last executing test programs: 3.358887948s ago: executing program 3 (id=230): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000001, 0x2, 0x6, 0x2, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 3.178500335s ago: executing program 3 (id=232): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0xe0}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200440e0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x1}}, 0x4c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) r5 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 2.512973144s ago: executing program 1 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000002, 0x0, 0x7fffffff}]}) 2.336556701s ago: executing program 0 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x5) close(0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000020001c000000200ffffff"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(0x5) close(0x4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.265908874s ago: executing program 1 (id=240): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0xb84, 0xfffffffffffffff8}}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}], 0x62}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.050051783s ago: executing program 1 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x380, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000002340)=ANY=[@ANYBLOB="11"]) 1.869797561s ago: executing program 0 (id=246): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) 1.840333572s ago: executing program 1 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r4, 0x100000b, 0x28031, 0xffffffffffffffff, 0x0) 1.706950988s ago: executing program 0 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.439941989s ago: executing program 2 (id=251): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfe, 0x40}], 0x8000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x2, 0x8, 0x3, 0x6, 0xb9, 0x1, 0xe, 0x5, 0x203}, {0x804, 0x1, 0x4, 0x45, 0x7, 0x2, 0x1, 0x1, 0x0, 0x4, 0x8, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xfd, 0x70, 0x4, 0x5, 0x24ab}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x10, 0x5, 0x8, '\x00', 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x0, 0x1000002000002, 0x0, 0x2004c7, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3, 0x3], 0x1, 0x3cb1b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x2, 0xf, 0x5, 0x4, 0x9, 0x3, 0xb, 0x0, 0x1, 0x3, 0x3}, {0x8080000, 0xdddd0000, 0xe, 0x14, 0x1, 0x9, 0x3, 0xe, 0x40, 0x6, 0x6}, {0x8080000, 0x5000, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x8, 0x5, 0x3}, {0x10000, 0x3000, 0x1a, 0xf9, 0x7f, 0x7, 0x8, 0x7f, 0x9, 0x2, 0x3, 0x6}, {0xd000, 0x8000000, 0x0, 0xd, 0x3, 0x2d, 0x6, 0xc, 0xfc, 0x0, 0xff, 0xe5}, {0x2, 0x10000, 0xd, 0x5, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x98, 0xfe, 0x4}, {0x5000, 0x8000000, 0x83eba38b718fbea4, 0x9, 0x0, 0xb, 0xb, 0x3, 0x4, 0x0, 0x4, 0x9}, {0x0, 0x1, 0x10, 0x4, 0x3, 0xfe, 0x0, 0xf9, 0x9e, 0x8, 0x0, 0xfe}, {0xffff1000, 0xcb}, {0xffff1000, 0x17}, 0x40019, 0x0, 0x2000, 0x0, 0x20100000002, 0x1000, 0xdddd1000, [0x2, 0x7, 0x9, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xffff, 0xfffffffffffffffb, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.366813463s ago: executing program 0 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.164311511s ago: executing program 3 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1ff, 0x4, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000007300004000000000ef1b000000000000757cf754967d1607dd"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) 1.120176453s ago: executing program 2 (id=254): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000001, 0x2, 0x6, 0x2, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 1.061125015s ago: executing program 4 (id=255): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) 993.315038ms ago: executing program 3 (id=256): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff3, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x4, 0x4, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x81, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3, 0x1000}], 0x9}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000020001c000000200ffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x428c45d425c93519, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x100000000, 0x0}) 876.150833ms ago: executing program 2 (id=257): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x3ffc, r2}) close(r1) 872.079943ms ago: executing program 4 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40040, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 731.927319ms ago: executing program 1 (id=259): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) 637.721223ms ago: executing program 4 (id=261): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000003, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0x12, 0x4, 0x4000000000006, 0x0, 0x49], 0xdddd1000, 0x1c6256}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x101}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x8, 0x0, 0x8, 0x8, 0x8, 0x4c, 0x2, 0x6, 0x4, 0x4, 0x3, 0x10, 0xa6}, {0x7ff, 0x800, 0x6, 0x1, 0x2, 0x4, 0x8, 0x8, 0x9, 0xee, 0xfd, 0x4, 0x7fffffff}, {0x9, 0xa, 0x9, 0x1, 0xff, 0x63, 0x7, 0x9, 0x2, 0x2, 0x7f, 0x3, 0x870}], 0x210008}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x20001000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x80000000005, 0x0, 0x1, 0x0, 0x7fffffffffffffff, 0x4000001000], 0x2000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 576.858326ms ago: executing program 3 (id=262): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 513.026768ms ago: executing program 2 (id=263): r0 = socket(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) 395.966293ms ago: executing program 1 (id=264): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0xe0}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200440e0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x1}}, 0x4c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) r5 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 356.375825ms ago: executing program 2 (id=265): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r6, 0x7ac87000) sendmmsg$inet6(r6, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f0000008600)="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", 0x100}, {&(0x7f0000002380)="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", 0xc6b}], 0x7}}], 0x1, 0x8800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="27030200590214000600002fb96d", 0xe}, {&(0x7f0000000240)="499e1cf1c330f6bff8971cb97693054e96132d70", 0x14}], 0x2}, 0x40084) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 336.241556ms ago: executing program 4 (id=266): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002010040"]) 279.881388ms ago: executing program 0 (id=267): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000001, 0x2, 0x6, 0x2, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 234.01347ms ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x14}, {&(0x7f00000001c0)={0x10, 0x36, 0x2, 0x70bd26, 0x25dfdbfc}, 0x10}], 0x2}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0xfffc, 0x6, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 98.298936ms ago: executing program 0 (id=269): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20048840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 96.938956ms ago: executing program 3 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$kcm(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 0s ago: executing program 4 (id=271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40040, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 52.210367][ T4171] cgroup: Unknown subsys name 'net' [ 52.369860][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.837527][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.677529][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 55.760180][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 55.816904][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 55.847624][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 55.907801][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 55.952037][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.959363][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.968188][ T4188] device bridge_slave_0 entered promiscuous mode [ 55.977071][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.984265][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.991977][ T4191] device bridge_slave_0 entered promiscuous mode [ 56.017888][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.025074][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.033001][ T4188] device bridge_slave_1 entered promiscuous mode [ 56.040737][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.047975][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.056612][ T4191] device bridge_slave_1 entered promiscuous mode [ 56.070469][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.077866][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.085967][ T4181] device bridge_slave_0 entered promiscuous mode [ 56.131107][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.138302][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.147882][ T4181] device bridge_slave_1 entered promiscuous mode [ 56.162708][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.177913][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.189441][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.212778][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.219971][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.228576][ T4182] device bridge_slave_0 entered promiscuous mode [ 56.247500][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.265198][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.274957][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.282021][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.290737][ T4182] device bridge_slave_1 entered promiscuous mode [ 56.312886][ T4188] team0: Port device team_slave_0 added [ 56.320272][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.350310][ T4188] team0: Port device team_slave_1 added [ 56.371171][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.378535][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.386768][ T4193] device bridge_slave_0 entered promiscuous mode [ 56.396654][ T4191] team0: Port device team_slave_0 added [ 56.420405][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.430516][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.438405][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.446930][ T4193] device bridge_slave_1 entered promiscuous mode [ 56.454751][ T4191] team0: Port device team_slave_1 added [ 56.469126][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.480393][ T4181] team0: Port device team_slave_0 added [ 56.489502][ T4181] team0: Port device team_slave_1 added [ 56.517116][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.524087][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.550780][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.583833][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.590922][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.617491][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.629819][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.636843][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.662891][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.693221][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.705095][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.719474][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.726692][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.752760][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.771751][ T4182] team0: Port device team_slave_0 added [ 56.778385][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.785498][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.812203][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.852487][ T4182] team0: Port device team_slave_1 added [ 56.858969][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.866237][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.892812][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.916467][ T4193] team0: Port device team_slave_0 added [ 56.952507][ T4191] device hsr_slave_0 entered promiscuous mode [ 56.959331][ T4191] device hsr_slave_1 entered promiscuous mode [ 56.967733][ T4193] team0: Port device team_slave_1 added [ 56.977641][ T4188] device hsr_slave_0 entered promiscuous mode [ 56.984650][ T4188] device hsr_slave_1 entered promiscuous mode [ 56.991487][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.999614][ T4188] Cannot create hsr debugfs directory [ 57.037273][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.044643][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.070819][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.106740][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.113701][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.139799][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.151545][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.158834][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.184840][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.207931][ T4181] device hsr_slave_0 entered promiscuous mode [ 57.215483][ T4181] device hsr_slave_1 entered promiscuous mode [ 57.222002][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.229880][ T4181] Cannot create hsr debugfs directory [ 57.240476][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.247528][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.273744][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.351082][ T4182] device hsr_slave_0 entered promiscuous mode [ 57.358306][ T4182] device hsr_slave_1 entered promiscuous mode [ 57.365371][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.373108][ T4182] Cannot create hsr debugfs directory [ 57.415271][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 57.417144][ T4193] device hsr_slave_0 entered promiscuous mode [ 57.422125][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 57.435027][ T4193] device hsr_slave_1 entered promiscuous mode [ 57.435434][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 57.447912][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 57.449058][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.461534][ T4193] Cannot create hsr debugfs directory [ 57.494440][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 57.710310][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.721655][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.731569][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.750837][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.783624][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.801166][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.810643][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.821318][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.908601][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.921055][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.933767][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.943418][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.983687][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.002585][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.016231][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.049752][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.082705][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.099243][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.113454][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.123629][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.136894][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.159615][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.173352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.183746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.201796][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.228198][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.237046][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.264811][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.275889][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.285205][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.292444][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.302323][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.316622][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.326822][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.336758][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.345723][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.352839][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.375172][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.395463][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.406834][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.416339][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.423415][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.432050][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.440760][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.449361][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.456459][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.480277][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.488308][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.498484][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.508147][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.517963][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.532848][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.563049][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.576097][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.585067][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.593613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.603855][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.612817][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.621679][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.631293][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.640705][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.647905][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.656135][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.664060][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.672094][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.695432][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.704931][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.713295][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.722395][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.733505][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.742398][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.751581][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.760111][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.786338][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.801545][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.814136][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.826887][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.837270][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.846670][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.853810][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.861849][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.870923][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.880649][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.890382][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.900471][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.909104][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.918660][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.929334][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.946320][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.977622][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.988013][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.003874][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.013751][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.029550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.038452][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.046399][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.059636][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.069357][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.096484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.106876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.117596][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.124743][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.134150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.143637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.167571][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.174727][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.191227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.199702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.208656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.218532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.227497][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.241888][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.254072][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.284556][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.293645][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.311819][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.322328][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.331447][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.340734][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.374148][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.382275][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.399062][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.411223][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.418382][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.428226][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.435968][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.443581][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.452643][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.463112][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.470358][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.478179][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.486619][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 59.487831][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.492985][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 59.501309][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.513009][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 59.516782][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.522312][ T4244] Bluetooth: hci3: command 0x041b tx timeout [ 59.536232][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.554964][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.569195][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.574963][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 59.585354][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.605871][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.613460][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.631091][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.665711][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.701292][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.712041][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.758645][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.768409][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.778499][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.789754][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.799684][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.822939][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.850582][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.858819][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.868634][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.876653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.886002][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.895520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.906708][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.986096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.995086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.004934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.013246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.022044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.030978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.046891][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.074092][ T4188] device veth0_vlan entered promiscuous mode [ 60.087860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.104939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.140753][ T4188] device veth1_vlan entered promiscuous mode [ 60.199855][ T4182] device veth0_vlan entered promiscuous mode [ 60.209606][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.219444][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.227946][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.237375][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.246997][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.255950][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.264774][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.273199][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.282468][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.291069][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.299781][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.308036][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.316646][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.324678][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.339191][ T4191] device veth0_vlan entered promiscuous mode [ 60.360484][ T4188] device veth0_macvtap entered promiscuous mode [ 60.369524][ T4193] device veth0_vlan entered promiscuous mode [ 60.377673][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.386504][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.395924][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.403420][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.411221][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.419984][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.441828][ T4182] device veth1_vlan entered promiscuous mode [ 60.451437][ T4188] device veth1_macvtap entered promiscuous mode [ 60.464655][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.471785][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.480304][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.488758][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.496814][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.506032][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.523790][ T4191] device veth1_vlan entered promiscuous mode [ 60.533934][ T4193] device veth1_vlan entered promiscuous mode [ 60.567709][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.591319][ T4182] device veth0_macvtap entered promiscuous mode [ 60.606918][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.615584][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.623488][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.631709][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.639917][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.650466][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.659806][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.668939][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.678117][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.692320][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.701207][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.710239][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.719380][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.728276][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.743714][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.755077][ T4182] device veth1_macvtap entered promiscuous mode [ 60.768836][ T4193] device veth0_macvtap entered promiscuous mode [ 60.779907][ T4193] device veth1_macvtap entered promiscuous mode [ 60.791240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.801134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.810201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.818451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.827491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.836421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.845716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.867519][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.877734][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.886801][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.895638][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.918357][ T4191] device veth0_macvtap entered promiscuous mode [ 60.928928][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.938454][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.954603][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.965538][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.978384][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.997140][ T4191] device veth1_macvtap entered promiscuous mode [ 61.015688][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.023519][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.032246][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.041475][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.050869][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.061925][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.072721][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.083444][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.104785][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.114761][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.126394][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.139416][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.158864][ T4181] device veth0_vlan entered promiscuous mode [ 61.170022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.181121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.195185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.203757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.216078][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.227384][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.237830][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.252436][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.263473][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.278391][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.287199][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.296825][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.305653][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.322428][ T4181] device veth1_vlan entered promiscuous mode [ 61.330428][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.338846][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.347834][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.361601][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.370572][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.379441][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.388214][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.402807][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.414709][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.425247][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.436565][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.446673][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.457380][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.469158][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.521444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.530135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.538941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.550075][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.560737][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.571743][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 61.573217][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.578342][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 61.594380][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.595185][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 61.608621][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.610632][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 61.621939][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.638599][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.651497][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.661195][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 61.666211][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.676463][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.685339][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.705086][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.713843][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.723453][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.732332][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.747655][ T4181] device veth0_macvtap entered promiscuous mode [ 61.778333][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.788020][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.817429][ T4181] device veth1_macvtap entered promiscuous mode [ 61.828526][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.838339][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.849687][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.926881][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.927464][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.937968][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.953543][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.956055][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.975502][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.985666][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.996580][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.006899][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.017500][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.029157][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.044428][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.052420][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.066155][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.086787][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.102403][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.122730][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.140534][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.150604][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.161270][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.171258][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.181867][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.191790][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.202744][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.215294][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.223765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.232006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.241004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.268925][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.279728][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.280149][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.289141][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.303864][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.313691][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.343477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.377894][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.385628][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.391622][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.395091][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.413051][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.467376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.486611][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.512913][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.530271][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.559999][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.578128][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.618038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.688732][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.719305][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.729215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.871912][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.909634][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.948129][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.150094][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.175629][ T4244] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 63.316767][ T4313] netlink: 'syz.3.7': attribute type 13 has an invalid length. [ 63.363013][ T4313] netlink: 'syz.3.7': attribute type 17 has an invalid length. [ 63.480484][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.503768][ T4313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.565452][ T4244] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.633933][ T4244] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.654835][ T4244] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 63.676943][ T4244] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 63.696417][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.794859][ T4299] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 63.825663][ T4244] hub 5-1:1.0: bad descriptor, ignoring hub [ 63.831830][ T4244] hub: probe of 5-1:1.0 failed with error -5 [ 63.885919][ T4244] cdc_wdm 5-1:1.0: skipping garbage [ 63.891175][ T4244] cdc_wdm 5-1:1.0: skipping garbage [ 63.954321][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 63.967092][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 63.985355][ T4244] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 64.045462][ T4244] cdc_wdm 5-1:1.0: Unknown control protocol [ 64.057028][ T4257] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.078777][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 64.085135][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 64.116416][ T4244] usb 5-1: USB disconnect, device number 2 [ 64.148462][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 64.515615][ T4257] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.617859][ T4257] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 64.629961][ T4257] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 64.649668][ T4257] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 64.670746][ T4257] usb 1-1: config 129 has no interface number 0 [ 64.687306][ T4257] usb 1-1: config 129 has no interface number 1 [ 64.704100][ T4257] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 64.732340][ T4257] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 64.744063][ T4244] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 64.764871][ T4257] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 64.820452][ T4257] usb 1-1: config 129 interface 135 has no altsetting 0 [ 64.835070][ T4257] usb 1-1: config 129 interface 5 has no altsetting 0 [ 65.075530][ T4348] device syzkaller0 entered promiscuous mode [ 65.166230][ T4257] usb 1-1: string descriptor 0 read error: -22 [ 65.173170][ T4244] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.193943][ T4257] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 65.213930][ T4244] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.223735][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.232713][ T4244] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 65.245187][ T4244] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 65.258720][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.294721][ T4299] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.317394][ T4244] hub 5-1:1.0: bad descriptor, ignoring hub [ 65.331338][ T4257] usb 1-1: MIDIStreaming interface descriptor not found [ 65.343482][ T4244] hub: probe of 5-1:1.0 failed with error -5 [ 65.360770][ T4244] cdc_wdm 5-1:1.0: skipping garbage [ 65.394838][ T4244] cdc_wdm 5-1:1.0: skipping garbage [ 65.429137][ T4244] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 65.469738][ T4244] cdc_wdm 5-1:1.0: Unknown control protocol [ 65.484532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.549861][ T4358] loop8: detected capacity change from 0 to 8 [ 65.560553][ T4244] usb 5-1: USB disconnect, device number 3 [ 65.664120][ T4358] Dev loop8: unable to read RDB block 8 [ 65.680218][ T4358] loop8: unable to read partition table [ 65.688782][ T4358] loop8: partition table beyond EOD, truncated [ 65.732503][ T4358] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 65.782985][ T4258] usb 1-1: USB disconnect, device number 2 [ 66.597618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 66.607473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 66.864264][ T4222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.106520][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 67.274553][ T4222] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.328971][ T4222] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 67.352142][ T4222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.367602][ T4222] usb 1-1: config 0 descriptor?? [ 67.394327][ T4258] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 67.418971][ T4222] pwc: Askey VC010 type 2 USB webcam detected. [ 67.494802][ T4244] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.754370][ T4258] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.767745][ T4258] usb 4-1: config 0 has no interface number 0 [ 67.784393][ T4244] usb 5-1: Using ep0 maxpacket: 16 [ 67.794140][ T4258] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 67.809897][ T4258] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 67.821141][ T4258] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.847033][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.864497][ T4222] pwc: recv_control_msg error -32 req 02 val 2b00 [ 67.887528][ T4258] usb 4-1: config 0 descriptor?? [ 67.924618][ T4387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.932255][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 67.960132][ T4244] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 67.971490][ T4258] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 68.012529][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 68.053542][ T4244] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 68.154436][ T4222] pwc: recv_control_msg error -32 req 02 val 2c00 [ 68.214973][ T4222] pwc: recv_control_msg error -32 req 04 val 1000 [ 68.226831][ T4258] usb 4-1: USB disconnect, device number 2 [ 68.235032][ T4244] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 68.264410][ T4222] pwc: recv_control_msg error -32 req 04 val 1300 [ 68.274266][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.286750][ T4244] usb 5-1: Product: syz [ 68.290959][ T4244] usb 5-1: Manufacturer: syz [ 68.314002][ T4244] usb 5-1: SerialNumber: syz [ 68.339277][ T4222] pwc: recv_control_msg error -32 req 04 val 1400 [ 68.347965][ T4244] usb 5-1: config 0 descriptor?? [ 68.392238][ T4244] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 68.410338][ T4222] pwc: recv_control_msg error -32 req 02 val 2000 [ 68.419249][ T4244] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 68.474445][ T4222] pwc: recv_control_msg error -32 req 02 val 2100 [ 68.514423][ T4222] pwc: recv_control_msg error -32 req 04 val 1500 [ 68.574333][ T4222] pwc: recv_control_msg error -32 req 02 val 2500 [ 68.644375][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.754827][ T4244] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.779304][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 68.844601][ T4222] pwc: recv_control_msg error -71 req 02 val 2600 [ 68.884572][ T4222] pwc: recv_control_msg error -71 req 02 val 2900 [ 68.914413][ T4222] pwc: recv_control_msg error -71 req 02 val 2800 [ 68.934667][ T4222] pwc: recv_control_msg error -71 req 04 val 1100 [ 68.964518][ T4222] pwc: recv_control_msg error -71 req 04 val 1200 [ 68.985922][ T4222] pwc: Registered as video103. [ 68.991951][ T4222] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 69.014437][ T4222] usb 1-1: USB disconnect, device number 3 [ 69.016928][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.034244][ T4244] usb 2-1: Using ep0 maxpacket: 16 [ 69.044378][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.080544][ T7] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 69.121342][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.184596][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1032, setting to 64 [ 69.184961][ T7] usb 3-1: config 0 descriptor?? [ 69.415898][ T4244] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 69.434447][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.506824][ T4244] usb 2-1: Product: syz [ 69.519560][ T4244] usb 2-1: Manufacturer: syz [ 69.526668][ T4244] usb 2-1: SerialNumber: syz [ 69.558145][ T4244] usb 2-1: config 0 descriptor?? [ 69.646656][ T4244] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 69.678785][ T4244] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 69.691696][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 69.718012][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 69.784436][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 69.849213][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 69.861043][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 69.873973][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 69.891425][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 69.985094][ T7] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 70.109099][ T7] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 70.121616][ T4257] usb 5-1: USB disconnect, device number 4 [ 70.169871][ T4257] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 70.182686][ T4413] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 70.210493][ T4257] omninet 5-1:0.0: device disconnected [ 70.250836][ T4408] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 70.278446][ T4408] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.324528][ T4244] em28xx 2-1:0.0: chip ID is em2765 [ 70.525299][ T4419] device syzkaller0 entered promiscuous mode [ 70.674426][ T7] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 70.726846][ T7] usb 3-1: USB disconnect, device number 2 [ 70.845625][ T4424] fido_id[4424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 71.054437][ T4244] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 71.066684][ T4244] em28xx 2-1:0.0: board has no eeprom [ 71.074353][ T4237] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.333093][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.341066][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.354580][ T4237] usb 4-1: Using ep0 maxpacket: 16 [ 71.384597][ T4429] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 71.474548][ T4244] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 71.491875][ T4244] em28xx 2-1:0.0: dvb set to bulk mode. [ 71.497917][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.518520][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.547257][ T4237] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.565922][ T4237] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.582239][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.614305][ T4244] em28xx 2-1:0.0: Binding DVB extension [ 71.631561][ T4237] usb 4-1: config 0 descriptor?? [ 71.898061][ T4394] loop7: detected capacity change from 0 to 16384 [ 72.116673][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.136234][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.165554][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.194569][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.203197][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.244339][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.309542][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.337565][ T4437] process 'syz.4.40' launched './file0' with NULL argv: empty string added [ 72.347430][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.355170][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.379407][ T4237] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.404063][ T4237] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 72.421061][ T4237] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 72.434765][ T4237] microsoft 0003:045E:07DA.0002: no inputs found [ 72.441225][ T4237] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 72.464604][ T4237] usb 4-1: USB disconnect, device number 3 [ 72.593567][ T4438] fido_id[4438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 72.847682][ T4257] usb 2-1: USB disconnect, device number 2 [ 72.855525][ T4257] em28xx 2-1:0.0: Disconnecting em28xx [ 73.080406][ T4244] em28xx 2-1:0.0: Registering input extension [ 73.124877][ T4257] em28xx 2-1:0.0: Closing input extension [ 73.239796][ T4257] em28xx 2-1:0.0: Freeing device [ 73.793105][ T4466] device syzkaller0 entered promiscuous mode [ 73.808703][ T4462] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.574288][ T4244] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.834542][ T4244] usb 3-1: Using ep0 maxpacket: 16 [ 74.983355][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.025830][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.048667][ T4244] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.051816][ T4517] device syzkaller0 entered promiscuous mode [ 75.068178][ T4244] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.068207][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.128034][ T4244] usb 3-1: config 0 descriptor?? [ 75.393760][ T4530] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 75.420548][ T4530] pit: kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 75.438155][ T4536] device syzkaller0 entered promiscuous mode [ 75.441203][ T4530] pit: kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 75.457276][ T4530] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 75.469723][ T4530] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 75.590604][ T4541] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 75.604378][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.614861][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.631435][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.640788][ T4541] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 75.662709][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.675212][ T4541] pit: kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 75.688137][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.701385][ T4541] pit: kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 75.721030][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.749312][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.757137][ T4541] pit: kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 75.774223][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.797437][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.825358][ T4244] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 75.852064][ T4244] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 75.872866][ T4244] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 75.908995][ T4244] microsoft 0003:045E:07DA.0003: no inputs found [ 75.928713][ T4244] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 75.972013][ T4244] usb 3-1: USB disconnect, device number 3 [ 76.189411][ T4556] fido_id[4556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 76.252763][ T4562] Zero length message leads to an empty skb [ 76.607403][ T4576] device syzkaller0 entered promiscuous mode [ 76.844405][ T4258] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 77.444726][ T4258] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.457709][ T4258] usb 2-1: config 0 has no interface number 0 [ 77.464396][ T4258] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 77.479912][ T4258] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 77.493869][ T4258] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.508918][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.528644][ T4258] usb 2-1: config 0 descriptor?? [ 77.584418][ T4244] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.649045][ T4573] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.793637][ T4623] kvm: pic: level sensitive irq not supported [ 77.793997][ T4623] kvm: pic: non byte write [ 77.856469][ T4244] usb 1-1: Using ep0 maxpacket: 16 [ 77.878712][ T4626] device syzkaller0 entered promiscuous mode [ 77.913207][ T4258] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 78.014558][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.039800][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.102492][ T4244] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.181855][ T4244] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.195333][ T4288] usb 2-1: USB disconnect, device number 3 [ 78.204337][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 78.249962][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.339215][ T4244] usb 1-1: config 0 descriptor?? [ 78.866469][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 78.884234][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 78.901499][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 78.930809][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 78.962095][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 78.997922][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 79.031513][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 79.049368][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 79.102853][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 79.105471][ T4672] device syzkaller0 entered promiscuous mode [ 79.135363][ T4244] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 79.152779][ T4244] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 79.168241][ T4244] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 79.184284][ T4244] microsoft 0003:045E:07DA.0004: no inputs found [ 79.198983][ T4244] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 79.234999][ T4244] usb 1-1: USB disconnect, device number 4 [ 79.374289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.391746][ T4674] fido_id[4674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 79.493601][ T4678] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.772870][ T4685] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.926964][ T4691] user requested TSC rate below hardware speed [ 79.969254][ T4691] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 80.152931][ T4700] kvm [4698]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffffffffffffff [ 80.291491][ T4705] device syzkaller0 entered promiscuous mode [ 80.304341][ T4700] kvm [4698]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0x3 [ 80.341173][ T4707] device syzkaller0 entered promiscuous mode [ 80.658837][ T4714] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.730404][ T4714] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.996854][ T4738] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.071716][ T4738] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.076948][ T4750] device syzkaller0 entered promiscuous mode [ 81.299325][ T4756] device syzkaller0 entered promiscuous mode [ 81.567299][ T1325] cfg80211: failed to load regulatory.db [ 81.862149][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 82.135897][ T4802] device syzkaller0 entered promiscuous mode [ 82.174293][ T4237] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.291966][ T4804] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.300773][ T4807] device syzkaller0 entered promiscuous mode [ 82.451378][ T4237] usb 2-1: Using ep0 maxpacket: 16 [ 82.494016][ T4809] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.543158][ T4813] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.557494][ T4815] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.634396][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 82.650890][ T4237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 82.662861][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 82.679054][ T4237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 82.924426][ T4237] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 82.933578][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.936701][ T4829] device syzkaller0 entered promiscuous mode [ 82.947909][ T4237] usb 2-1: Product: syz [ 82.952106][ T4237] usb 2-1: Manufacturer: syz [ 82.973747][ T4237] usb 2-1: SerialNumber: syz [ 83.013014][ T4237] usb 2-1: config 0 descriptor?? [ 83.056037][ T4237] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 83.066279][ T4237] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 83.523963][ T4851] device syzkaller0 entered promiscuous mode [ 83.532296][ T4852] device syzkaller0 entered promiscuous mode [ 84.018429][ T4874] device syzkaller0 entered promiscuous mode [ 84.030319][ T4874] tipc: Started in network mode [ 84.062145][ T4874] tipc: Node identity 66c95a21f, cluster identity 4711 [ 84.090834][ T4874] tipc: Enabled bearer , priority 0 [ 84.110567][ T4877] tipc: Resetting bearer [ 84.131311][ T4873] tipc: Resetting bearer [ 84.211506][ T4873] tipc: Disabling bearer [ 84.538614][ T4258] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.681208][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 84.767379][ T4244] usb 2-1: USB disconnect, device number 4 [ 84.784284][ T4258] usb 3-1: Using ep0 maxpacket: 16 [ 84.790017][ T1325] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 84.797672][ T4244] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 84.798482][ T4244] omninet 2-1:0.0: device disconnected [ 84.904667][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1032, setting to 64 [ 85.028037][ T4293] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.091920][ T4258] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.108688][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.118987][ T4258] usb 3-1: Product: syz [ 85.123199][ T4258] usb 3-1: Manufacturer: syz [ 85.134118][ T4258] usb 3-1: SerialNumber: syz [ 85.156874][ T4258] usb 3-1: config 0 descriptor?? [ 85.174110][ T4925] dump_vmcs: 6 callbacks suppressed [ 85.174125][ T4925] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.216930][ T1325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.238102][ T1325] usb 5-1: config 0 has no interface number 0 [ 85.246497][ T4258] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.268059][ T1325] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 85.279178][ T4258] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 85.289898][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.298562][ T4293] usb 1-1: Using ep0 maxpacket: 16 [ 85.315510][ T1325] usb 5-1: config 0 descriptor?? [ 85.367208][ T1325] usb 5-1: selecting invalid altsetting 1 [ 85.385941][ T1325] dvb_ttusb_budget: ttusb_init_controller: error [ 85.392473][ T1325] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 85.414636][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 85.425720][ T4293] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 85.468691][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 85.497806][ T4293] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 85.539259][ T1325] DVB: Unable to find symbol cx22700_attach() [ 85.557621][ T4935] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.644301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #c0!!! [ 85.664231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.674212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.683367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.692628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.701599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.748270][ T1325] DVB: Unable to find symbol tda10046_attach() [ 85.756516][ T1325] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 85.774480][ T4293] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 85.791782][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.944847][ T4258] em28xx 3-1:0.0: chip ID is em2765 [ 85.997528][ T4293] usb 1-1: Product: syz [ 86.033546][ T4293] usb 1-1: Manufacturer: syz [ 86.126227][ T4293] usb 1-1: SerialNumber: syz [ 87.174624][ T4293] usb 1-1: config 0 descriptor?? [ 87.214972][ T4258] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 87.242152][ T4293] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected [ 87.258162][ T4258] em28xx 3-1:0.0: board has no eeprom [ 87.334624][ T4861] em28xx 3-1:0.0: write to i2c device at 0x0 failed with unknown error (status=3) [ 87.356256][ T4293] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 87.407013][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 87.572204][ T4951] device syzkaller0 entered promiscuous mode [ 87.644498][ T4258] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 87.652896][ T4258] em28xx 3-1:0.0: dvb set to bulk mode. [ 87.663610][ T4258] usb 3-1: USB disconnect, device number 4 [ 87.671309][ T4293] em28xx 3-1:0.0: Binding DVB extension [ 87.678946][ T4258] em28xx 3-1:0.0: Disconnecting em28xx [ 87.729779][ T4293] em28xx 3-1:0.0: Registering input extension [ 87.736274][ T4258] em28xx 3-1:0.0: Closing input extension [ 87.750096][ T4258] em28xx 3-1:0.0: Freeing device [ 88.436946][ T4230] usb 5-1: USB disconnect, device number 5 [ 88.606922][ T4244] usb 1-1: USB disconnect, device number 5 [ 88.630413][ T4244] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 88.653467][ T4244] omninet 1-1:0.0: device disconnected [ 88.700018][ T4991] device syzkaller0 entered promiscuous mode [ 88.716818][ T4988] device syzkaller0 entered promiscuous mode [ 88.848778][ T4993] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 89.161345][ T5004] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.414665][ T4230] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 89.480616][ T5030] tipc: Enabling of bearer rejected, failed to enable media [ 89.538631][ T5030] device syzkaller0 entered promiscuous mode [ 89.815512][ T5035] create_pit_timer: 32 callbacks suppressed [ 89.815530][ T5035] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 89.830706][ T4230] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.839547][ T4230] usb 2-1: config 0 has no interface number 0 [ 89.846658][ T4230] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 89.865945][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.875033][ T5035] pit: kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 89.915983][ T4230] usb 2-1: config 0 descriptor?? [ 89.922925][ T5035] pit: kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 89.946262][ T5035] pit: kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 89.956249][ T5035] pit: kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 89.970836][ T4230] usb 2-1: selecting invalid altsetting 1 [ 89.979732][ T4230] dvb_ttusb_budget: ttusb_init_controller: error [ 89.987645][ T5035] pit: kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 90.004257][ T4230] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 90.015117][ T5035] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 90.046135][ T5044] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.049542][ T5035] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 90.076598][ T5035] pit: kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 90.118088][ T5035] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 90.159048][ T4230] DVB: Unable to find symbol cx22700_attach() [ 90.406704][ T4230] DVB: Unable to find symbol tda10046_attach() [ 90.414205][ T4230] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 92.268948][ T5057] device syzkaller0 entered promiscuous mode [ 93.056783][ T4258] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.274567][ T7] usb 2-1: USB disconnect, device number 5 [ 93.384463][ T4258] usb 4-1: Using ep0 maxpacket: 16 [ 93.504616][ T4258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.531552][ T4258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.560962][ T4258] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.578076][ T4258] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.587806][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.600723][ T4258] usb 4-1: config 0 descriptor?? [ 93.615399][ T5098] kvm [5092]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 93.797147][ T5105] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.004716][ T5115] device syzkaller0 entered promiscuous mode [ 94.164455][ T4258] usbhid 4-1:0.0: can't add hid device: -71 [ 94.183591][ T4258] usbhid: probe of 4-1:0.0 failed with error -71 [ 94.208376][ T4258] usb 4-1: USB disconnect, device number 4 [ 94.469825][ T5134] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.509851][ T5134] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.972371][ T5157] device syzkaller0 entered promiscuous mode [ 95.400492][ T5170] device syzkaller0 entered promiscuous mode [ 95.451102][ T5170] tipc: Started in network mode [ 95.479139][ T5170] tipc: Node identity 327776939195, cluster identity 4711 [ 95.522871][ T5170] tipc: Enabled bearer , priority 0 [ 95.551603][ T5179] tipc: Resetting bearer [ 95.565435][ T5176] device syzkaller0 entered promiscuous mode [ 95.582995][ T5168] tipc: Resetting bearer [ 95.619519][ T5168] tipc: Disabling bearer [ 95.724423][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.788763][ T5190] ================================================================== [ 95.797155][ T5190] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 95.801046][ T5191] device syzkaller0 entered promiscuous mode [ 95.806385][ T5190] Read of size 1 at addr ffff888062b0d608 by task syz.3.270/5190 [ 95.806440][ T5190] [ 95.806448][ T5190] CPU: 1 PID: 5190 Comm: syz.3.270 Not tainted syzkaller #0 [ 95.806467][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.806478][ T5190] Call Trace: [ 95.806488][ T5190] [ 95.806497][ T5190] dump_stack_lvl+0x168/0x230 [ 95.806529][ T5190] ? show_regs_print_info+0x20/0x20 [ 95.806556][ T5190] ? load_image+0x3b0/0x3b0 [ 95.806576][ T5190] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 95.806599][ T5190] ? xfrm_pol_bin_obj+0x140/0x140 [ 95.806626][ T5190] print_address_description+0x60/0x2d0 [ 95.806647][ T5190] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 95.806666][ T5190] kasan_report+0xdf/0x130 [ 95.806689][ T5190] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 95.894569][ T5190] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 95.900945][ T5190] ? xfrm_policy_addr_delta+0x212/0x340 [ 95.906540][ T5190] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 95.912821][ T5190] ? xfrm_policy_alloc+0x75/0x2b0 [ 95.917904][ T5190] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 95.924188][ T5190] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 95.930329][ T5190] xfrm_policy_inexact_insert+0xe0/0x1460 [ 95.936176][ T5190] ? __get_hash_thresh+0x105/0x410 [ 95.941317][ T5190] ? policy_hash_bysel+0x10a/0x570 [ 95.946461][ T5190] xfrm_policy_insert+0x112/0x930 [ 95.951533][ T5190] xfrm_add_policy+0x4d6/0x860 [ 95.956339][ T5190] ? xfrm_dump_sa_done+0xc0/0xc0 [ 95.961304][ T5190] ? apparmor_capable+0x12c/0x190 [ 95.966340][ T5190] ? __nla_parse+0x3c/0x50 [ 95.969602][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 95.970785][ T5190] xfrm_user_rcv_msg+0x58d/0x860 [ 95.980858][ T5190] ? xfrm_netlink_rcv+0x90/0x90 [ 95.985789][ T5190] ? xfrm_netlink_rcv+0x66/0x90 [ 95.990672][ T5190] ? xfrm_netlink_rcv+0x66/0x90 [ 95.995664][ T5190] ? xfrm_netlink_rcv+0x66/0x90 [ 96.000613][ T5190] ? __mutex_lock_common+0x431/0x2390 [ 96.005990][ T5190] ? __copy_skb_header+0x417/0x5a0 [ 96.011213][ T5190] ? __skb_clone+0x480/0x790 [ 96.016002][ T5190] netlink_rcv_skb+0x1e0/0x430 [ 96.020772][ T5190] ? xfrm_netlink_rcv+0x90/0x90 [ 96.025635][ T5190] ? netlink_ack+0xb60/0xb60 [ 96.030315][ T5190] ? __lock_acquire+0x7c60/0x7c60 [ 96.035392][ T5190] xfrm_netlink_rcv+0x75/0x90 [ 96.040198][ T5190] netlink_unicast+0x774/0x920 [ 96.045020][ T5190] netlink_sendmsg+0x8ab/0xbc0 [ 96.049849][ T5190] ? netlink_getsockopt+0x560/0x560 [ 96.055137][ T5190] ? aa_sock_msg_perm+0x94/0x150 [ 96.060075][ T5190] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 96.065365][ T5190] ? security_socket_sendmsg+0x7c/0xa0 [ 96.070928][ T5190] ? netlink_getsockopt+0x560/0x560 [ 96.076292][ T5190] ____sys_sendmsg+0x5a2/0x8c0 [ 96.081064][ T5190] ? memset+0x1e/0x40 [ 96.085056][ T5190] ? __sys_sendmsg_sock+0x30/0x30 [ 96.090115][ T5190] ? import_iovec+0x6f/0xa0 [ 96.094380][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.094648][ T5190] ___sys_sendmsg+0x1f0/0x260 [ 96.110178][ T5190] ? __sys_sendmsg+0x250/0x250 [ 96.111181][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.115140][ T5190] ? __fdget+0x18b/0x210 [ 96.115169][ T5190] __se_sys_sendmsg+0x190/0x250 [ 96.115195][ T5190] ? __x64_sys_sendmsg+0x80/0x80 [ 96.115214][ T5190] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 96.115251][ T5190] ? lockdep_hardirqs_on+0x94/0x140 [ 96.133576][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.134584][ T5190] do_syscall_64+0x4c/0xa0 [ 96.134610][ T5190] ? clear_bhb_loop+0x30/0x80 [ 96.134630][ T5190] ? clear_bhb_loop+0x30/0x80 [ 96.134651][ T5190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.140271][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.145564][ T5190] RIP: 0033:0x7f63a343a749 [ 96.145597][ T5190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.145614][ T5190] RSP: 002b:00007f63a16a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.145638][ T5190] RAX: ffffffffffffffda RBX: 00007f63a3690fa0 RCX: 00007f63a343a749 [ 96.145652][ T5190] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 96.145664][ T5190] RBP: 00007f63a34bef91 R08: 0000000000000000 R09: 0000000000000000 [ 96.145677][ T5190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.145690][ T5190] R13: 00007f63a3691038 R14: 00007f63a3690fa0 R15: 00007ffe9cb10cc8 [ 96.145723][ T5190] [ 96.145731][ T5190] [ 96.145736][ T5190] Allocated by task 5190: [ 96.145746][ T5190] __kasan_kmalloc+0xb5/0xf0 [ 96.145767][ T5190] sk_prot_alloc+0xe7/0x210 [ 96.145784][ T5190] sk_alloc+0x2f/0x310 [ 96.145799][ T5190] pfkey_create+0xd8/0x560 [ 96.157886][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.164026][ T5190] __sock_create+0x47b/0x900 [ 96.164053][ T5190] __sys_socket+0xe2/0x170 [ 96.164069][ T5190] __x64_sys_socket+0x76/0x80 [ 96.183994][ T7] usb 2-1: config 0 descriptor?? [ 96.193019][ T5190] do_syscall_64+0x4c/0xa0 [ 96.193050][ T5190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.193070][ T5190] [ 96.193076][ T5190] Last potentially related work creation: [ 96.193083][ T5190] kasan_save_stack+0x35/0x60 [ 96.193101][ T5190] kasan_record_aux_stack+0xb8/0x100 [ 96.193121][ T5190] kvfree_call_rcu+0x10a/0x7c0 [ 96.193138][ T5190] tcf_block_put+0x69/0x90 [ 96.193157][ T5190] fq_codel_destroy+0x3b/0x90 [ 96.193172][ T5190] qdisc_destroy+0x115/0x390 [ 96.193190][ T5190] netem_destroy+0x55/0xb0 [ 96.193208][ T5190] qdisc_destroy+0x115/0x390 [ 96.193224][ T5190] dev_shutdown+0x5e6/0x710 [ 96.193240][ T5190] unregister_netdevice_many+0xa0c/0x18f0 [ 96.193260][ T5190] unregister_netdevice_queue+0x31c/0x360 [ 96.193279][ T5190] __tun_detach+0xd4a/0x1500 [ 96.193295][ T5190] tun_chr_close+0x109/0x1b0 [ 96.193314][ T5190] __fput+0x234/0x930 [ 96.193331][ T5190] task_work_run+0x125/0x1a0 [ 96.193350][ T5190] exit_to_user_mode_loop+0x10f/0x130 [ 96.193371][ T5190] exit_to_user_mode_prepare+0xee/0x180 [ 96.193392][ T5190] syscall_exit_to_user_mode+0x16/0x40 [ 96.193412][ T5190] do_syscall_64+0x58/0xa0 [ 96.193428][ T5190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.193447][ T5190] [ 96.193452][ T5190] The buggy address belongs to the object at ffff888062b0d000 [ 96.193452][ T5190] which belongs to the cache kmalloc-2k of size 2048 [ 96.193469][ T5190] The buggy address is located 1544 bytes inside of [ 96.193469][ T5190] 2048-byte region [ffff888062b0d000, ffff888062b0d800) [ 96.193489][ T5190] The buggy address belongs to the page: [ 96.193499][ T5190] page:ffffea00018ac200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62b08 [ 96.193522][ T5190] head:ffffea00018ac200 order:3 compound_mapcount:0 compound_pincount:0 [ 96.193538][ T5190] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.193567][ T5190] raw: 00fff00000010200 ffffea0001e44000 0000000200000002 ffff888016842000 [ 96.193584][ T5190] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 96.193595][ T5190] page dumped because: kasan: bad access detected [ 96.193604][ T5190] page_owner tracks the page as allocated [ 96.193611][ T5190] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4193, ts 55813344747, free_ts 16655255736 [ 96.193642][ T5190] get_page_from_freelist+0x1b77/0x1c60 [ 96.193663][ T5190] __alloc_pages+0x1e1/0x470 [ 96.558465][ T5190] new_slab+0xc0/0x4b0 [ 96.562542][ T5190] ___slab_alloc+0x81e/0xdf0 [ 96.567127][ T5190] __kmalloc_track_caller+0x1cb/0x330 [ 96.572582][ T5190] kmemdup+0x22/0x50 [ 96.576481][ T5190] neigh_sysctl_register+0x9b/0xa80 [ 96.581704][ T5190] devinet_sysctl_register+0xa8/0x1f0 [ 96.587079][ T5190] inetdev_init+0x28c/0x4d0 [ 96.591582][ T5190] inetdev_event+0x280/0x1360 [ 96.596264][ T5190] raw_notifier_call_chain+0xcb/0x160 [ 96.601898][ T5190] register_netdevice+0x1275/0x16b0 [ 96.607098][ T5190] rtnl_newlink+0x1353/0x17d0 [ 96.611881][ T5190] rtnetlink_rcv_msg+0x7ff/0xe90 [ 96.617350][ T5190] netlink_rcv_skb+0x1e0/0x430 [ 96.622125][ T5190] netlink_unicast+0x774/0x920 [ 96.626887][ T5190] page last free stack trace: [ 96.631555][ T5190] free_unref_page_prepare+0x637/0x6c0 [ 96.637197][ T5190] free_unref_page+0x94/0x280 [ 96.641893][ T5190] free_contig_range+0x96/0xf0 [ 96.646655][ T5190] destroy_args+0x100/0xa20 [ 96.651160][ T5190] debug_vm_pgtable+0x318/0x370 [ 96.656007][ T5190] do_one_initcall+0x1ee/0x680 [ 96.660782][ T5190] do_initcall_level+0x137/0x1f0 [ 96.665720][ T5190] do_initcalls+0x4b/0x90 [ 96.670064][ T5190] kernel_init_freeable+0x3ce/0x560 [ 96.675263][ T5190] kernel_init+0x19/0x1b0 [ 96.679591][ T5190] ret_from_fork+0x1f/0x30 [ 96.684005][ T5190] [ 96.686327][ T5190] Memory state around the buggy address: [ 96.691950][ T5190] ffff888062b0d500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.700005][ T5190] ffff888062b0d580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 96.708154][ T5190] >ffff888062b0d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.716382][ T5190] ^ [ 96.720704][ T5190] ffff888062b0d680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.728762][ T5190] ffff888062b0d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.736925][ T5190] ================================================================== [ 96.744980][ T5190] Disabling lock debugging due to kernel taint [ 96.751361][ T5190] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.758651][ T5190] CPU: 1 PID: 5190 Comm: syz.3.270 Tainted: G B syzkaller #0 [ 96.767422][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.778180][ T5190] Call Trace: [ 96.781457][ T5190] [ 96.784388][ T5190] dump_stack_lvl+0x168/0x230 [ 96.789073][ T5190] ? show_regs_print_info+0x20/0x20 [ 96.794301][ T5190] ? load_image+0x3b0/0x3b0 [ 96.798812][ T5190] panic+0x2c9/0x7f0 [ 96.802706][ T5190] ? bpf_jit_dump+0xd0/0xd0 [ 96.807221][ T5190] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 96.813300][ T5190] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 96.819302][ T5190] ? _raw_spin_unlock+0x40/0x40 [ 96.824181][ T5190] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 96.830709][ T5190] check_panic_on_warn+0x80/0xa0 [ 96.835701][ T5190] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 96.842409][ T5190] end_report+0x6d/0xf0 [ 96.846571][ T5190] kasan_report+0x102/0x130 [ 96.851248][ T5190] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 96.857843][ T5190] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 96.864188][ T5190] ? xfrm_policy_addr_delta+0x212/0x340 [ 96.869740][ T5190] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 96.875916][ T5190] ? xfrm_policy_alloc+0x75/0x2b0 [ 96.881035][ T5190] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 96.887192][ T5190] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 96.893087][ T5190] xfrm_policy_inexact_insert+0xe0/0x1460 [ 96.898995][ T5190] ? __get_hash_thresh+0x105/0x410 [ 96.904126][ T5190] ? policy_hash_bysel+0x10a/0x570 [ 96.909341][ T5190] xfrm_policy_insert+0x112/0x930 [ 96.914382][ T5190] xfrm_add_policy+0x4d6/0x860 [ 96.919179][ T5190] ? xfrm_dump_sa_done+0xc0/0xc0 [ 96.924300][ T5190] ? apparmor_capable+0x12c/0x190 [ 96.929411][ T5190] ? __nla_parse+0x3c/0x50 [ 96.933934][ T5190] xfrm_user_rcv_msg+0x58d/0x860 [ 96.939009][ T5190] ? xfrm_netlink_rcv+0x90/0x90 [ 96.943889][ T5190] ? xfrm_netlink_rcv+0x66/0x90 [ 96.948757][ T5190] ? xfrm_netlink_rcv+0x66/0x90 [ 96.953716][ T5190] ? xfrm_netlink_rcv+0x66/0x90 [ 96.958701][ T5190] ? __mutex_lock_common+0x431/0x2390 [ 96.964101][ T5190] ? __copy_skb_header+0x417/0x5a0 [ 96.969222][ T5190] ? __skb_clone+0x480/0x790 [ 96.973832][ T5190] netlink_rcv_skb+0x1e0/0x430 [ 96.978606][ T5190] ? xfrm_netlink_rcv+0x90/0x90 [ 96.983461][ T5190] ? netlink_ack+0xb60/0xb60 [ 96.988056][ T5190] ? __lock_acquire+0x7c60/0x7c60 [ 96.993087][ T5190] xfrm_netlink_rcv+0x75/0x90 [ 96.997764][ T5190] netlink_unicast+0x774/0x920 [ 97.002537][ T5190] netlink_sendmsg+0x8ab/0xbc0 [ 97.007303][ T5190] ? netlink_getsockopt+0x560/0x560 [ 97.012502][ T5190] ? aa_sock_msg_perm+0x94/0x150 [ 97.017441][ T5190] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 97.022729][ T5190] ? security_socket_sendmsg+0x7c/0xa0 [ 97.028188][ T5190] ? netlink_getsockopt+0x560/0x560 [ 97.033391][ T5190] ____sys_sendmsg+0x5a2/0x8c0 [ 97.038162][ T5190] ? memset+0x1e/0x40 [ 97.042146][ T5190] ? __sys_sendmsg_sock+0x30/0x30 [ 97.047346][ T5190] ? import_iovec+0x6f/0xa0 [ 97.051939][ T5190] ___sys_sendmsg+0x1f0/0x260 [ 97.056903][ T5190] ? __sys_sendmsg+0x250/0x250 [ 97.061678][ T5190] ? __fdget+0x18b/0x210 [ 97.065920][ T5190] __se_sys_sendmsg+0x190/0x250 [ 97.070773][ T5190] ? __x64_sys_sendmsg+0x80/0x80 [ 97.075712][ T5190] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 97.081786][ T5190] ? lockdep_hardirqs_on+0x94/0x140 [ 97.087076][ T5190] do_syscall_64+0x4c/0xa0 [ 97.091491][ T5190] ? clear_bhb_loop+0x30/0x80 [ 97.096164][ T5190] ? clear_bhb_loop+0x30/0x80 [ 97.100838][ T5190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.106727][ T5190] RIP: 0033:0x7f63a343a749 [ 97.111144][ T5190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.130931][ T5190] RSP: 002b:00007f63a16a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.139441][ T5190] RAX: ffffffffffffffda RBX: 00007f63a3690fa0 RCX: 00007f63a343a749 [ 97.147412][ T5190] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 97.155384][ T5190] RBP: 00007f63a34bef91 R08: 0000000000000000 R09: 0000000000000000 [ 97.163354][ T5190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.171332][ T5190] R13: 00007f63a3691038 R14: 00007f63a3690fa0 R15: 00007ffe9cb10cc8 [ 97.179325][ T5190] [ 97.182672][ T5190] Kernel Offset: disabled [ 97.186994][ T5190] Rebooting in 86400 seconds..