last executing test programs: 9.032218679s ago: executing program 2 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.9375407s ago: executing program 0 (id=141): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) splice(r2, 0x0, r5, 0x0, 0xf39, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 7.730561108s ago: executing program 2 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"}) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 7.438873896s ago: executing program 2 (id=143): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 6.360431218s ago: executing program 0 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) ftruncate(0xffffffffffffffff, 0x3000000) 6.354733193s ago: executing program 4 (id=148): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x4fc322dd, 0xfffffffffffffff4}}) 6.220632565s ago: executing program 4 (id=150): syz_emit_vhci(0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 6.106631552s ago: executing program 4 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.433821598s ago: executing program 1 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x2, 0x0, @ioapic={0x2000, 0x7, 0x2, 0xeffffdff, 0x0, [{0x0, 0x10, 0x1, '\x00', 0x5}, {0x0, 0x9, 0x0, '\x00', 0xff}, {0xfc, 0x12, 0x4, '\x00', 0xfe}, {0x20, 0x4}, {}, {0x3, 0x0, 0x4}, {0x0, 0x0, 0x7a}, {0xfc, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x40, 0x0, '\x00', 0x4}, {0x7, 0x6, 0xfe, '\x00', 0x1}, {}, {0xff, 0xd, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x2}, {0x3, 0xfe, 0x7, '\x00', 0x2}, {0x3}, {0x8, 0x0, 0x0, '\x00', 0x5}, {}, {0x0, 0xb, 0x4, '\x00', 0x10}, {0x0, 0x0, 0x20}, {0x1, 0x80, 0x4, '\x00', 0xff}, {0x0, 0x5, 0x0, '\x00', 0x2}, {0x2, 0xd, 0x0, '\x00', 0x2}, {0x9, 0x9}, {0x0, 0xff, 0x7, '\x00', 0xff}]}}) 5.387458977s ago: executing program 0 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 5.258508111s ago: executing program 3 (id=154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='fib_table_lookup\x00', r0}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff0000010000", 0x54}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000f00)=""/4096, &(0x7f00000001c0)=0x1000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) close_range(0xffffffffffffffff, r0, 0x0) 5.25788747s ago: executing program 0 (id=155): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.165665917s ago: executing program 4 (id=156): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) io_uring_setup(0x310f, 0x0) sched_setscheduler(0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0xfffffffc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0x17}, 0x0, 0x0}) 5.06835659s ago: executing program 0 (id=157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x31, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r6, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 5.067334318s ago: executing program 1 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r7, 0x1, 0x0, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYRESDEC=r8], 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x0) 4.038650028s ago: executing program 2 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 4.025179732s ago: executing program 1 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) 3.869546311s ago: executing program 1 (id=161): syz_emit_vhci(0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 3.836290919s ago: executing program 2 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="187e41670c041bc26e1ce19dafe3000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) getgroups(0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r6, &(0x7f00000000c0)={0x18}, 0xfffffdef) 3.774520546s ago: executing program 3 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 3.718869407s ago: executing program 1 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) open_tree(r3, 0x0, 0x85801) 1.685270124s ago: executing program 3 (id=165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x5d) 1.522875104s ago: executing program 1 (id=166): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x10, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x60, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.305918858s ago: executing program 3 (id=167): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.175293828s ago: executing program 4 (id=168): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0xa2442) dup3(r0, r1, 0x0) 1.017371757s ago: executing program 3 (id=169): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 754.798898ms ago: executing program 4 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 53.819436ms ago: executing program 2 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.346332ms ago: executing program 0 (id=172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 59.030131][ T5810] cgroup: Unknown subsys name 'net' [ 59.145635][ T5810] cgroup: Unknown subsys name 'cpuset' [ 59.153707][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.446223][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.426968][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.435601][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.444947][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.455968][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.483606][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.490974][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.623838][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.637247][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.646481][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.655870][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.664618][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.675060][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.682432][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.690180][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.699258][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.707759][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.715340][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.717348][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.724648][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.730168][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.737110][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.751447][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.758863][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.767453][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.776456][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.793602][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.803144][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.821346][ T5137] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.833790][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.848278][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.895442][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 65.042270][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.050118][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.057756][ T5820] bridge_slave_0: entered allmulticast mode [ 65.064430][ T5820] bridge_slave_0: entered promiscuous mode [ 65.075847][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.083174][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.090290][ T5820] bridge_slave_1: entered allmulticast mode [ 65.097113][ T5820] bridge_slave_1: entered promiscuous mode [ 65.135237][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.149246][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.195704][ T5820] team0: Port device team_slave_0 added [ 65.204034][ T5820] team0: Port device team_slave_1 added [ 65.274474][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.281453][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.308161][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.354594][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.361564][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.392396][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.426257][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 65.486856][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 65.552510][ T5820] hsr_slave_0: entered promiscuous mode [ 65.558779][ T5820] hsr_slave_1: entered promiscuous mode [ 65.589001][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 65.679726][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 65.689273][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.698738][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.706017][ T5836] bridge_slave_0: entered allmulticast mode [ 65.712580][ T5836] bridge_slave_0: entered promiscuous mode [ 65.741111][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.748886][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.756464][ T5836] bridge_slave_1: entered allmulticast mode [ 65.763783][ T5836] bridge_slave_1: entered promiscuous mode [ 65.812218][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.853598][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.862754][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.870621][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.877968][ T5828] bridge_slave_0: entered allmulticast mode [ 65.884665][ T5828] bridge_slave_0: entered promiscuous mode [ 65.932233][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.940014][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.947531][ T5828] bridge_slave_1: entered allmulticast mode [ 65.954700][ T5828] bridge_slave_1: entered promiscuous mode [ 65.961275][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.968678][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.976761][ T5832] bridge_slave_0: entered allmulticast mode [ 65.983795][ T5832] bridge_slave_0: entered promiscuous mode [ 66.023233][ T5836] team0: Port device team_slave_0 added [ 66.036241][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.046395][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.053705][ T5832] bridge_slave_1: entered allmulticast mode [ 66.060315][ T5832] bridge_slave_1: entered promiscuous mode [ 66.078443][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.087464][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.095173][ T5827] bridge_slave_0: entered allmulticast mode [ 66.101789][ T5827] bridge_slave_0: entered promiscuous mode [ 66.110132][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.117495][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.125210][ T5827] bridge_slave_1: entered allmulticast mode [ 66.131838][ T5827] bridge_slave_1: entered promiscuous mode [ 66.139286][ T5836] team0: Port device team_slave_1 added [ 66.162203][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.202202][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.222548][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.234872][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.250369][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.257939][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.285283][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.297657][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.304673][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.330639][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.364018][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.387868][ T5828] team0: Port device team_slave_0 added [ 66.404137][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.420138][ T5828] team0: Port device team_slave_1 added [ 66.437614][ T5832] team0: Port device team_slave_0 added [ 66.450607][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.471310][ T5832] team0: Port device team_slave_1 added [ 66.495614][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.506508][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.516727][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.524486][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.551273][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.551337][ T5839] Bluetooth: hci0: command tx timeout [ 66.568046][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.575083][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.601074][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.621906][ T5827] team0: Port device team_slave_0 added [ 66.638347][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.665110][ T5827] team0: Port device team_slave_1 added [ 66.675764][ T5836] hsr_slave_0: entered promiscuous mode [ 66.681831][ T5836] hsr_slave_1: entered promiscuous mode [ 66.688127][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.696003][ T5836] Cannot create hsr debugfs directory [ 66.723545][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.730515][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.758591][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.782998][ T5839] Bluetooth: hci1: command tx timeout [ 66.800020][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.807173][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.834641][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.861480][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.863905][ T5839] Bluetooth: hci2: command tx timeout [ 66.868835][ T5830] Bluetooth: hci4: command tx timeout [ 66.879770][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.906477][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.921364][ T5828] hsr_slave_0: entered promiscuous mode [ 66.930060][ T5828] hsr_slave_1: entered promiscuous mode [ 66.936448][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.944176][ T5839] Bluetooth: hci3: command tx timeout [ 66.949803][ T5828] Cannot create hsr debugfs directory [ 66.976612][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.983807][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.009973][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.086620][ T5832] hsr_slave_0: entered promiscuous mode [ 67.092690][ T5832] hsr_slave_1: entered promiscuous mode [ 67.099316][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.107529][ T5832] Cannot create hsr debugfs directory [ 67.197307][ T5827] hsr_slave_0: entered promiscuous mode [ 67.207249][ T5827] hsr_slave_1: entered promiscuous mode [ 67.213357][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.220915][ T5827] Cannot create hsr debugfs directory [ 67.400056][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.420701][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.432197][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.441980][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.491602][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.527726][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.538469][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.568898][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.576065][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.593552][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.626621][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.633866][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.661228][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.676707][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.690785][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.697915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.711456][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.741379][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.830842][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.852204][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.871700][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.880383][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.893880][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.962037][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.987103][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.994246][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.027143][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.036073][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.043208][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.125015][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.140874][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.158809][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.165965][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.192752][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.199846][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.237880][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.294027][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.311462][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.336108][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.343289][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.384938][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.392057][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.411699][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.469555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.476697][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.516398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.523548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.558043][ T5820] veth0_vlan: entered promiscuous mode [ 68.595444][ T5820] veth1_vlan: entered promiscuous mode [ 68.621279][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.635066][ T5839] Bluetooth: hci0: command tx timeout [ 68.715802][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.770114][ T5820] veth0_macvtap: entered promiscuous mode [ 68.788172][ T5820] veth1_macvtap: entered promiscuous mode [ 68.801705][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.848306][ T5836] veth0_vlan: entered promiscuous mode [ 68.863980][ T5839] Bluetooth: hci1: command tx timeout [ 68.884446][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.898935][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.926689][ T5836] veth1_vlan: entered promiscuous mode [ 68.942665][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.950367][ T5839] Bluetooth: hci2: command tx timeout [ 68.953238][ T5839] Bluetooth: hci4: command tx timeout [ 69.023623][ T5839] Bluetooth: hci3: command tx timeout [ 69.038932][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.057444][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.069347][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.078466][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.118292][ T5836] veth0_macvtap: entered promiscuous mode [ 69.138029][ T5832] veth0_vlan: entered promiscuous mode [ 69.172592][ T5832] veth1_vlan: entered promiscuous mode [ 69.198279][ T5836] veth1_macvtap: entered promiscuous mode [ 69.211702][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.241190][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.252114][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.265818][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.300259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.312909][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.316050][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.331799][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.344623][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.379946][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.389300][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.398499][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.408015][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.430559][ T5832] veth0_macvtap: entered promiscuous mode [ 69.452729][ T5832] veth1_macvtap: entered promiscuous mode [ 69.464886][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.470514][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.472723][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.489270][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.500784][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.512867][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.524373][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.548959][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.560435][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.571018][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.581587][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.593026][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.609827][ T5828] veth0_vlan: entered promiscuous mode [ 69.644276][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.656704][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.666974][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.676040][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.701066][ T5827] veth0_vlan: entered promiscuous mode [ 69.732597][ T5828] veth1_vlan: entered promiscuous mode [ 69.739143][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.762038][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.777384][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.779119][ T5827] veth1_vlan: entered promiscuous mode [ 69.865552][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.881593][ T5828] veth0_macvtap: entered promiscuous mode [ 69.883633][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.919237][ T5828] veth1_macvtap: entered promiscuous mode [ 70.703921][ T5839] Bluetooth: hci0: command tx timeout [ 70.755122][ T5827] veth0_macvtap: entered promiscuous mode [ 70.765054][ T5827] veth1_macvtap: entered promiscuous mode [ 70.781830][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.844273][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.855556][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.869194][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.881982][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.898686][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.910592][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.943986][ T5839] Bluetooth: hci1: command tx timeout [ 71.024328][ T5839] Bluetooth: hci4: command tx timeout [ 71.029783][ T5839] Bluetooth: hci2: command tx timeout [ 71.082500][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.096165][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.110190][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.116590][ T5830] Bluetooth: hci3: command tx timeout [ 71.120975][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.136578][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.147135][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.157140][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.167696][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.188815][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.608140][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.623589][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.634471][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.645958][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.661792][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.680194][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.681892][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.691328][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.701271][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.706255][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.727778][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.738782][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.068885][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.188286][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.253176][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.293748][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.337340][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.353895][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.363869][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.384836][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.386720][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.398190][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.410462][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.426854][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.440828][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456574][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.477498][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.491606][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.606817][ T5920] Bluetooth: MGMT ver 1.23 [ 72.633302][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.642776][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.862518][ T5922] kernel profiling enabled (shift: 7) [ 73.212989][ T5830] Bluetooth: hci0: command tx timeout [ 73.218681][ T5830] Bluetooth: hci1: command tx timeout [ 73.225120][ T5830] Bluetooth: hci2: command tx timeout [ 73.231467][ T5830] Bluetooth: hci4: command tx timeout [ 73.238096][ T5830] Bluetooth: hci3: command tx timeout [ 73.461503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.469618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.610684][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.654099][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.981455][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.989629][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.634299][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.642169][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.813344][ T5823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.002678][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.055514][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.143264][ T5824] Bluetooth: Wrong link type (-71) [ 76.193285][ T5823] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 76.202379][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.021998][ T5823] usb 1-1: config 0 descriptor?? [ 77.479030][ T5823] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 77.520596][ T5823] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 77.578712][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.631133][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.655214][ T29] audit: type=1326 audit(1739508263.534:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5963 comm="syz.1.18" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad51f8cde9 code=0x0 [ 77.683431][ T5823] cp2112 0003:10C4:EA90.0001: error requesting version [ 77.717174][ T5823] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 77.745725][ T5823] usb 1-1: USB disconnect, device number 2 [ 77.753094][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 77.793039][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.813618][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.853297][ T977] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.854032][ T5890] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 77.876786][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.891506][ T5890] usb 5-1: config 0 descriptor?? [ 78.036401][ T977] usb 4-1: not running at top speed; connect to a high speed hub [ 78.056913][ T977] usb 4-1: config 110 has an invalid interface number: 40 but max is 0 [ 78.072943][ T977] usb 4-1: config 110 has no interface number 0 [ 78.079370][ T977] usb 4-1: config 110 interface 40 altsetting 5 endpoint 0x8 has invalid maxpacket 15725, setting to 64 [ 78.111740][ T977] usb 4-1: config 110 interface 40 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 78.143907][ T977] usb 4-1: config 110 interface 40 has no altsetting 0 [ 78.165200][ T977] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=fb.38 [ 78.188074][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.198548][ T977] usb 4-1: Product: syz [ 78.202805][ T977] usb 4-1: Manufacturer: syz [ 78.346422][ T5890] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 78.391285][ T977] usb 4-1: SerialNumber: syz [ 78.411845][ T5890] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 78.412216][ T5971] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 78.441429][ T5890] elo 0003:04E7:0009.0002: item fetching failed at offset 2/5 [ 78.451033][ T5890] elo 0003:04E7:0009.0002: parse failed [ 79.433054][ T5890] elo 0003:04E7:0009.0002: probe with driver elo failed with error -22 [ 79.713248][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.728727][ T5824] Bluetooth: Wrong link type (-71) [ 79.741731][ T5890] usb 5-1: USB disconnect, device number 2 [ 80.175571][ T977] usb 4-1: USB disconnect, device number 2 [ 81.086916][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:110.40/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.210811][ T6026] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.264790][ T25] cfg80211: failed to load regulatory.db [ 83.563182][ T5824] Bluetooth: Wrong link type (-71) [ 83.803178][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.033487][ T6055] hfs: can't find a HFS filesystem on dev nullb0 [ 84.151524][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 84.161830][ T5873] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.171012][ T5873] usb 1-1: config 179 has no interface number 0 [ 84.182239][ T5873] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 84.195618][ T5873] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 84.207120][ T5873] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 84.218686][ T5873] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 84.230463][ T5873] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.258042][ T5873] usb 1-1: config 179 interface 65 has no altsetting 0 [ 84.291007][ T5873] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 84.381090][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.716974][ T29] audit: type=1326 audit(1739508270.574:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6060 comm="syz.2.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc53c18cde9 code=0x0 [ 84.876704][ T6038] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.159995][ T5873] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 85.187842][ T5183] input input5: unable to receive magic message: -71 [ 85.202946][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 85.612129][ T5183] input input5: unable to receive magic message: -71 [ 85.652454][ T5183] input input5: unable to receive magic message: -71 [ 85.663506][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.672324][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.681369][ T5873] usb 1-1: USB disconnect, device number 3 [ 85.690131][ T5873] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 87.789149][ T6081] veth1_to_team: entered promiscuous mode [ 87.825928][ T6080] veth1_to_team: left promiscuous mode [ 88.148356][ T6096] process 'syz.4.63' launched '/dev/fd/6' with NULL argv: empty string added [ 89.259645][ T6104] futex_wake_op: syz.0.66 tries to shift op by -1; fix this program [ 91.769651][ T6131] Zero length message leads to an empty skb [ 93.636048][ T6147] pim6reg1: entered promiscuous mode [ 93.699903][ T6147] pim6reg1: entered allmulticast mode [ 95.023978][ T5890] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.349623][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.415115][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.478692][ T5890] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 96.549940][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.614306][ T5890] usb 5-1: config 0 descriptor?? [ 97.043237][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 97.053485][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.054736][ T5824] Bluetooth: Wrong link type (-71) [ 97.072799][ T5821] udevd[5821]: failed to send result of seq 10989 to main daemon: Connection refused [ 97.129773][ T5890] usb 5-1: USB disconnect, device number 3 [ 97.637115][ T6192] futex_wake_op: syz.1.95 tries to shift op by -1; fix this program [ 98.583334][ T5823] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.473456][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 99.510905][ T5823] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 99.690332][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.759793][ T5823] usb 5-1: config 0 descriptor?? [ 99.797981][ T5823] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 100.183173][ T5824] Bluetooth: Wrong link type (-71) [ 100.313414][ T5823] gspca_vc032x: reg_w err -71 [ 100.318644][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.324053][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.329453][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.335252][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.340562][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.351460][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.356870][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.362172][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.373627][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.378975][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.421357][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.468502][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.614596][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.669230][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.734194][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.771759][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.846080][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.993435][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.008418][ T5823] gspca_vc032x: Unknown sensor... [ 101.032059][ T5823] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 101.057895][ T5823] usb 5-1: USB disconnect, device number 4 [ 105.662159][ T5824] Bluetooth: Wrong link type (-71) [ 106.703231][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.995415][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 107.410679][ T5823] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 107.422962][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.707533][ T5823] usb 1-1: config 0 descriptor?? [ 108.706905][ T5823] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 109.019285][ T6272] wg2: entered promiscuous mode [ 109.024324][ T6272] wg2: entered allmulticast mode [ 109.223174][ T5823] gspca_vc032x: reg_w err -71 [ 109.227916][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.233939][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.239257][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.246065][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.251718][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.259340][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.265011][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.270412][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.291384][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.298994][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.501313][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.508422][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.519600][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.525248][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.530560][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.536512][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.541827][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.547652][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.553260][ T5823] gspca_vc032x: Unknown sensor... [ 109.559970][ T5823] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 109.959044][ T5823] usb 1-1: USB disconnect, device number 4 [ 110.353351][ T5824] Bluetooth: Wrong link type (-71) [ 116.722928][ T977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.902946][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 116.914567][ T977] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 116.924296][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.944852][ T977] usb 2-1: config 0 descriptor?? [ 116.957262][ T977] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 117.452447][ T977] gspca_vc032x: reg_w err -71 [ 117.462907][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.468233][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.494868][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.500216][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.506416][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.520825][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.547704][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.595764][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.638953][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.644953][ T5873] usb 3-1: device descriptor read/64, error -71 [ 117.689522][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.784170][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.886301][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.970033][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.078700][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.105418][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.120555][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.222784][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.228321][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.234569][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.240311][ T977] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.246215][ T977] gspca_vc032x: Unknown sensor... [ 118.251331][ T977] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 118.263521][ T977] usb 2-1: USB disconnect, device number 2 [ 118.356019][ T5873] usb 3-1: device descriptor read/64, error -71 [ 118.463610][ T5873] usb usb3-port1: attempt power cycle [ 118.963030][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.995876][ T5873] usb 3-1: device descriptor read/8, error -71 [ 119.252990][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.293763][ T5873] usb 3-1: device descriptor read/8, error -71 [ 119.413170][ T5873] usb usb3-port1: unable to enumerate USB device [ 119.763094][ T5890] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.513062][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 120.551210][ T5890] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 120.628472][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.647539][ T5890] usb 5-1: config 0 descriptor?? [ 120.672269][ T5890] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 121.903090][ T5890] gspca_vc032x: reg_w err -110 [ 121.907918][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.922111][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.931833][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.937332][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.943060][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.948487][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.256338][ T6399] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.929527][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.949896][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.070702][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.090958][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.125907][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.152895][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.171584][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.191174][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.214055][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.239836][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.265640][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.299062][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.314842][ T5890] gspca_vc032x: Unknown sensor... [ 123.319981][ T5890] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 123.393002][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.401947][ T5890] usb 5-1: USB disconnect, device number 5 [ 123.563156][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 123.602607][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.660840][ T8] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 123.691937][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.735616][ T8] usb 2-1: Product: syz [ 123.765863][ T6409] loop6: detected capacity change from 0 to 7 [ 123.772613][ T8] usb 2-1: Manufacturer: syz [ 123.789716][ T8] usb 2-1: SerialNumber: syz [ 123.814598][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.834207][ T8] usb 2-1: config 0 descriptor?? [ 123.859771][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.883249][ T8] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 123.904598][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.941357][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.981324][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.021033][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.084099][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.116340][ T6409] ldm_validate_partition_table(): Disk read failed. [ 124.181937][ T6411] kvm: kvm [6410]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 124.193227][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.223420][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.245426][ T6409] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.265810][ T6411] kvm: kvm [6410]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x2c000001e3 [ 124.295856][ T6409] Dev loop6: unable to read RDB block 0 [ 124.318914][ T6411] kvm_intel: kvm [6410]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x22000040d7 [ 124.334237][ T6409] loop6: unable to read partition table [ 124.359691][ T6409] loop6: partition table beyond EOD, truncated [ 124.380624][ T6409] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 124.380624][ T6409] ) failed (rc=-5) [ 124.739000][ T6419] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 124.751633][ T6419] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 124.760120][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.2.171 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 124.770713][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.780776][ T6419] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 124.786264][ T6419] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 4b b9 7f 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 38 b1 88 00 48 be 00 00 00 00 00 fc [ 124.806058][ T6419] RSP: 0018:ffffc9001053f770 EFLAGS: 00010006 [ 124.812147][ T6419] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.820138][ T6419] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 124.828197][ T6419] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 124.836168][ T6419] R10: dffffc0000000000 R11: fffffbfff20346cf R12: ffff888032bb8000 [ 124.844140][ T6419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 124.852107][ T6419] FS: 00007fc53cf496c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 124.861031][ T6419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.867611][ T6419] CR2: 000000110c4262d0 CR3: 0000000033b9e000 CR4: 00000000003526f0 [ 124.875583][ T6419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.883548][ T6419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.891510][ T6419] Call Trace: [ 124.894786][ T6419] [ 124.897721][ T6419] ? __die_body+0x5f/0xb0 [ 124.902053][ T6419] ? die_addr+0xb0/0xe0 [ 124.906215][ T6419] ? exc_general_protection+0x3dd/0x5d0 [ 124.911769][ T6419] ? asm_exc_general_protection+0x26/0x30 [ 124.917487][ T6419] ? __lock_acquire+0x6a/0x2100 [ 124.922335][ T6419] ? mark_lock+0x9a/0x360 [ 124.926661][ T6419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.932636][ T6419] lock_acquire+0x1ed/0x550 [ 124.937139][ T6419] ? add_wait_queue+0x46/0x180 [ 124.941900][ T6419] ? __pfx_lock_acquire+0x10/0x10 [ 124.946924][ T6419] ? queue_work_on+0x25f/0x380 [ 124.951683][ T6419] ? __local_bh_enable_ip+0x168/0x200 [ 124.957056][ T6419] ? __pfx_queue_work_on+0x10/0x10 [ 124.962162][ T6419] ? __local_bh_enable_ip+0x168/0x200 [ 124.967551][ T6419] ? vsock_loopback_send_pkt+0xb6/0x100 [ 124.973111][ T6419] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 124.978828][ T6419] ? do_raw_spin_unlock+0x13c/0x8b0 [ 124.984043][ T6419] _raw_spin_lock_irqsave+0xd5/0x120 [ 124.989325][ T6419] ? add_wait_queue+0x46/0x180 [ 124.994099][ T6419] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 125.000011][ T6419] ? virtio_transport_send_pkt_info+0xd13/0x10b0 [ 125.006347][ T6419] add_wait_queue+0x46/0x180 [ 125.010945][ T6419] virtio_transport_release+0x4c4/0xce0 [ 125.016496][ T6419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.022476][ T6419] ? __pfx_virtio_transport_release+0x10/0x10 [ 125.028538][ T6419] ? __pfx_woken_wake_function+0x10/0x10 [ 125.034185][ T6419] ? __local_bh_enable_ip+0x168/0x200 [ 125.039560][ T6419] ? __vsock_release+0xa4/0x4f0 [ 125.044414][ T6419] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 125.050138][ T6419] ? __vsock_release+0x2c/0x4f0 [ 125.055000][ T6419] ? do_raw_spin_unlock+0x13c/0x8b0 [ 125.060200][ T6419] ? __vsock_release+0x3b/0x4f0 [ 125.065066][ T6419] __vsock_release+0xf1/0x4f0 [ 125.069748][ T6419] vsock_release+0x97/0x100 [ 125.074254][ T6419] sock_close+0xbc/0x240 [ 125.078587][ T6419] ? __pfx_sock_close+0x10/0x10 [ 125.083432][ T6419] __fput+0x3e9/0x9f0 [ 125.087422][ T6419] task_work_run+0x24f/0x310 [ 125.092010][ T6419] ? _raw_spin_unlock+0x28/0x50 [ 125.096859][ T6419] ? __pfx_task_work_run+0x10/0x10 [ 125.101969][ T6419] ? syscall_exit_to_user_mode+0xa3/0x340 [ 125.107691][ T6419] syscall_exit_to_user_mode+0x13f/0x340 [ 125.113322][ T6419] do_syscall_64+0x100/0x230 [ 125.117928][ T6419] ? clear_bhb_loop+0x35/0x90 [ 125.122614][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.128506][ T6419] RIP: 0033:0x7fc53c18cde9 [ 125.132925][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.152532][ T6419] RSP: 002b:00007fc53cf49038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 125.160961][ T6419] RAX: 0000000000000000 RBX: 00007fc53c3a5fa0 RCX: 00007fc53c18cde9 [ 125.168937][ T6419] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 125.176914][ T6419] RBP: 00007fc53c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.184970][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.192946][ T6419] R13: 0000000000000000 R14: 00007fc53c3a5fa0 R15: 00007ffc31047988 [ 125.200923][ T6419] [ 125.203939][ T6419] Modules linked in: [ 125.207840][ T6419] ---[ end trace 0000000000000000 ]--- [ 125.213293][ T6419] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 125.218755][ T6419] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 4b b9 7f 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 38 b1 88 00 48 be 00 00 00 00 00 fc [ 125.238361][ T6419] RSP: 0018:ffffc9001053f770 EFLAGS: 00010006 [ 125.244427][ T6419] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.252396][ T6419] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 125.260391][ T6419] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 125.268453][ T6419] R10: dffffc0000000000 R11: fffffbfff20346cf R12: ffff888032bb8000 [ 125.276429][ T6419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 125.284396][ T6419] FS: 00007fc53cf496c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 125.293332][ T6419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.299920][ T6419] CR2: 000000110c4262d0 CR3: 0000000033b9e000 CR4: 00000000003526f0 [ 125.307891][ T6419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.315856][ T6419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.323933][ T6419] Kernel panic - not syncing: Fatal exception [ 125.330135][ T6419] Kernel Offset: disabled [ 125.334446][ T6419] Rebooting in 86400 seconds..