last executing test programs: 15.506780992s ago: executing program 3 (id=10): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 14.537691412s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 14.413540585s ago: executing program 3 (id=12): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d48"], 0x7) 14.268668714s ago: executing program 4 (id=14): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x26020480) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 11.81956758s ago: executing program 2 (id=3): socket$inet_udp(0x2, 0x2, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 10.845886978s ago: executing program 4 (id=15): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ieee802154(0x0, r0) 10.158000332s ago: executing program 2 (id=16): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 10.156802384s ago: executing program 3 (id=17): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 10.007252916s ago: executing program 1 (id=2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 8.314833408s ago: executing program 1 (id=19): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 8.270350314s ago: executing program 4 (id=20): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) 7.008792905s ago: executing program 3 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cfffffffffddbdf2507000000", @ANYRES32=r0, @ANYBLOB="0200640b0a000200aaaaaaaaaabb00000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=ANY=[], 0x50}}, 0x40008014) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.830402419s ago: executing program 2 (id=23): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 4.87078484s ago: executing program 0 (id=24): r0 = socket(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001400), 0x0, 0x20, 0x0) 4.540445801s ago: executing program 2 (id=25): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 4.270476413s ago: executing program 0 (id=26): r0 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000005c0)={r1}, &(0x7f0000000600)=0x8) 3.837292345s ago: executing program 1 (id=27): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 3.812335861s ago: executing program 0 (id=28): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x10, 0x1b, 0x1}, 0x10}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x28040000}, 0x4000000) 3.766207025s ago: executing program 4 (id=29): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b080000000000000000000000baec"], 0x20}}, 0x4000000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x95b, 0x0, 0x0, 0x0, 0x4400046}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r5 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYBLOB="98218727f7e1084a6dda805831605231474402e23e3db061a6df58e217d423ab6f645335bebe33ee162519112fb671d01d05a7958bc2d26157b932aac02dfaa3907f7e4eecad98cab6bc875b1c4ad5c42e3bcf187a121a87aba92c131d8abb26350ecd66e26c32f486292efe7974d26796226ed61b76b9f1952d71cf3251f05c1fc2bd3f5cba", @ANYBLOB="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"]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x80, 0x0}, 0xe07e872420dfefca) close_range(r6, 0xffffffffffffffff, 0x0) 3.602325742s ago: executing program 3 (id=30): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x26020480) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 3.478966472s ago: executing program 0 (id=31): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) 848.116777ms ago: executing program 0 (id=32): socket$inet6(0xa, 0x4, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 183.395729ms ago: executing program 3 (id=33): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @empty}, 0x10) listen(r1, 0xda90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, 0x0, 0x20048010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x32) 0s ago: executing program 0 (id=34): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 84.584447][ T5823] cgroup: Unknown subsys name 'net' [ 84.721215][ T5823] cgroup: Unknown subsys name 'cpuset' [ 84.730706][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.364846][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.636347][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.644911][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.688016][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.692026][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.696366][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.703467][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.716670][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.717980][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.725069][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.738999][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.748181][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.748572][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.763769][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.763772][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.764762][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.798981][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.807734][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.808178][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.822868][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.833549][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.884265][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.892986][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.901000][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.909212][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.917233][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.580136][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 91.719895][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.731666][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.745057][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.842491][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 91.888558][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.895830][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.903922][ T5845] bridge_slave_0: entered allmulticast mode [ 91.912390][ T5845] bridge_slave_0: entered promiscuous mode [ 91.961947][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.969281][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.976459][ T5845] bridge_slave_1: entered allmulticast mode [ 91.985019][ T5845] bridge_slave_1: entered promiscuous mode [ 92.087217][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.150659][ T1213] cfg80211: failed to load regulatory.db [ 92.173671][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.201856][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.209349][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.216723][ T5834] bridge_slave_0: entered allmulticast mode [ 92.225175][ T5834] bridge_slave_0: entered promiscuous mode [ 92.255412][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.262975][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.270820][ T5838] bridge_slave_0: entered allmulticast mode [ 92.278433][ T5838] bridge_slave_0: entered promiscuous mode [ 92.336259][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.343956][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.351719][ T5834] bridge_slave_1: entered allmulticast mode [ 92.362014][ T5834] bridge_slave_1: entered promiscuous mode [ 92.382513][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.390678][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.401847][ T5838] bridge_slave_1: entered allmulticast mode [ 92.410112][ T5838] bridge_slave_1: entered promiscuous mode [ 92.432595][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.440301][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.447601][ T5850] bridge_slave_0: entered allmulticast mode [ 92.454838][ T5850] bridge_slave_0: entered promiscuous mode [ 92.467370][ T5845] team0: Port device team_slave_0 added [ 92.485994][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.493538][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.500860][ T5842] bridge_slave_0: entered allmulticast mode [ 92.509108][ T5842] bridge_slave_0: entered promiscuous mode [ 92.533923][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.541265][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.548916][ T5850] bridge_slave_1: entered allmulticast mode [ 92.556231][ T5850] bridge_slave_1: entered promiscuous mode [ 92.564988][ T5845] team0: Port device team_slave_1 added [ 92.583090][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.590490][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.597869][ T5842] bridge_slave_1: entered allmulticast mode [ 92.605116][ T5842] bridge_slave_1: entered promiscuous mode [ 92.614798][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.627883][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.666719][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.680872][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.792335][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.807955][ T5838] team0: Port device team_slave_0 added [ 92.817915][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.831328][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.841872][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.851659][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.878240][ T5843] Bluetooth: hci0: command tx timeout [ 92.878446][ T5843] Bluetooth: hci1: command tx timeout [ 92.889301][ T5846] Bluetooth: hci3: command tx timeout [ 92.894884][ T5846] Bluetooth: hci2: command tx timeout [ 92.898165][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.928401][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.947177][ T5846] Bluetooth: hci4: command tx timeout [ 92.958030][ T5838] team0: Port device team_slave_1 added [ 92.992647][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.001033][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.027732][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.041840][ T5834] team0: Port device team_slave_0 added [ 93.051759][ T5834] team0: Port device team_slave_1 added [ 93.108411][ T5850] team0: Port device team_slave_0 added [ 93.163398][ T5842] team0: Port device team_slave_0 added [ 93.172997][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.180046][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.208846][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.222813][ T5850] team0: Port device team_slave_1 added [ 93.244222][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.251581][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.277857][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.291129][ T5842] team0: Port device team_slave_1 added [ 93.312379][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.319864][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.346193][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.406124][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.413516][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.439826][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.467000][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.473987][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.499959][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.512741][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.520204][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.546381][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.563342][ T5845] hsr_slave_0: entered promiscuous mode [ 93.571033][ T5845] hsr_slave_1: entered promiscuous mode [ 93.601328][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.608536][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.635218][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.654204][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.661761][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.688436][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.795598][ T5838] hsr_slave_0: entered promiscuous mode [ 93.803089][ T5838] hsr_slave_1: entered promiscuous mode [ 93.810359][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.818301][ T5838] Cannot create hsr debugfs directory [ 93.852742][ T5850] hsr_slave_0: entered promiscuous mode [ 93.859254][ T5850] hsr_slave_1: entered promiscuous mode [ 93.865360][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.873657][ T5850] Cannot create hsr debugfs directory [ 93.898645][ T5834] hsr_slave_0: entered promiscuous mode [ 93.905279][ T5834] hsr_slave_1: entered promiscuous mode [ 93.913332][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.921060][ T5834] Cannot create hsr debugfs directory [ 93.991501][ T5842] hsr_slave_0: entered promiscuous mode [ 93.999136][ T5842] hsr_slave_1: entered promiscuous mode [ 94.005354][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.013254][ T5842] Cannot create hsr debugfs directory [ 94.568380][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.594688][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.605585][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.618929][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.684313][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.699090][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.713331][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.747152][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.813312][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.833017][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.857070][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.872747][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.947083][ T5843] Bluetooth: hci3: command tx timeout [ 94.947178][ T5839] Bluetooth: hci1: command tx timeout [ 94.947189][ T5837] Bluetooth: hci0: command tx timeout [ 94.964738][ T5846] Bluetooth: hci2: command tx timeout [ 95.026939][ T5846] Bluetooth: hci4: command tx timeout [ 95.040082][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.059198][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.078021][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.094598][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.133447][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.165960][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.201142][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.208563][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.256663][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.283567][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.290788][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.319024][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.326043][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.336612][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.361170][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.405722][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.473267][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.518804][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.528286][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.535421][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.565726][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.572907][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.621279][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.628517][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.696086][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.703343][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.823968][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.904975][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.939545][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.984533][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.032007][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.039227][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.082037][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.112737][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.119972][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.179505][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.186664][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.219049][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.226722][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.474377][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.649011][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.701691][ T5842] veth0_vlan: entered promiscuous mode [ 96.747377][ T5842] veth1_vlan: entered promiscuous mode [ 96.910841][ T5838] veth0_vlan: entered promiscuous mode [ 96.930781][ T5838] veth1_vlan: entered promiscuous mode [ 96.959176][ T5845] veth0_vlan: entered promiscuous mode [ 96.981589][ T5842] veth0_macvtap: entered promiscuous mode [ 97.002335][ T5845] veth1_vlan: entered promiscuous mode [ 97.028245][ T5839] Bluetooth: hci1: command tx timeout [ 97.033726][ T5839] Bluetooth: hci0: command tx timeout [ 97.039576][ T5843] Bluetooth: hci3: command tx timeout [ 97.045602][ T5846] Bluetooth: hci2: command tx timeout [ 97.052922][ T5842] veth1_macvtap: entered promiscuous mode [ 97.086393][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.111400][ T5846] Bluetooth: hci4: command tx timeout [ 97.123723][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.136669][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.163515][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.174117][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.183569][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.194299][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.236621][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.279031][ T5838] veth0_macvtap: entered promiscuous mode [ 97.311722][ T5838] veth1_macvtap: entered promiscuous mode [ 97.322858][ T5845] veth0_macvtap: entered promiscuous mode [ 97.338076][ T5850] veth0_vlan: entered promiscuous mode [ 97.361877][ T5845] veth1_macvtap: entered promiscuous mode [ 97.411816][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.422622][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.432191][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.447614][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.463589][ T5850] veth1_vlan: entered promiscuous mode [ 97.522515][ T5834] veth0_vlan: entered promiscuous mode [ 97.536603][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.550244][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.564325][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.574309][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.583246][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.593160][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.611023][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.641371][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.660757][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.676228][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.693342][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.702483][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.732645][ T5834] veth1_vlan: entered promiscuous mode [ 97.764203][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.775957][ T5850] veth0_macvtap: entered promiscuous mode [ 97.802066][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.834149][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.850095][ T5850] veth1_macvtap: entered promiscuous mode [ 97.983766][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.992803][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.028917][ T5834] veth0_macvtap: entered promiscuous mode [ 98.063963][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.119763][ T5834] veth1_macvtap: entered promiscuous mode [ 98.156197][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.184929][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.222930][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.276270][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.306608][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.318105][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.327885][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.337159][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.422033][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.466385][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.486887][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.495669][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.509237][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.572272][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.661531][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.663749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.866958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.109437][ T5843] Bluetooth: hci3: command tx timeout [ 99.115319][ T5839] Bluetooth: hci0: command tx timeout [ 99.120996][ T5843] Bluetooth: hci1: command tx timeout [ 99.126937][ T5846] Bluetooth: hci2: command tx timeout [ 99.187520][ T5839] Bluetooth: hci4: command tx timeout [ 99.350463][ T5965] sctp: failed to load transform for md5: -2 [ 99.460822][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.513623][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.578677][ T5979] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11'. [ 99.643154][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.664657][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.741953][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.779319][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.967429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.976921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 100.268449][ T5991] ======================================================= [ 100.268449][ T5991] WARNING: The mand mount option has been deprecated and [ 100.268449][ T5991] and is ignored by this kernel. Remove the mand [ 100.268449][ T5991] option from the mount to silence this warning. [ 100.268449][ T5991] ======================================================= [ 100.812477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.821376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.043813][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.078766][ T5991] lo speed is unknown, defaulting to 1000 [ 101.087413][ T5991] lo speed is unknown, defaulting to 1000 [ 101.095317][ T5991] lo speed is unknown, defaulting to 1000 [ 101.318794][ T5991] infiniband sz1: set active [ 101.323662][ T5991] infiniband sz1: added lo [ 101.342794][ T5998] netlink: 46 bytes leftover after parsing attributes in process `syz.4.14'. [ 101.410549][ T5991] RDS/IB: sz1: added [ 101.415146][ T5991] smc: adding ib device sz1 with port count 1 [ 101.421730][ T5991] smc: ib device sz1 port 1 has pnetid [ 101.529894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.587630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.632270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.667617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.689133][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.739788][ T43] lo speed is unknown, defaulting to 1000 [ 102.746561][ T5991] lo speed is unknown, defaulting to 1000 [ 102.914217][ T5986] sctp: failed to load transform for md5: -2 [ 102.920695][ T5940] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.939548][ T5991] lo speed is unknown, defaulting to 1000 [ 102.986530][ T6006] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.204054][ T24] lo speed is unknown, defaulting to 1000 [ 103.212725][ T5991] lo speed is unknown, defaulting to 1000 [ 103.439560][ T5991] lo speed is unknown, defaulting to 1000 [ 103.645921][ T5991] lo speed is unknown, defaulting to 1000 [ 104.632458][ T6020] rdma_rxe: rxe_newlink: failed to add lo [ 105.371192][ T6018] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.666392][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.804225][ T6015] sctp: failed to load transform for md5: -2 [ 105.850674][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.931305][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.977073][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.990081][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.104506][ T6039] loop1: detected capacity change from 0 to 512 [ 106.973376][ T6021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.153218][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.164298][ T6039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.250759][ T6039] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.276684][ T6039] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.19: bg 0: block 248: padding at end of block bitmap is not set [ 108.372875][ T6039] Quota error (device loop1): write_blk: dquota write failed [ 108.380921][ T6039] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 108.392097][ T6039] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.19: Failed to acquire dquot type 1 [ 108.435003][ T6039] EXT4-fs (loop1): 1 truncate cleaned up [ 108.458791][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.077775][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 109.250387][ T6033] team_slave_0: entered promiscuous mode [ 109.256899][ T6033] team_slave_1: entered promiscuous mode [ 109.416541][ T6033] macsec1: entered allmulticast mode [ 109.502980][ T6033] team0: entered allmulticast mode [ 109.561433][ T6033] team_slave_0: entered allmulticast mode [ 109.611217][ T6033] team_slave_1: entered allmulticast mode [ 109.718265][ T6033] team0: left allmulticast mode [ 109.779075][ T6033] team_slave_0: left allmulticast mode [ 109.835836][ T6033] team_slave_1: left allmulticast mode [ 109.868333][ T6033] team_slave_0: left promiscuous mode [ 109.873910][ T6033] team_slave_1: left promiscuous mode [ 110.092832][ T6044] Zero length message leads to an empty skb [ 110.118307][ T6039] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.150026][ T6053] loop2: detected capacity change from 0 to 512 [ 110.170360][ T24] usb 3-1: USB disconnect, device number 2 [ 110.229113][ T6053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.286375][ T6053] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.300639][ T6053] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.25: bg 0: block 248: padding at end of block bitmap is not set [ 110.323433][ T6053] Quota error (device loop2): write_blk: dquota write failed [ 110.331616][ T6053] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 110.348279][ T6053] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.25: Failed to acquire dquot type 1 [ 110.368928][ T6053] EXT4-fs (loop2): 1 truncate cleaned up [ 110.380840][ T6057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.408095][ T6053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.579316][ T6061] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.701219][ T2155] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 110.908077][ T6068] netlink: 46 bytes leftover after parsing attributes in process `syz.3.30'. [ 112.036814][ T6070] overlayfs: failed to resolve './file1': -2 [ 112.164869][ T6071] sz1: rxe_newlink: already configured on lo [ 112.528812][ T2155] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.567092][ T2155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 112.621132][ T2155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.671113][ T2155] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 112.721983][ T2155] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.750551][ T2155] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.771489][ T2155] usb 5-1: Manufacturer: syz [ 112.792726][ T2155] usb 5-1: config 0 descriptor?? [ 113.357107][ T2155] rc_core: IR keymap rc-hauppauge not found [ 113.386583][ T2155] Registered IR keymap rc-empty [ 113.497460][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.562795][ T6061] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.575097][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.664815][ T2155] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 113.752426][ T2155] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 113.801902][ T6053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.915793][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.940482][ T6061] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.960555][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.998579][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.019140][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.067789][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.107399][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.371742][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.406911][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.426922][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.452558][ T2155] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.503644][ T6098] overlayfs: failed to resolve './file1': -2 [ 114.594625][ T6099] sz1: rxe_newlink: already configured on lo [ 114.908465][ T2155] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.047138][ C0] ------------[ cut here ]------------ [ 115.052922][ C0] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#0: syz.0.34/6095 [ 115.063485][ C0] Modules linked in: [ 115.067665][ C0] CPU: 0 UID: 0 PID: 6095 Comm: syz.0.34 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 115.079128][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.089294][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 115.095678][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 115.115389][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 115.118228][ T2155] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.121538][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888028a01e00 [ 115.138006][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.146027][ C0] RBP: 0000000000000000 R08: ffff888028a01e00 R09: 0000000000000003 [ 115.154132][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805933a500 [ 115.162217][ C0] R13: dffffc0000000000 R14: ffff88805933a9d0 R15: ffff888058a5a424 [ 115.170282][ C0] FS: 00007f8ed05586c0(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 115.179324][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.185959][ C0] CR2: 00002000004f4030 CR3: 000000007b946000 CR4: 00000000003526f0 [ 115.194046][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.202114][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.210196][ C0] Call Trace: [ 115.213542][ C0] [ 115.216427][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 115.222093][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 115.227643][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 115.233797][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 115.239470][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.243024][ T2155] usb 5-1: USB disconnect, device number 2 [ 115.246732][ C0] __iterate_interfaces+0x2a8/0x590 [ 115.246832][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.246865][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.246892][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.277411][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 115.284500][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 115.289872][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 115.295762][ C0] __hrtimer_run_queues+0x529/0xc60 [ 115.301102][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 115.306939][ C0] ? read_tsc+0x9/0x20 [ 115.311057][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 115.316959][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 115.322122][ C0] handle_softirqs+0x283/0x870 [ 115.327002][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 115.331835][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 115.337236][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 115.342496][ C0] __irq_exit_rcu+0xca/0x1f0 [ 115.347212][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 115.352482][ C0] irq_exit_rcu+0x9/0x30 [ 115.356877][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 115.362579][ C0] [ 115.365560][ C0] [ 115.368589][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.374622][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 115.381356][ C0] Code: 74 05 e8 5b c1 5b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c3 9a 24 f6 65 8b 05 8c c4 31 07 85 c0 74 40 48 c7 04 24 0e 36 [ 115.381710][ T6094] lo speed is unknown, defaulting to 1000 [ 115.401072][ C0] RSP: 0018:ffffc9000af675e0 EFLAGS: 00000206 [ 115.401107][ C0] RAX: ad670ab28d1fb500 RBX: 0000000000000a02 RCX: ad670ab28d1fb500 [ 115.401125][ C0] RDX: 0000000000000006 RSI: ffffffff8d98bd8e RDI: 0000000000000001 [ 115.401140][ C0] RBP: ffffc9000af67670 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 115.401156][ C0] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: dffffc0000000000 [ 115.401173][ C0] R13: ffff888028a16a40 R14: ffff888028a16a00 R15: 1ffff920015ecebc [ 115.401210][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 115.401249][ C0] ? autoremove_wake_function+0x39/0x100 [ 115.401282][ C0] __wake_up_common_lock+0x190/0x1f0 [ 115.401315][ C0] __unix_dgram_recvmsg+0x49f/0xde0 [ 115.476469][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 115.482843][ C0] ? irqentry_exit+0x74/0x90 [ 115.487559][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 115.492647][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 115.498310][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 115.503404][ C0] ____sys_recvmsg+0x3aa/0x460 [ 115.508284][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 115.513648][ C0] ? import_iovec+0x74/0xa0 [ 115.518276][ C0] ___sys_recvmsg+0x1b5/0x510 [ 115.523019][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 115.528373][ C0] ? __might_fault+0xb0/0x130 [ 115.533104][ C0] do_recvmmsg+0x307/0x770 [ 115.537647][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 115.542656][ C0] ? __pfx_do_futex+0x10/0x10 [ 115.547444][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 115.552517][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 115.558161][ C0] ? rcu_is_watching+0x15/0xb0 [ 115.562992][ C0] ? do_syscall_64+0xbe/0x3b0 [ 115.567780][ C0] do_syscall_64+0xfa/0x3b0 [ 115.572336][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.577648][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.583761][ C0] ? clear_bhb_loop+0x60/0xb0 [ 115.588542][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.594488][ C0] RIP: 0033:0x7f8ecf78e929 [ 115.599120][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.618908][ C0] RSP: 002b:00007f8ed0558038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 115.627420][ C0] RAX: ffffffffffffffda RBX: 00007f8ecf9b6080 RCX: 00007f8ecf78e929 [ 115.635432][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 115.643497][ C0] RBP: 00007f8ecf810b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.651568][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 115.659627][ C0] R13: 0000000000000000 R14: 00007f8ecf9b6080 R15: 00007ffedcd2b9c8 [ 115.667708][ C0] [ 115.670770][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.678088][ C0] CPU: 0 UID: 0 PID: 6095 Comm: syz.0.34 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 115.689409][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.699509][ C0] Call Trace: [ 115.702831][ C0] [ 115.705711][ C0] dump_stack_lvl+0x99/0x250 [ 115.710364][ C0] ? __asan_memcpy+0x40/0x70 [ 115.715006][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.720258][ C0] ? __pfx__printk+0x10/0x10 [ 115.724910][ C0] panic+0x2db/0x790 [ 115.728874][ C0] ? __pfx_panic+0x10/0x10 [ 115.733361][ C0] __warn+0x334/0x4c0 [ 115.737388][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.743163][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.748934][ C0] report_bug+0x2be/0x4f0 [ 115.753314][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.759067][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.764836][ C0] ? __ieee80211_beacon_get+0x125f/0x1630 [ 115.770607][ C0] handle_bug+0x84/0x160 [ 115.774925][ C0] exc_invalid_op+0x1a/0x50 [ 115.779493][ C0] asm_exc_invalid_op+0x1a/0x20 [ 115.784359][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 115.790699][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 115.810341][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 115.816422][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888028a01e00 [ 115.824399][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.832381][ C0] RBP: 0000000000000000 R08: ffff888028a01e00 R09: 0000000000000003 [ 115.840367][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805933a500 [ 115.848348][ C0] R13: dffffc0000000000 R14: ffff88805933a9d0 R15: ffff888058a5a424 [ 115.856332][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 115.861895][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 115.867637][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 115.873373][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 115.878935][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 115.884411][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 115.890504][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 115.896065][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.903361][ C0] __iterate_interfaces+0x2a8/0x590 [ 115.908572][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.914741][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.921946][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.928023][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 115.935086][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 115.940302][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 115.946127][ C0] __hrtimer_run_queues+0x529/0xc60 [ 115.951360][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 115.957093][ C0] ? read_tsc+0x9/0x20 [ 115.961175][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 115.967002][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 115.972152][ C0] handle_softirqs+0x283/0x870 [ 115.976957][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 115.981758][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 115.987069][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 115.992284][ C0] __irq_exit_rcu+0xca/0x1f0 [ 115.996894][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 116.002119][ C0] irq_exit_rcu+0x9/0x30 [ 116.006378][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 116.012027][ C0] [ 116.014961][ C0] [ 116.017897][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.023883][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 116.030395][ C0] Code: 74 05 e8 5b c1 5b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c3 9a 24 f6 65 8b 05 8c c4 31 07 85 c0 74 40 48 c7 04 24 0e 36 [ 116.050019][ C0] RSP: 0018:ffffc9000af675e0 EFLAGS: 00000206 [ 116.056097][ C0] RAX: ad670ab28d1fb500 RBX: 0000000000000a02 RCX: ad670ab28d1fb500 [ 116.064079][ C0] RDX: 0000000000000006 RSI: ffffffff8d98bd8e RDI: 0000000000000001 [ 116.072059][ C0] RBP: ffffc9000af67670 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 116.080046][ C0] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: dffffc0000000000 [ 116.088027][ C0] R13: ffff888028a16a40 R14: ffff888028a16a00 R15: 1ffff920015ecebc [ 116.096024][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 116.102374][ C0] ? autoremove_wake_function+0x39/0x100 [ 116.108021][ C0] __wake_up_common_lock+0x190/0x1f0 [ 116.113323][ C0] __unix_dgram_recvmsg+0x49f/0xde0 [ 116.118537][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 116.124260][ C0] ? irqentry_exit+0x74/0x90 [ 116.128879][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 116.133915][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 116.139485][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 116.144531][ C0] ____sys_recvmsg+0x3aa/0x460 [ 116.149311][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 116.154619][ C0] ? import_iovec+0x74/0xa0 [ 116.159140][ C0] ___sys_recvmsg+0x1b5/0x510 [ 116.163845][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 116.169108][ C0] ? __might_fault+0xb0/0x130 [ 116.173902][ C0] do_recvmmsg+0x307/0x770 [ 116.178339][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 116.183305][ C0] ? __pfx_do_futex+0x10/0x10 [ 116.188098][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 116.193137][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 116.198689][ C0] ? rcu_is_watching+0x15/0xb0 [ 116.203483][ C0] ? do_syscall_64+0xbe/0x3b0 [ 116.208184][ C0] do_syscall_64+0xfa/0x3b0 [ 116.212702][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.217924][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.224005][ C0] ? clear_bhb_loop+0x60/0xb0 [ 116.228696][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.234598][ C0] RIP: 0033:0x7f8ecf78e929 [ 116.239024][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.258722][ C0] RSP: 002b:00007f8ed0558038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 116.267144][ C0] RAX: ffffffffffffffda RBX: 00007f8ecf9b6080 RCX: 00007f8ecf78e929 [ 116.275125][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 116.283104][ C0] RBP: 00007f8ecf810b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.291082][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 116.299060][ C0] R13: 0000000000000000 R14: 00007f8ecf9b6080 R15: 00007ffedcd2b9c8 [ 116.307054][ C0] [ 116.310417][ C0] Kernel Offset: disabled [ 116.314757][ C0] Rebooting in 86400 seconds..