @msi={0x170b73a1, 0xdf52, 0x4, 0x9}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 1.065949223s ago: executing program 2 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(0x5) close(0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 868.001392ms ago: executing program 0 (id=257): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_load_code={0x12e, 0x7c, {0x0, "0f21e567f240af40e70048b800200000000000000f23c80f21f8350000a0000f23f8c744240039000000c74424022102715dff1c24b9d80b0000b8b2000000ba000000000f3067f30f10970c0000004687e2c4e1797eaa8d000000c422f9ba8a00400000"}}, @nested_vmlaunch={0x12f, 0x18, 0x8}], 0xc4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x10000, 0x118000}) 867.720282ms ago: executing program 4 (id=258): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x3000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100c00, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r2, &(0x7f00000001c0)=0x9, 0x1d) 840.456383ms ago: executing program 1 (id=259): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x9, 0x0, [{0x40000001, 0x0, 0x6}, {0x2cb, 0x0, 0x8}, {0xa2b, 0x0, 0x2}, {0x92f, 0x0, 0x1}, {0xd2dea46e3a93a6a3, 0x0, 0x5d}, {0x234}, {0x3a0, 0x0, 0x6}, {0x850, 0x0, 0x1}, {0x35f, 0x0, 0x9}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0x5, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0xeeee0000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 817.342594ms ago: executing program 3 (id=260): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x9596, 0x3}}], 0x20}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 647.832242ms ago: executing program 4 (id=261): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0xeb0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x40, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0xffff, 0x3, 0xa], 0x10000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 631.125822ms ago: executing program 2 (id=262): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r5 = eventfd2(0x0, 0x0) close(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) 618.433382ms ago: executing program 0 (id=263): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x14000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 512.343567ms ago: executing program 1 (id=264): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@code={0xa, 0x64, {"66420f3881710065672ef20f51f0c44115650f66baf80cb8ded1498def66bafc0c66ed66baf80cb85047828bef66bafc0c66ed660f3066baa00066edc4e245976fca66bad10466b8ba6766ef3e66660f73d196"}}], 0x64}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@code={0xa, 0x41, {"45c6f8b8674b0fae07c48205bef8420f3526410f090f072e0f01c866b8f0008ec8450f009c190090000066b867008ec0"}}], 0x41}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 476.111599ms ago: executing program 3 (id=265): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) 370.153183ms ago: executing program 2 (id=266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0xf7fffffffffffff8}]}) 271.971398ms ago: executing program 0 (id=267): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000972000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x188, 0x0, 0xd637fe}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000972000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x188, 0x0, 0xd637fe}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r11 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 271.675188ms ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000700)={"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"}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000005000/0x1000)=nil, r3, 0x2, 0x13, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x400, 0x2, 0x0, 0x1ff, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 205.27856ms ago: executing program 3 (id=269): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x9, 0x6, 0x3, 0x0, 0x101, 0x8000000000000001, 0x3, 0x6, 0x3, 0x6, 0x3, 0xf610, 0x0, 0x8, 0x9, 0xfffffffffffffffa], 0x8080000, 0x10010}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@x86={0x6, 0x1, 0x0, 0x0, 0x1000008, 0xe3, 0x81, 0x5, 0x56, 0x4, 0x3, 0xe0, 0x0, 0x74000000, 0x8, 0xff, 0x0, 0x6, 0xd1, '\x00', 0x8, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 174.337161ms ago: executing program 2 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x10, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfe}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x2000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x7f}, {0xb000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0xfe}, {0x0, 0x8000000, 0xa, 0x0, 0x1, 0x1, 0x83, 0xa, 0x27, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0x9, 0xd801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0x8000, 0x0, 0x1, 0x0, [{0x1, 0x3, 0x6, '\x00', 0x91}, {0x6c, 0xbc, 0x15, '\x00', 0xf}, {0x5, 0x83, 0x6, '\x00', 0x95}, {0x0, 0x9, 0x8, '\x00', 0xd7}, {0x3, 0x5, 0x7, '\x00', 0x2}, {0x3, 0x3, 0x7f, '\x00', 0x89}, {0xb, 0x2, 0xb4, '\x00', 0x9}, {0x6, 0x0, 0x80, '\x00', 0x3}, {0xb, 0x4, 0x4, '\x00', 0xd}, {0x2, 0x7, 0x1, '\x00', 0x3a}, {0x5, 0xff, 0xc, '\x00', 0x5}, {0x3, 0xf2, 0x3, '\x00', 0x1e}, {0x8, 0x9, 0x8, '\x00', 0x3}, {0x2, 0x7, 0xa4}, {0x1, 0x40, 0x6, '\x00', 0x20}, {0xe, 0x4, 0xb, '\x00', 0x1}, {0x4d, 0xe, 0x6d}, {0xe, 0x8, 0x8, '\x00', 0xd3}, {0x0, 0x5, 0x2, '\x00', 0x2}, {0x7f, 0x0, 0x72, '\x00', 0x5}, {0x9, 0x4, 0x9, '\x00', 0x7}, {0x1, 0xe, 0x1, '\x00', 0x2}, {0x72, 0xe, 0x5}, {0x80, 0xd, 0x40}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 103.914605ms ago: executing program 1 (id=271): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x5f, {"660f38819e0000010065460f302e420f009a5956000066b8d4000f00d048b828030000000000000f23d00f21f835200000000f23f8430f300fc798080000000f01c9f3470f01bf00000000450f08"}}], 0x77}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=272): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffa, 0x1, 0x4002004c4, 0x1000, 0x40000, 0x0, 0x0, 0x10000000000000, 0x3], 0x25000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x68b, 0x93, 0x7, 0xc0, 0xc2, 0xf, 0x1f, 0xf2, 0x6, 0xa, 0x0, 0x7, 0x6}, {0x5, 0x2, 0xf9, 0xaa, 0xdd, 0xff, 0xd, 0x3, 0x5, 0x9, 0x7, 0xa, 0x4}, {0x3, 0xa, 0x6, 0x3, 0xf8, 0xf8, 0x8, 0xff, 0xa, 0x82, 0xc, 0x64, 0x9}], 0xffbffffa}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 65.281894][ T4172] cgroup: Unknown subsys name 'net' [ 65.410564][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.004833][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.075833][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.211366][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.229924][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.289994][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.297606][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.306884][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.356693][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.371842][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.379790][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.430842][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.440312][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.447806][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.455870][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.471456][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 69.506571][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.513926][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.522606][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.532131][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.547351][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.597090][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.604587][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.613838][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.625205][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.632672][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.640799][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.658749][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.694219][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.706726][ T4186] team0: Port device team_slave_0 added [ 69.753157][ T4186] team0: Port device team_slave_1 added [ 69.769043][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.787252][ T4185] team0: Port device team_slave_0 added [ 69.800736][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.808178][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.816558][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.826403][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.846624][ T4185] team0: Port device team_slave_1 added [ 69.859264][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.866833][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.875192][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.908726][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.915993][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.942550][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.979765][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.987617][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.996052][ T4182] device bridge_slave_0 entered promiscuous mode [ 70.004981][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.012470][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.039915][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.065937][ T4188] team0: Port device team_slave_0 added [ 70.072547][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.079628][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.106688][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.118609][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.125966][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.134451][ T4182] device bridge_slave_1 entered promiscuous mode [ 70.150371][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.162668][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.172949][ T4188] team0: Port device team_slave_1 added [ 70.192824][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.199814][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.226213][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.300072][ T4183] team0: Port device team_slave_0 added [ 70.309555][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.322440][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.329419][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.337843][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.345079][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.371584][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.393836][ T4183] team0: Port device team_slave_1 added [ 70.408303][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.426320][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.433518][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.459981][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.483454][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.490738][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.502104][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.510295][ T4185] Cannot create hsr debugfs directory [ 70.537374][ T4182] team0: Port device team_slave_0 added [ 70.559605][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.567118][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.593467][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.614459][ T4182] team0: Port device team_slave_1 added [ 70.656430][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.663899][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.690271][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.742774][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 70.742774][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.744806][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.749045][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 70.761289][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.795449][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.809937][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.818097][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.824849][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 70.831092][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 70.831098][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.845626][ T4188] Cannot create hsr debugfs directory [ 70.873604][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.880750][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.907740][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.992916][ T4183] device hsr_slave_0 entered promiscuous mode [ 71.000297][ T4183] device hsr_slave_1 entered promiscuous mode [ 71.007558][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.016541][ T4183] Cannot create hsr debugfs directory [ 71.079887][ T4182] device hsr_slave_0 entered promiscuous mode [ 71.087757][ T4182] device hsr_slave_1 entered promiscuous mode [ 71.095475][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.103587][ T4182] Cannot create hsr debugfs directory [ 71.320709][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.356130][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.370787][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.393847][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.470207][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.491878][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.519862][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.533172][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.551022][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.568738][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.581094][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.599503][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.609972][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.626813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.640342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.666597][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.705495][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.722849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.733598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.745609][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.753656][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.768461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.786168][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.793608][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.804612][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.815905][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.830278][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.857089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.868675][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.879747][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.887986][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.949017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.960521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.994759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.009962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.038049][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.064804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.075969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.085456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.098933][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.110528][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.125874][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.135971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.146778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.163798][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.177380][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.192781][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.200142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.210416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.220437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.230143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.239416][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.246849][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.275829][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.288425][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.299809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.308830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.317801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.328928][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.336387][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.345409][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.354158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.371286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.381622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.392278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.401601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.422471][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.436578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.445888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.459227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.518216][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.529003][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.538755][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.545943][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.555378][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.564421][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.573465][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.580573][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.589039][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.598392][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.607718][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.616950][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.627223][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.650939][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.659640][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.668841][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.679765][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.688955][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.698773][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.708025][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.718751][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.728656][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.770193][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.780845][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.790618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.798829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.807239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.816053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.824124][ T4251] Bluetooth: hci4: command 0x041b tx timeout [ 72.830796][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 72.835702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.838090][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 72.855062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.870865][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.900790][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.908366][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 72.915154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.927158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.932552][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 72.942441][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.965469][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.978821][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.988815][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.995976][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.031004][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.050397][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.060259][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.070343][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.080655][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.093070][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.102165][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.109645][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.131896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.150587][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.172324][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.180858][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.219290][ T4185] device veth0_vlan entered promiscuous mode [ 73.238930][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.265558][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.275437][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.284092][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.295375][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.305662][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.315209][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.323892][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.333303][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.343593][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.353123][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.362589][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.380735][ T4185] device veth1_vlan entered promiscuous mode [ 73.397723][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.411213][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.436625][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.447739][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.457453][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.466819][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.477045][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.484427][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.493060][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.500818][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.519027][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.537794][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.575554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.592766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.601479][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.608815][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.623695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.631252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.659489][ T4185] device veth0_macvtap entered promiscuous mode [ 73.673962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.683403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.697379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.708000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.717496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.738088][ T4185] device veth1_macvtap entered promiscuous mode [ 73.750505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.758761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.771388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.780635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.792638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.801313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.809878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.821425][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.839752][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.852683][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.868802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.878125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.889042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.900171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.909597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.919320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.928325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.937470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.966456][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.986918][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.011320][ T4186] device veth0_vlan entered promiscuous mode [ 74.029779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.040359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.050094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.059342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.069868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.079387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.092212][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.109684][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.120276][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.130332][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.145462][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.176129][ T4186] device veth1_vlan entered promiscuous mode [ 74.218476][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.228644][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238050][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.247320][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.259438][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.268770][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.277512][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.286694][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.296243][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.306588][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.315769][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.324066][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.349713][ T4188] device veth0_vlan entered promiscuous mode [ 74.380587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.389657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.404726][ T4188] device veth1_vlan entered promiscuous mode [ 74.425909][ T4183] device veth0_vlan entered promiscuous mode [ 74.433691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.441620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.450037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.459742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.471465][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.480706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.490206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.535155][ T4186] device veth0_macvtap entered promiscuous mode [ 74.572500][ T4183] device veth1_vlan entered promiscuous mode [ 74.608838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.619932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.635376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.644511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.656088][ T4188] device veth0_macvtap entered promiscuous mode [ 74.667057][ T4186] device veth1_macvtap entered promiscuous mode [ 74.699598][ T4188] device veth1_macvtap entered promiscuous mode [ 74.763275][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.771529][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.782744][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.797024][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.814414][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.847773][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.859333][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.872864][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.881340][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.895986][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.902912][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 74.906959][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.914878][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 74.922019][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.933803][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.937992][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 74.943400][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.958319][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.969571][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.980031][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.991304][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 74.995582][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.998625][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 75.017888][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.027310][ T4183] device veth0_macvtap entered promiscuous mode [ 75.040905][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.052465][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.063936][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.065411][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.079862][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.097685][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.112191][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.121148][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.133408][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.142207][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.151344][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.162891][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.174000][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.184514][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.195245][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.207151][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.218730][ T4183] device veth1_macvtap entered promiscuous mode [ 75.239193][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.248983][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.259855][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.272907][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.282280][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.291298][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.301250][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.331443][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.348662][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.361323][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.378476][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.389301][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.400591][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.415061][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.427418][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.439745][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.450569][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.462860][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.473315][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.484315][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.496197][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.505036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.514505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.524000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.533308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.550290][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.559892][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.568737][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.579063][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.634563][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.649030][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.659063][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.668138][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.697942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.816242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.829423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.878063][ T4182] device veth0_vlan entered promiscuous mode [ 75.900853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.911668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.979310][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.996750][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.009233][ T4182] device veth1_vlan entered promiscuous mode [ 76.050881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.065033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.092515][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.100570][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.122177][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.139082][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.152579][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.160757][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.171195][ T4295] loop0: detected capacity change from 0 to 32768 [ 76.183591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.192371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.201065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.219260][ T4182] device veth0_macvtap entered promiscuous mode [ 76.253821][ T4182] device veth1_macvtap entered promiscuous mode [ 76.280391][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.307005][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.317967][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.330349][ T4295] XFS (loop0): Mounting V5 Filesystem [ 76.339074][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.373178][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.385354][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.396603][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.407658][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.419517][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.439633][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.460772][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.478966][ T4295] XFS (loop0): Ending clean mount [ 76.492988][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.518217][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.528951][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.538403][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.548869][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.565979][ T4295] XFS (loop0): Quotacheck needed: Please wait. [ 76.570627][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.590708][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.619858][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.640723][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.640727][ T4295] XFS (loop0): Quotacheck: Done. [ 76.651142][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.676145][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.689870][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.708870][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.728114][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.752338][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.756134][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.760718][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.777904][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.802043][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.819959][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.847507][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.871551][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.891355][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.964317][ T4185] XFS (loop0): Unmounting Filesystem [ 76.991443][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 77.007823][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 77.016418][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.024865][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 77.051620][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.062623][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 77.081422][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 77.090664][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.134017][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.171858][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.188456][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.303660][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.321870][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.373651][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.704813][ T4307] loop3: detected capacity change from 0 to 32768 [ 77.824948][ T4307] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.838444][ T4322] loop0: detected capacity change from 0 to 2048 [ 77.883557][ T4307] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.960429][ T4322] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 78.032187][ T4307] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 10ms [ 78.049376][ T4322] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 78.074979][ T1326] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.094872][ T1326] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.114141][ T4322] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 78.163572][ T4322] UDF-fs: Scanning with blocksize 512 failed [ 78.244802][ T4322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.278503][ T1326] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 183ms [ 78.308388][ T1326] gfs2: fsid=syz:syz.0: jid=0: Done [ 78.328567][ T4307] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 78.373241][ T4315] loop2: detected capacity change from 0 to 32768 [ 78.470675][ T4315] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4315) [ 78.579562][ T4315] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 78.652003][ T4315] BTRFS info (device loop2): using free space tree [ 78.678053][ T4315] BTRFS info (device loop2): has skinny extents [ 78.707628][ T4320] loop4: detected capacity change from 0 to 32768 [ 78.779287][ T4320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4320) [ 78.870346][ T4320] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 78.896021][ T4317] loop1: detected capacity change from 0 to 32768 [ 78.935246][ T4320] BTRFS info (device loop4): force clearing of disk cache [ 78.946247][ T4320] BTRFS info (device loop4): metadata ratio 4 [ 78.956130][ T4320] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.968685][ T4320] BTRFS info (device loop4): force lzo compression, level 0 [ 78.977136][ T4320] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 78.996804][ T4320] BTRFS info (device loop4): trying to use backup root at mount time [ 79.027764][ T4320] BTRFS info (device loop4): doing ref verification [ 79.036956][ T4315] BTRFS info (device loop2): enabling ssd optimizations [ 79.085024][ T4317] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 79.138175][ T4320] BTRFS info (device loop4): enabling auto defrag [ 79.181876][ T4320] BTRFS info (device loop4): disabling tree log [ 79.189368][ T4317] CPU: 1 PID: 4317 Comm: syz.1.7 Not tainted syzkaller #0 [ 79.196968][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.207905][ T4317] Call Trace: [ 79.212308][ T4317] [ 79.215280][ T4317] dump_stack_lvl+0x168/0x230 [ 79.220225][ T4317] ? show_regs_print_info+0x20/0x20 [ 79.225575][ T4317] ? load_image+0x3b0/0x3b0 [ 79.230254][ T4317] sysfs_create_dir_ns+0x252/0x280 [ 79.235435][ T4317] ? __lock_acquire+0x7c60/0x7c60 [ 79.240512][ T4317] ? sysfs_warn_dup+0xa0/0xa0 [ 79.245252][ T4317] ? do_raw_spin_unlock+0x11d/0x230 [ 79.250514][ T4317] kobject_add_internal+0x662/0xd00 [ 79.251894][ T4320] BTRFS info (device loop4): using free space tree [ 79.255783][ T4317] kobject_init_and_add+0x122/0x190 [ 79.267878][ T4317] ? lockdep_softirqs_off+0x420/0x420 [ 79.273478][ T4317] ? kobject_add+0x210/0x210 [ 79.278122][ T4317] ? __init_swait_queue_head+0xa5/0x150 [ 79.283930][ T4317] gfs2_sys_fs_add+0x234/0x480 [ 79.288768][ T4317] ? gfs2_recover_set+0x240/0x240 [ 79.294080][ T4317] ? snprintf+0xd7/0x120 [ 79.298377][ T4317] ? __free_pages+0x95/0x1a0 [ 79.303027][ T4317] ? vscnprintf+0x80/0x80 [ 79.307449][ T4317] gfs2_fill_super+0x128d/0x1f50 [ 79.312458][ T4317] ? gfs2_reconfigure+0xcd0/0xcd0 [ 79.315889][ T4320] BTRFS info (device loop4): has skinny extents [ 79.317552][ T4317] ? preempt_count_add+0x8d/0x190 [ 79.329069][ T4317] ? sb_set_blocksize+0xa5/0xe0 [ 79.334190][ T4317] get_tree_bdev+0x3f1/0x610 [ 79.338856][ T4317] ? gfs2_reconfigure+0xcd0/0xcd0 [ 79.344083][ T4317] gfs2_get_tree+0x4d/0x1e0 [ 79.348647][ T4317] vfs_get_tree+0x88/0x270 [ 79.353146][ T4317] do_new_mount+0x24a/0xa40 [ 79.357906][ T4317] __se_sys_mount+0x2d6/0x3c0 [ 79.362647][ T4317] ? __x64_sys_mount+0xc0/0xc0 [ 79.367682][ T4317] ? lockdep_hardirqs_on+0x94/0x140 [ 79.373024][ T4317] ? __x64_sys_mount+0x1c/0xc0 [ 79.377843][ T4317] do_syscall_64+0x4c/0xa0 [ 79.382319][ T4317] ? clear_bhb_loop+0x30/0x80 [ 79.387050][ T4317] ? clear_bhb_loop+0x30/0x80 [ 79.391783][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.397900][ T4317] RIP: 0033:0x7f78a7791eea [ 79.402535][ T4317] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.422606][ T4317] RSP: 002b:00007f78a59f6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.431200][ T4317] RAX: ffffffffffffffda RBX: 00007f78a59f6ef0 RCX: 00007f78a7791eea [ 79.439228][ T4317] RDX: 0000200000000140 RSI: 0000200000012500 RDI: 00007f78a59f6eb0 [ 79.447331][ T4317] RBP: 0000200000000140 R08: 00007f78a59f6ef0 R09: 0000000000210401 [ 79.455616][ T4317] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 79.463628][ T4317] R13: 00007f78a59f6eb0 R14: 00000000000125d9 R15: 0000200000000180 [ 79.471838][ T4317] [ 79.486133][ T4317] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 79.500047][ T4317] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 79.718353][ T4348] loop0: detected capacity change from 0 to 32768 [ 79.789640][ T4323] BTRFS warning (device loop4): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 79.902777][ T4320] BTRFS warning (device loop4): couldn't read tree root [ 79.919697][ T155] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 79.938564][ T4357] loop1: detected capacity change from 0 to 32768 [ 79.976442][ T4348] XFS (loop0): Mounting V5 Filesystem [ 79.986903][ T4357] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 80.005748][ T4357] CPU: 0 PID: 4357 Comm: syz.1.12 Not tainted syzkaller #0 [ 80.013331][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.024009][ T4357] Call Trace: [ 80.027504][ T4357] [ 80.030643][ T4357] dump_stack_lvl+0x168/0x230 [ 80.035719][ T4357] ? show_regs_print_info+0x20/0x20 [ 80.041248][ T4357] ? load_image+0x3b0/0x3b0 [ 80.044826][ T4320] BTRFS warning (device loop4): couldn't read tree root [ 80.046338][ T4357] sysfs_create_dir_ns+0x252/0x280 [ 80.058612][ T4357] ? __lock_acquire+0x7c60/0x7c60 [ 80.063727][ T4357] ? sysfs_warn_dup+0xa0/0xa0 [ 80.068486][ T4357] ? do_raw_spin_unlock+0x11d/0x230 [ 80.073843][ T4357] kobject_add_internal+0x662/0xd00 [ 80.079115][ T4357] kobject_init_and_add+0x122/0x190 [ 80.084860][ T4357] ? lockdep_softirqs_off+0x420/0x420 [ 80.091161][ T4357] ? kobject_add+0x210/0x210 [ 80.095851][ T4357] ? __init_swait_queue_head+0xa5/0x150 [ 80.101878][ T4357] gfs2_sys_fs_add+0x234/0x480 [ 80.104777][ T4320] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 80.106835][ T4357] ? gfs2_recover_set+0x240/0x240 [ 80.106878][ T4357] ? snprintf+0xd7/0x120 [ 80.106903][ T4357] ? __free_pages+0x95/0x1a0 [ 80.106928][ T4357] ? vscnprintf+0x80/0x80 [ 80.106965][ T4357] gfs2_fill_super+0x128d/0x1f50 [ 80.107002][ T4357] ? gfs2_reconfigure+0xcd0/0xcd0 [ 80.147510][ T4357] ? preempt_count_add+0x8d/0x190 [ 80.152858][ T4357] ? sb_set_blocksize+0xa5/0xe0 [ 80.157770][ T4357] get_tree_bdev+0x3f1/0x610 [ 80.162414][ T4357] ? gfs2_reconfigure+0xcd0/0xcd0 [ 80.167491][ T4357] gfs2_get_tree+0x4d/0x1e0 [ 80.172042][ T4357] vfs_get_tree+0x88/0x270 [ 80.176645][ T4357] do_new_mount+0x24a/0xa40 [ 80.181476][ T4357] __se_sys_mount+0x2d6/0x3c0 [ 80.186313][ T4357] ? __x64_sys_mount+0xc0/0xc0 [ 80.191345][ T4357] ? lockdep_hardirqs_on+0x94/0x140 [ 80.197021][ T4357] ? __x64_sys_mount+0x1c/0xc0 [ 80.201845][ T4357] do_syscall_64+0x4c/0xa0 [ 80.206309][ T4357] ? clear_bhb_loop+0x30/0x80 [ 80.211668][ T4357] ? clear_bhb_loop+0x30/0x80 [ 80.217171][ T4357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.223209][ T4357] RIP: 0033:0x7f78a7791eea [ 80.228104][ T4357] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.234185][ T4320] BTRFS warning (device loop4): couldn't read tree root [ 80.247928][ T4357] RSP: 002b:00007f78a59f6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.247961][ T4357] RAX: ffffffffffffffda RBX: 00007f78a59f6ef0 RCX: 00007f78a7791eea [ 80.247976][ T4357] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f78a59f6eb0 [ 80.247990][ T4357] RBP: 000020000001f680 R08: 00007f78a59f6ef0 R09: 0000000000000000 [ 80.248004][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 80.248017][ T4357] R13: 00007f78a59f6eb0 R14: 000000000001f7dd R15: 0000200000000380 [ 80.248049][ T4357] [ 80.329559][ T4357] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 80.343613][ T4357] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 80.400133][ T4320] BTRFS info (device loop4): enabling ssd optimizations [ 80.416510][ T4320] BTRFS info (device loop4): clearing free space tree [ 80.461640][ T4320] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.473128][ T4320] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.560592][ T4348] XFS (loop0): Ending clean mount [ 80.616444][ T4320] BTRFS info (device loop4): creating free space tree [ 80.654440][ T4320] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.742262][ T4320] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.173081][ T4185] XFS (loop0): Unmounting Filesystem [ 81.195760][ T4184] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (4184) [ 81.362622][ T4400] loop1: detected capacity change from 0 to 47 [ 81.377821][ T4400] ======================================================= [ 81.377821][ T4400] WARNING: The mand mount option has been deprecated and [ 81.377821][ T4400] and is ignored by this kernel. Remove the mand [ 81.377821][ T4400] option from the mount to silence this warning. [ 81.377821][ T4400] ======================================================= [ 81.498662][ T4403] kernel profiling enabled (shift: 5) [ 81.571828][ T4393] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.788361][ T4407] loop4: detected capacity change from 0 to 512 [ 81.821966][ T4393] usb 4-1: Using ep0 maxpacket: 32 [ 81.892135][ T4407] EXT4-fs (loop4): inline encryption not supported [ 81.949276][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.962679][ T4407] EXT4-fs (loop4): Test dummy encryption mode enabled [ 81.969823][ T4407] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.994736][ T4393] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.045768][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.086976][ T4407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.140215][ T4393] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.318768][ T4393] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.355200][ T4407] EXT4-fs (loop4): 1 truncate cleaned up [ 82.460069][ T4407] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,inlinecrypt,test_dummy_encryption=v1,barrier,sysvgroups,nogrpid,. Quota mode: none. [ 82.608797][ T4393] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.807977][ T4393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.885481][ T4393] usb 4-1: config 0 descriptor?? [ 83.160023][ T4407] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 83.179063][ T4435] device syzkaller0 entered promiscuous mode [ 83.214304][ T4393] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 83.293529][ T4435] tipc: Started in network mode [ 83.327780][ T4435] tipc: Node identity ae6620c7914b, cluster identity 4711 [ 83.371928][ T4435] tipc: Enabled bearer , priority 0 [ 83.404131][ T4432] tipc: Resetting bearer [ 83.521415][ T4432] tipc: Disabling bearer [ 84.549439][ T4397] usb 4-1: USB disconnect, device number 2 [ 84.567896][ T4417] loop0: detected capacity change from 0 to 32768 [ 84.613782][ T4397] usblp0: removed [ 84.628046][ T4417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (4417) [ 84.844668][ T4417] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 84.904152][ T4417] BTRFS info (device loop0): using free space tree [ 84.944674][ T4417] BTRFS info (device loop0): has skinny extents [ 85.021644][ T4430] loop2: detected capacity change from 0 to 32768 [ 85.116607][ T4430] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.131984][ T4430] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.238302][ T4430] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 85.475476][ T286] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.494341][ T286] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.499546][ T4184] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4184) [ 85.518974][ T4417] BTRFS error (device loop0): open_ctree failed: -12 [ 85.704396][ T4491] loop1: detected capacity change from 0 to 512 [ 85.712852][ T286] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 218ms [ 85.720513][ T286] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.726156][ T4430] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.842154][ T4491] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 86.057844][ T4430] syz.2.22 (4430): drop_caches: 2 [ 86.305729][ T4491] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 87.352366][ T4501] loop1: detected capacity change from 0 to 32768 [ 87.411245][ T4501] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 87.433267][ T4501] BTRFS info (device loop1): force clearing of disk cache [ 87.472934][ T4501] BTRFS info (device loop1): enabling auto defrag [ 87.480199][ T4501] BTRFS info (device loop1): max_inline at 0 [ 87.497531][ T4501] BTRFS info (device loop1): enabling disk space caching [ 87.582111][ T4501] BTRFS info (device loop1): disk space caching is enabled [ 87.623023][ T4501] BTRFS info (device loop1): has skinny extents [ 88.958869][ T4501] BTRFS info (device loop1): enabling ssd optimizations [ 88.997371][ T4501] BTRFS info (device loop1): clearing free space tree [ 89.044818][ T4501] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.115599][ T4501] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.213269][ T4535] loop2: detected capacity change from 0 to 4096 [ 89.269395][ T4515] loop4: detected capacity change from 0 to 32768 [ 89.324915][ T4535] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 89.345077][ T4535] UDF-fs: Scanning with blocksize 512 failed [ 89.358056][ T4515] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.37 (4515) [ 89.379059][ T4539] tap0: tun_chr_ioctl cmd 2147767506 [ 89.418438][ T4535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.434064][ T4541] tap0: tun_chr_ioctl cmd 2148553947 [ 89.455894][ T4515] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 89.522641][ T4515] BTRFS info (device loop4): enabling auto defrag [ 89.546465][ T4515] BTRFS info (device loop4): turning on sync discard [ 89.577275][ T4515] BTRFS info (device loop4): force clearing of disk cache [ 89.631370][ T4426] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 89.678403][ T4515] BTRFS info (device loop4): using default commit interval 30s [ 89.727064][ T4515] BTRFS info (device loop4): max_inline at 0 [ 89.771802][ T4515] BTRFS info (device loop4): disabling free space tree [ 89.778740][ T4515] BTRFS info (device loop4): has skinny extents [ 90.441919][ T4515] BTRFS info (device loop4): enabling ssd optimizations [ 90.451131][ T4515] BTRFS info (device loop4): clearing free space tree [ 90.475782][ T4515] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.486586][ T4515] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.709906][ T4515] BTRFS info (device loop4): balance: start -d -m [ 90.788662][ T4515] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 91.010353][ T4515] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 91.127720][ T4515] BTRFS info (device loop4): balance: canceled [ 91.728492][ T4645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.275579][ T1325] cfg80211: failed to load regulatory.db [ 97.935411][ T4955] Zero length message leads to an empty skb [ 98.647232][ T5009] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.844809][ T5022] kvm [5019]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffffffffffffff [ 99.027365][ T5022] kvm [5019]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0x555503 [ 99.044957][ T5028] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.090650][ T5037] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.106989][ T5022] kvm [5019]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 99.257693][ T5022] kvm [5019]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffffffffffffff [ 99.407062][ T5046] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.517104][ T5051] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.885624][ T5077] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.919324][ T5071] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.304149][ T5099] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.358004][ T5099] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.656880][ T5118] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.943568][ T5126] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=394033392 (6304534272 ns) > initial count (5490469600 ns). Using initial count to start timer. [ 101.037768][ T5135] kvm [5133]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffffffffffffff [ 102.003046][ T5185] [ 102.005545][ T5185] ============================= [ 102.010518][ T5185] WARNING: suspicious RCU usage [ 102.074429][ T5185] syzkaller #0 Not tainted [ 102.103835][ T5185] ----------------------------- [ 102.132635][ T5185] include/linux/kvm_host.h:889 suspicious rcu_dereference_check() usage! [ 102.191923][ T5185] [ 102.191923][ T5185] other info that might help us debug this: [ 102.191923][ T5185] [ 102.222388][ T5185] [ 102.222388][ T5185] rcu_scheduler_active = 2, debug_locks = 1 [ 102.241478][ T5185] 1 lock held by syz.3.269/5185: [ 102.248119][ T5185] #0: ffff88805e8bc0c8 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x1c8/0xb80 [ 102.264241][ T5185] [ 102.264241][ T5185] stack backtrace: [ 102.270327][ T5185] CPU: 0 PID: 5185 Comm: syz.3.269 Not tainted syzkaller #0 [ 102.277652][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.287753][ T5185] Call Trace: [ 102.291363][ T5185] [ 102.294493][ T5185] dump_stack_lvl+0x168/0x230 [ 102.299236][ T5185] ? load_image+0x3b0/0x3b0 [ 102.303797][ T5185] ? show_regs_print_info+0x20/0x20 [ 102.309250][ T5185] ? lockdep_rcu_suspicious+0x110/0x180 [ 102.315126][ T5185] kvm_vcpu_memslots+0x1b6/0x200 [ 102.320118][ T5185] kvm_vcpu_gfn_to_memslot+0x2b/0x3c0 [ 102.325636][ T5185] ? free_nested+0x352/0x680 [ 102.330383][ T5185] kvm_vcpu_unmap+0x5b/0x80 [ 102.334964][ T5185] free_nested+0x3cf/0x680 [ 102.339455][ T5185] kvm_vcpu_ioctl_x86_set_vcpu_events+0x95b/0x1190 [ 102.346029][ T5185] kvm_arch_vcpu_ioctl+0x1092/0x19d0 [ 102.351703][ T5185] ? kvm_arch_vcpu_put+0x840/0x840 [ 102.357402][ T5185] ? is_bpf_text_address+0x254/0x270 [ 102.362832][ T5185] ? __kernel_text_address+0x9a/0x100 [ 102.368259][ T5185] ? mark_lock+0x94/0x320 [ 102.372639][ T5185] ? __lock_acquire+0x13ad/0x7c60 [ 102.377944][ T5185] ? kfree+0xef/0x2a0 [ 102.381987][ T5185] ? __se_sys_ioctl+0x48/0x170 [ 102.386840][ T5185] ? kfree+0xef/0x2a0 [ 102.391021][ T5185] ? kasan_set_track+0x62/0x70 [ 102.395836][ T5185] ? kasan_set_track+0x4b/0x70 [ 102.400653][ T5185] ? kasan_set_free_info+0x1f/0x40 [ 102.405821][ T5185] ? verify_lock_unused+0x140/0x140 [ 102.411065][ T5185] ? tomoyo_path_number_perm+0x48f/0x5d0 [ 102.416799][ T5185] ? __mutex_trylock_common+0x14f/0x250 [ 102.422602][ T5185] ? rcu_lock_release+0x20/0x20 [ 102.427591][ T5185] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 102.433284][ T5185] ? rcu_lock_release+0x5/0x20 [ 102.438096][ T5185] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 102.443084][ T5185] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 102.447988][ T5185] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 102.452887][ T5185] ? __mutex_lock_common+0x431/0x2390 [ 102.458455][ T5185] ? kfree+0xef/0x2a0 [ 102.462495][ T5185] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 102.468180][ T5185] ? verify_lock_unused+0x140/0x140 [ 102.473435][ T5185] ? mutex_lock_io_nested+0x60/0x60 [ 102.478815][ T5185] kvm_vcpu_ioctl+0x6b1/0xb80 [ 102.483565][ T5185] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 102.489366][ T5185] ? bpf_lsm_file_ioctl+0x5/0x10 [ 102.494605][ T5185] ? security_file_ioctl+0x7c/0xa0 [ 102.499897][ T5185] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 102.505678][ T5185] __se_sys_ioctl+0xfa/0x170 [ 102.510320][ T5185] do_syscall_64+0x4c/0xa0 [ 102.514755][ T5185] ? clear_bhb_loop+0x30/0x80 [ 102.519463][ T5185] ? clear_bhb_loop+0x30/0x80 [ 102.524241][ T5185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.530235][ T5185] RIP: 0033:0x7f9f5a995749 [ 102.534688][ T5185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.554692][ T5185] RSP: 002b:00007f9f58bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.563159][ T5185] RAX: ffffffffffffffda RBX: 00007f9f5abebfa0 RCX: 00007f9f5a995749 [ 102.571441][ T5185] RDX: 00002000000001c0 RSI: 000000004040aea0 RDI: 0000000000000005 [ 102.579720][ T5185] RBP: 00007f9f5aa19f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.587710][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.596077][ T5185] R13: 00007f9f5abec038 R14: 00007f9f5abebfa0 R15: 00007ffdee5136d8 [ 102.604197][ T5185]