last executing test programs: 41.195914946s ago: executing program 4 (id=336): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 40.190410636s ago: executing program 4 (id=342): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000400)=[@uexit, @out_dx={0x6a, 0x28, {0x3882, 0x0, 0x101}}, @uexit, @uexit, @uexit, @nested_vmresume={0x130, 0x18, 0x2}, @nested_load_code={0x12e, 0x7a, {0x3, "db98f000000036f3460fa7d00f78db2e66430f38827100420f683e8f29a0957b0e66b851000f00d0c744240000000000c744240200000000c7442406000000000f0114240f20e035800000000f22e0c7442400ca000000c744240200600000ff1c24"}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_load_code={0x12e, 0x5b, {0x0, "3ee3c1400fc799634d000066400f3880497b672626430fc75b000f01c20f20e035000002000f22e0c42269901ce48fc850a27305f166410f3880685d66b80a010f00d0"}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0xab5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6406, 0x22, 0x8, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x7f}}, @uexit, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5b3, 0xb, 0x10b, 0x9}}, @wr_crn={0x67, 0x20, {0xd, 0x8}}, @uexit, @uexit, @uexit, @rdmsr={0x66, 0x18, {0x8ec}}, @uexit], 0x335}) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, {[0x6, 0x5, 0xe0a0, 0xffffffffffffffff, 0x101, 0x0, 0x8a3, 0x9]}}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r4, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'veth0\x00'}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000000000660000000000000018000000000000000000000000000000950000000000000057030000000000009500"/88], &(0x7f0000000180)='syzkaller\x00'}, 0x94) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf8c, 0x1b}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c00}, 0x20004000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 39.256916367s ago: executing program 4 (id=346): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) 35.036316238s ago: executing program 4 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 30.832404449s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x3}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f00000025c0)=""/158, &(0x7f0000000000)=0x9e) 28.9567094s ago: executing program 4 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x1, 0x0, 0x3, 0x409, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) 13.864259489s ago: executing program 32 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x1, 0x0, 0x3, 0x409, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) 13.244216465s ago: executing program 2 (id=404): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 10.897580444s ago: executing program 0 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) 9.950107637s ago: executing program 0 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) 8.487482028s ago: executing program 0 (id=414): getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x20040011) capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x504e, 0x0, 0x2, 0x0, 0x0) 8.016737739s ago: executing program 2 (id=415): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x64, r3, 0xa05, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x2004040) 7.760541203s ago: executing program 0 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400021d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000200), &(0x7f00000003c0)=r4}, 0x20) 6.814968741s ago: executing program 0 (id=418): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.574388908s ago: executing program 1 (id=420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x30, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_mount_image$fuse(0x0, 0x0, 0x200810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x68) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 6.541919393s ago: executing program 2 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 5.355579308s ago: executing program 2 (id=422): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r5, 0x25, 0x0, @val=@netkit}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r1], 0x3c}}, 0x8000) syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x40, {0x6, 0x6, '\x00', 0x2, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @remote}}}}}}}, 0x0) 5.103180154s ago: executing program 1 (id=424): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.993713766s ago: executing program 1 (id=425): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x92b}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5", 0x45}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f", 0x22}, {&(0x7f00000006c0)}, {0x0}], 0x6}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x56, "3dc3a18f60a038927bd526b8e8bd8ebc207869bb830be27d3d0d6bbcd9316dcd74e1d3b550d8f3888d704fe61fd9a4f20c6c1c78f3a33f8cf84e8c5df2984b5e0ba2f0ecfc8245f6f298ac4b221425630b0163e529c9"}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.860810544s ago: executing program 1 (id=426): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) write$P9_RREAD(r2, &(0x7f0000000140)={0xb, 0x75, 0x2}, 0xb) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.199316811s ago: executing program 2 (id=427): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.9658203s ago: executing program 2 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 2.874404896s ago: executing program 0 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x6, 0x81, 0xfff, 0xffffffff, 0x565f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 2.873423s ago: executing program 1 (id=430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x10001}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 2.659089597s ago: executing program 3 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r3) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x3) 1.627850729s ago: executing program 3 (id=432): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="850000000800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1.370834789s ago: executing program 1 (id=433): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}}}, 0x80}, 0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r5, 0x3ff}, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) 1.327417498s ago: executing program 3 (id=434): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x80, 0x1000, 0x6, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast2, @multicast2}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1\x00'}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.083231209s ago: executing program 3 (id=435): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 987.547381ms ago: executing program 3 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x208004, 0x4) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x267, 0x40000023, 0x0) 0s ago: executing program 3 (id=437): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r0, r0, 0x0, 0x10000a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 66.668649][ T5805] cgroup: Unknown subsys name 'net' [ 66.818318][ T5805] cgroup: Unknown subsys name 'cpuset' [ 66.826615][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.087112][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.429996][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.436557][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.698819][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.708625][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.718031][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.718840][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.726135][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.734129][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.747838][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.755956][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.756822][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.771618][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.779167][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.779562][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.787767][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.805511][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.810908][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.816215][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.820425][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.834604][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.840063][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.856382][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.863463][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.874499][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.882315][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.893165][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.902441][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.419193][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 72.583068][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 72.670434][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.708889][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.716939][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.724256][ T5819] bridge_slave_0: entered allmulticast mode [ 72.733202][ T5819] bridge_slave_0: entered promiscuous mode [ 72.743627][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.751138][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.758616][ T5819] bridge_slave_1: entered allmulticast mode [ 72.766316][ T5819] bridge_slave_1: entered promiscuous mode [ 72.846049][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.872879][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.882853][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 72.918936][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.961324][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.968766][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976077][ T5817] bridge_slave_0: entered allmulticast mode [ 72.983363][ T5817] bridge_slave_0: entered promiscuous mode [ 73.016652][ T5819] team0: Port device team_slave_0 added [ 73.044053][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.051398][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.058667][ T5817] bridge_slave_1: entered allmulticast mode [ 73.066386][ T5817] bridge_slave_1: entered promiscuous mode [ 73.076778][ T5819] team0: Port device team_slave_1 added [ 73.158200][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.166442][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.173615][ T5832] bridge_slave_0: entered allmulticast mode [ 73.181247][ T5832] bridge_slave_0: entered promiscuous mode [ 73.211825][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.227508][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.234741][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.242293][ T5832] bridge_slave_1: entered allmulticast mode [ 73.249674][ T5832] bridge_slave_1: entered promiscuous mode [ 73.268734][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.275858][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.305507][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.320407][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.327720][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.354459][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.369620][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.459347][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.466846][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.474020][ T5829] bridge_slave_0: entered allmulticast mode [ 73.481592][ T5829] bridge_slave_0: entered promiscuous mode [ 73.490388][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.497857][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.505053][ T5829] bridge_slave_1: entered allmulticast mode [ 73.513188][ T5829] bridge_slave_1: entered promiscuous mode [ 73.531005][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.538274][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.545921][ T5818] bridge_slave_0: entered allmulticast mode [ 73.553240][ T5818] bridge_slave_0: entered promiscuous mode [ 73.567226][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.581300][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.604663][ T5817] team0: Port device team_slave_0 added [ 73.610551][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.618379][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.625884][ T5818] bridge_slave_1: entered allmulticast mode [ 73.633175][ T5818] bridge_slave_1: entered promiscuous mode [ 73.687738][ T5817] team0: Port device team_slave_1 added [ 73.700626][ T5819] hsr_slave_0: entered promiscuous mode [ 73.708258][ T5819] hsr_slave_1: entered promiscuous mode [ 73.740566][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.753610][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.803970][ T5832] team0: Port device team_slave_0 added [ 73.826499][ T51] Bluetooth: hci2: command tx timeout [ 73.839393][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.846557][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.872838][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.888268][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.901749][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.911078][ T51] Bluetooth: hci1: command tx timeout [ 73.911107][ T5142] Bluetooth: hci0: command tx timeout [ 73.925965][ T5832] team0: Port device team_slave_1 added [ 73.944906][ T5829] team0: Port device team_slave_0 added [ 73.952078][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.959291][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.985489][ T5142] Bluetooth: hci3: command tx timeout [ 73.985497][ T51] Bluetooth: hci4: command tx timeout [ 73.997207][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.040048][ T5829] team0: Port device team_slave_1 added [ 74.109173][ T5818] team0: Port device team_slave_0 added [ 74.127229][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.134180][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.160506][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.181976][ T5818] team0: Port device team_slave_1 added [ 74.189327][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.196466][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.222712][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.235936][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.242872][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.269084][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.324530][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.331731][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.358205][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.389169][ T5817] hsr_slave_0: entered promiscuous mode [ 74.397129][ T5817] hsr_slave_1: entered promiscuous mode [ 74.403624][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 74.409773][ T5817] Cannot create hsr debugfs directory [ 74.445376][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.452348][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.478538][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.492304][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.499310][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.525383][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.675963][ T5832] hsr_slave_0: entered promiscuous mode [ 74.682728][ T5832] hsr_slave_1: entered promiscuous mode [ 74.689458][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 74.695291][ T5832] Cannot create hsr debugfs directory [ 74.737201][ T5829] hsr_slave_0: entered promiscuous mode [ 74.744175][ T5829] hsr_slave_1: entered promiscuous mode [ 74.750754][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 74.756545][ T5829] Cannot create hsr debugfs directory [ 74.828823][ T5818] hsr_slave_0: entered promiscuous mode [ 74.835677][ T5818] hsr_slave_1: entered promiscuous mode [ 74.842269][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 74.848394][ T5818] Cannot create hsr debugfs directory [ 75.074521][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.125514][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.142884][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.181157][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.363822][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.380022][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.400337][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.412979][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.479416][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.499098][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.512855][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.525073][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.637652][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.651760][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.663908][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.678630][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.805720][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.817540][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.830474][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.840828][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.856312][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.898342][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.905641][ T5142] Bluetooth: hci2: command tx timeout [ 75.951718][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.959023][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.985730][ T5142] Bluetooth: hci0: command tx timeout [ 75.986723][ T51] Bluetooth: hci1: command tx timeout [ 76.016856][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.024020][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.050271][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.065606][ T51] Bluetooth: hci4: command tx timeout [ 76.065993][ T5142] Bluetooth: hci3: command tx timeout [ 76.088395][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.159730][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.189810][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.220571][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.227741][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.238843][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.246025][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.274118][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.281299][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.314984][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.322234][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.360923][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.466000][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.496507][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.557874][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.565073][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.616013][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.623226][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.649219][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.701124][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.732277][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.739520][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.779524][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.786752][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.876958][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.003573][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.042375][ T5819] veth0_vlan: entered promiscuous mode [ 77.069397][ T5819] veth1_vlan: entered promiscuous mode [ 77.233858][ T5817] veth0_vlan: entered promiscuous mode [ 77.312650][ T5832] veth0_vlan: entered promiscuous mode [ 77.331905][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.352547][ T5819] veth0_macvtap: entered promiscuous mode [ 77.362875][ T5817] veth1_vlan: entered promiscuous mode [ 77.390274][ T5819] veth1_macvtap: entered promiscuous mode [ 77.401775][ T5832] veth1_vlan: entered promiscuous mode [ 77.443965][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.503354][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.531618][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.567617][ T5817] veth0_macvtap: entered promiscuous mode [ 77.626294][ T360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.644203][ T5832] veth0_macvtap: entered promiscuous mode [ 77.659166][ T5817] veth1_macvtap: entered promiscuous mode [ 77.668868][ T360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.677897][ T360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.709222][ T360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.724414][ T5832] veth1_macvtap: entered promiscuous mode [ 77.760177][ T5818] veth0_vlan: entered promiscuous mode [ 77.794845][ T5818] veth1_vlan: entered promiscuous mode [ 77.819159][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.862190][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.877918][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.912398][ T3573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.926943][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.946690][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.954630][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.972306][ T3573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.982074][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.992008][ T5142] Bluetooth: hci2: command tx timeout [ 78.019688][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029835][ T3573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.066697][ T5142] Bluetooth: hci0: command tx timeout [ 78.067270][ T51] Bluetooth: hci1: command tx timeout [ 78.080057][ T3573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.089739][ T3573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.111038][ T3573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.116079][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.131575][ T5829] veth0_vlan: entered promiscuous mode [ 78.141426][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.148535][ T51] Bluetooth: hci4: command tx timeout [ 78.149271][ T5142] Bluetooth: hci3: command tx timeout [ 78.189231][ T5818] veth0_macvtap: entered promiscuous mode [ 78.218134][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.240681][ T5829] veth1_vlan: entered promiscuous mode [ 78.254723][ T5818] veth1_macvtap: entered promiscuous mode [ 78.362456][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.391536][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.442929][ T5829] veth0_macvtap: entered promiscuous mode [ 78.461333][ T5829] veth1_macvtap: entered promiscuous mode [ 78.480635][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.503026][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.558272][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.607358][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.615794][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.621929][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.636495][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.648503][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.675940][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.689636][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.719500][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.728460][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.758857][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.834607][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.011074][ T3573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.888958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.016120][ T3573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.073505][ T5142] Bluetooth: hci2: command tx timeout [ 80.105307][ T3573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.209660][ T5142] Bluetooth: hci1: command tx timeout [ 80.210073][ T51] Bluetooth: hci0: command tx timeout [ 80.225682][ T51] Bluetooth: hci4: command tx timeout [ 80.235328][ T51] Bluetooth: hci3: command tx timeout [ 80.281346][ T3573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.821825][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.865999][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.930796][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.066148][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.211942][ T5963] fuse: root generation should be zero [ 81.350228][ T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.360770][ T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.782688][ T360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.920966][ T24] cfg80211: failed to load regulatory.db [ 82.266017][ T360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.755956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.764903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.858342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.960779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.063273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.072099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.176432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.185122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.337845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.993396][ T6003] loop0: detected capacity change from 0 to 128 [ 88.916014][ T5142] block nbd4: Receive control failed (result -32) [ 88.927778][ T6007] block nbd4: shutting down sockets [ 92.487557][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 92.570574][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 92.650420][ T6048] loop2: detected capacity change from 0 to 7 [ 93.191554][ T6048] loop2: [ 93.194662][ T6048] loop2: partition table partially beyond EOD, truncated [ 93.254408][ T6058] netlink: 'syz.1.34': attribute type 21 has an invalid length. [ 93.262531][ T6058] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34'. [ 95.645731][ T6075] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 96.822415][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 98.511042][ T6091] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.751769][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.765862][ T6098] No such timeout policy "syz1" [ 99.367225][ T6099] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.372840][ T6115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.280104][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.301893][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.446243][ T6126] team0: Port device team_slave_1 removed [ 107.067595][ T6158] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 107.083540][ T6157] sctp: [Deprecated]: syz.1.60 (pid 6157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.083540][ T6157] Use struct sctp_sack_info instead [ 107.493701][ T6168] loop1: detected capacity change from 0 to 2048 [ 107.824750][ T6168] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 107.840217][ T6168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.998584][ T10] IPVS: starting estimator thread 0... [ 109.576256][ T6192] IPVS: using max 28 ests per chain, 67200 per kthread [ 110.382159][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 118.562400][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 121.618522][ T6313] loop4: detected capacity change from 0 to 256 [ 122.347797][ T6322] syz.2.111 uses obsolete (PF_INET,SOCK_PACKET) [ 123.156568][ T6329] loop3: detected capacity change from 0 to 512 [ 123.177492][ T6329] ======================================================= [ 123.177492][ T6329] WARNING: The mand mount option has been deprecated and [ 123.177492][ T6329] and is ignored by this kernel. Remove the mand [ 123.177492][ T6329] option from the mount to silence this warning. [ 123.177492][ T6329] ======================================================= [ 123.215781][ T5907] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.456096][ T6329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.513883][ T6329] EXT4-fs: Mount option(s) incompatible with ext3 [ 123.575289][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 123.612685][ T5907] usb 3-1: config 0 has no interfaces? [ 123.663811][ T5907] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.705316][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.741608][ T5907] usb 3-1: Product: syz [ 123.763506][ T5907] usb 3-1: Manufacturer: syz [ 123.789953][ T5907] usb 3-1: SerialNumber: syz [ 123.871541][ T5907] usb 3-1: config 0 descriptor?? [ 124.106217][ T6340] netlink: 'syz.3.117': attribute type 3 has an invalid length. [ 124.114853][ T6340] netlink: 'syz.3.117': attribute type 3 has an invalid length. [ 124.279080][ T6322] Zero length message leads to an empty skb [ 124.354446][ T5920] usb 3-1: USB disconnect, device number 2 [ 124.585259][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.669050][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.680172][ T5834] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 125.689807][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.902153][ T5834] usb 1-1: config 0 descriptor?? [ 125.911124][ T5834] usb 1-1: bad CDC descriptors [ 126.900165][ T6373] loop0: detected capacity change from 0 to 1024 [ 127.141435][ T6381] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.126'. [ 127.182590][ T6384] warning: `syz.0.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.152281][ T10] usb 1-1: USB disconnect, device number 2 [ 129.242681][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 129.246125][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.456836][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.468050][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.479261][ T5907] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.495306][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.706009][ T5907] usb 1-1: SerialNumber: syz [ 129.969085][ T5907] usb 1-1: 0:2 : does not exist [ 130.136219][ T5907] usb 1-1: USB disconnect, device number 3 [ 131.217608][ T6438] netlink: 'syz.4.140': attribute type 2 has an invalid length. [ 132.876150][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.271075][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.716570][ T6477] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 135.188540][ T6482] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 136.243629][ T6494] loop3: detected capacity change from 0 to 512 [ 136.317192][ T6477] veth3: entered promiscuous mode [ 136.327784][ T6494] EXT4-fs: inline encryption not supported [ 136.347894][ T6477] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 136.411891][ T6499] Cannot find set identified by id 0 to match [ 136.840364][ T6494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.871981][ T6494] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.156: bad orphan inode 15 [ 136.908709][ T6494] loop3: lost filesystem error report for type 5 error -117 [ 136.916312][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 136.930311][ C1] EXT4-fs (loop3): initial error at time 1771917646: ext4_orphan_get:1417 [ 136.938890][ C1] EXT4-fs (loop3): last error at time 1771917646: ext4_orphan_get:1417 [ 137.175840][ T6494] ext4_test_bit(bit=14, block=18) = 1 [ 137.182465][ T6494] is_bad_inode(inode)=0 [ 137.186801][ T6494] NEXT_ORPHAN(inode)=1023 [ 137.191151][ T6494] max_ino=32 [ 137.194459][ T6494] i_nlink=0 [ 137.382595][ T6494] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.156: bg 0: block 161: padding at end of block bitmap is not set [ 137.641817][ T6494] loop3: lost filesystem error report for type 5 error -117 [ 137.648539][ T6494] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 137.683625][ T6494] loop3: lost filesystem error report for type 5 error -117 [ 137.720021][ T6494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.332703][ T6528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 140.339368][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.349053][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 140.387919][ T6531] vhci_hcd: connection closed [ 140.395789][ T360] vhci_hcd vhci_hcd.0: stop threads [ 140.416156][ T360] vhci_hcd vhci_hcd.0: release socket [ 140.417883][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.421575][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 141.778381][ T6551] loop2: detected capacity change from 0 to 512 [ 141.792233][ T6551] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.887856][ T6551] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.043590][ T6551] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.612139][ T6551] EXT4-fs (loop2): 1 truncate cleaned up [ 142.642567][ T6551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.740171][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.590414][ T6584] vlan2: entered allmulticast mode [ 144.622641][ T6584] dummy0: entered allmulticast mode [ 144.656878][ T6584] bridge0: port 3(vlan2) entered blocking state [ 144.677589][ T6584] bridge0: port 3(vlan2) entered disabled state [ 144.709258][ T6584] vlan2: entered promiscuous mode [ 144.752027][ T6584] dummy0: entered promiscuous mode [ 144.768238][ T6584] bridge0: port 3(vlan2) entered blocking state [ 144.774934][ T6584] bridge0: port 3(vlan2) entered forwarding state [ 145.070914][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.730350][ T24] usb 3-1: config 0 has no interfaces? [ 145.737903][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 145.770932][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.797544][ T6597] loop3: detected capacity change from 0 to 4096 [ 145.810434][ T24] usb 3-1: config 0 descriptor?? [ 146.213473][ T6597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.281907][ T1215] usb 3-1: USB disconnect, device number 3 [ 146.739477][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.523688][ T6625] loop2: detected capacity change from 0 to 2048 [ 148.642162][ T6625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.448432][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.659197][ T6651] netlink: 'syz.3.197': attribute type 4 has an invalid length. [ 150.718558][ T6652] netlink: 'syz.3.197': attribute type 4 has an invalid length. [ 150.745721][ T1215] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.971230][ T1215] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 150.999741][ T1215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.058839][ T1215] usb 1-1: config 0 descriptor?? [ 151.497865][ T1215] elan 0003:04F3:0755.0001: unknown main item tag 0x1 [ 151.517561][ T1215] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 151.569175][ T6647] loop4: detected capacity change from 0 to 32768 [ 151.833502][ T24] usb 1-1: USB disconnect, device number 4 [ 152.058401][ T6666] fido_id[6666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 153.293231][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.982472][ T6688] binder: BINDER_SET_CONTEXT_MGR already set [ 154.024771][ T6688] binder: 6686:6688 ioctl 4018620d 200000000040 returned -16 [ 154.429384][ T6698] libceph: secret too big 289 [ 158.462103][ T6734] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 158.558762][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 158.613441][ T6734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.809032][ T6718] loop4: detected capacity change from 0 to 32768 [ 158.831284][ T6738] macvlan2: entered promiscuous mode [ 158.872511][ T6738] macvlan2: entered allmulticast mode [ 158.906366][ T6718] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.083307][ T6718] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 159.273307][ T6718] XFS (loop4): Starting recovery (logdev: internal) [ 159.889465][ T6763] loop0: detected capacity change from 0 to 764 [ 160.595452][ T6718] XFS (loop4): Ending recovery (logdev: internal) [ 160.667046][ T5829] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.704416][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 160.768211][ T6769] netlink: 'syz.0.230': attribute type 4 has an invalid length. [ 161.746177][ T5929] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.857424][ T30] audit: type=1326 audit(1771917670.956:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 161.964080][ T30] audit: type=1326 audit(1771917670.956:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 161.967423][ T6785] process 'syz.4.231' launched '/dev/fd/4' with NULL argv: empty string added [ 162.006667][ T5929] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.025784][ T30] audit: type=1326 audit(1771917670.986:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 162.029906][ T5929] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.094513][ T5929] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.103870][ T30] audit: type=1326 audit(1771917670.986:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 162.103908][ T30] audit: type=1326 audit(1771917670.986:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 162.103940][ T30] audit: type=1326 audit(1771917670.986:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 162.103972][ T30] audit: type=1326 audit(1771917670.986:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 162.104004][ T30] audit: type=1326 audit(1771917671.046:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda05596417 code=0x7ffc0000 [ 162.104037][ T30] audit: type=1326 audit(1771917671.046:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0553da19 code=0x7ffc0000 [ 162.104068][ T30] audit: type=1326 audit(1771917671.046:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0559c629 code=0x7ffc0000 [ 162.371716][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.396200][ T6774] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.408625][ T5929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.410879][ T5886] usb 1-1: USB disconnect, device number 5 [ 164.786101][ T6818] netlink: 341 bytes leftover after parsing attributes in process `syz.1.245'. [ 165.323021][ T6810] loop2: detected capacity change from 0 to 1024 [ 165.346520][ T6810] EXT4-fs: Ignoring removed orlov option [ 166.122878][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.429428][ T6810] Trying to write to read-only block-device loop2 [ 166.453569][ T6834] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.616740][ T6835] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 167.016038][ T6839] loop3: detected capacity change from 0 to 4096 [ 167.073963][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.142211][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'. [ 168.774957][ T6860] loop3: detected capacity change from 0 to 2048 [ 168.804396][ T6860] udf: Bad value for 'session' [ 169.577245][ T6860] loop3: detected capacity change from 0 to 32768 [ 169.596304][ T6860] btrfs: Deprecated parameter 'usebackuproot' [ 169.602626][ T6860] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 169.721125][ T6870] loop4: detected capacity change from 0 to 1024 [ 169.768403][ T6860] BTRFS: device label ¡ devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.254 (6860) [ 169.838593][ T6870] EXT4-fs (loop4): invalid inodes per group: 1048608 [ 169.838593][ T6870] [ 169.920012][ T6860] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.969406][ T5826] udevd[5826]: incorrect btrfs checksum on /dev/loop3 [ 169.991478][ T6860] BTRFS info (device loop3): using crc32c checksum algorithm [ 170.028432][ T6860] BTRFS error (device loop3): superblock checksum mismatch [ 170.167339][ T6860] BTRFS error (device loop3): open_ctree failed: -22 [ 170.782398][ T5826] udevd[5826]: incorrect btrfs checksum on /dev/loop3 [ 172.959908][ T6907] ptrace attach of ""[6908] was attempted by "./syz-executor exec"[6907] [ 176.236056][ T6928] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 180.090888][ T6959] loop3: detected capacity change from 0 to 1024 [ 181.461272][ T6983] syzkaller0: entered promiscuous mode [ 181.469065][ T6983] syzkaller0: entered allmulticast mode [ 190.915825][ T1215] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 191.588310][ T1215] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.667788][ T1215] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 191.690614][ T1215] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 191.741115][ T1215] usb 3-1: Product: syz [ 191.787748][ T1215] usb 3-1: Manufacturer: syz [ 191.802563][ T1215] usb 3-1: SerialNumber: syz [ 191.815244][ T1215] usb 3-1: config 0 descriptor?? [ 191.834406][ T1215] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 191.890938][ T1215] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 191.926788][ T1215] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 191.960567][ T1215] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 192.025743][ T1215] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 192.052695][ T1215] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 192.136101][ T1215] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 192.250797][ T1215] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 193.268125][ T1215] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 193.586891][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 194.041803][ T1215] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 194.144958][ T1215] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 194.334662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364459][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.647977][ T7099] loop4: detected capacity change from 0 to 256 [ 195.723497][ T796] usb 3-1: USB disconnect, device number 4 [ 195.750529][ T796] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 195.771544][ T796] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 195.787720][ T796] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 195.927490][ T796] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 195.938397][ T796] keyspan 3-1:0.0: device disconnected [ 196.469822][ T7093] Bluetooth: hci2: command 0x0406 tx timeout [ 196.476412][ T7093] Bluetooth: hci0: command 0x0406 tx timeout [ 196.482439][ T7093] Bluetooth: hci1: command 0x0406 tx timeout [ 196.491049][ T7093] Bluetooth: hci3: command 0x0406 tx timeout [ 196.491779][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 200.387925][ T7169] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 200.477909][ T7169] bond3: entered promiscuous mode [ 200.484424][ T7169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.262544][ T7169] bond3: (slave bridge2): making interface the new active one [ 201.301786][ T7169] bridge2: entered promiscuous mode [ 201.308046][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 201.314465][ T7169] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 201.332155][ T7175] netlink: 'syz.4.342': attribute type 9 has an invalid length. [ 201.362289][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 201.572802][ T7186] bridge1: port 1(veth0_to_bond) entered blocking state [ 202.017631][ T7186] bridge1: port 1(veth0_to_bond) entered disabled state [ 202.024828][ T7186] veth0_to_bond: entered allmulticast mode [ 202.169117][ T7186] veth0_to_bond: entered promiscuous mode [ 202.745292][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.755105][ T7191] bridge1: port 2(veth3) entered blocking state [ 202.772040][ T7191] bridge1: port 2(veth3) entered disabled state [ 202.786220][ T7191] veth3: entered allmulticast mode [ 202.813110][ T7191] veth3: entered promiscuous mode [ 203.700173][ T10] usb 1-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 203.956332][ T10] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 203.975982][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 205.750005][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 205.769799][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.811029][ T10] usb 1-1: Product: syz [ 205.955907][ T10] usb 1-1: can't set config #220, error -71 [ 205.973236][ T10] usb 1-1: USB disconnect, device number 6 [ 206.622098][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.847428][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.927705][ T7240] loop0: detected capacity change from 0 to 128 [ 207.016461][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 207.016477][ T30] audit: type=1804 audit(1771917716.106:156): pid=7240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.358" name="/newroot/59/file0/bus" dev="loop0" ino=1048606 res=1 errno=0 [ 212.794650][ T7305] syzkaller0: entered promiscuous mode [ 212.833121][ T7305] syzkaller0: entered allmulticast mode [ 213.129317][ T7310] loop3: detected capacity change from 0 to 128 [ 213.322504][ T30] audit: type=1804 audit(1771917722.416:157): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.377" name="/newroot/80/file0/bus" dev="loop3" ino=1048607 res=1 errno=0 [ 221.692137][ T7363] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 222.020908][ T7368] loop3: detected capacity change from 0 to 512 [ 222.066365][ T7368] EXT4-fs: Ignoring removed nobh option [ 222.186301][ T7368] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 222.711129][ T7368] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.395: invalid indirect mapped block 256 (level 1) [ 222.815537][ T7368] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 222.825242][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 222.840863][ C1] EXT4-fs (loop3): initial error at time 1771917731: ext4_free_branches:1023: inode 13 [ 222.850574][ C1] EXT4-fs (loop3): last error at time 1771917731: ext4_free_branches:1023: inode 13 [ 222.909784][ T7368] EXT4-fs (loop3): Remounting filesystem read-only [ 222.930171][ T7368] EXT4-fs (loop3): 1 truncate cleaned up [ 222.943896][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.096243][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.872710][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 226.502086][ T7400] loop2: detected capacity change from 0 to 512 [ 227.591008][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.602770][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.613456][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.622428][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.630832][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.992897][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 229.667996][ T5828] Bluetooth: hci5: command tx timeout [ 231.054176][ T7435] loop3: detected capacity change from 0 to 8 [ 231.924610][ T5828] Bluetooth: hci5: command tx timeout [ 232.535307][ T7435] SQUASHFS error: zlib decompression failed, data probably corrupt [ 232.571062][ T7435] SQUASHFS error: Failed to read block 0x9b: -5 [ 232.620874][ T7435] SQUASHFS error: Unable to read metadata cache entry [99] [ 232.651156][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 232.653778][ T7435] SQUASHFS error: Unable to read inode 0x127 [ 233.996317][ T5828] Bluetooth: hci5: command tx timeout [ 234.019261][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.026687][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.033995][ T7408] bridge_slave_0: entered allmulticast mode [ 234.042544][ T7408] bridge_slave_0: entered promiscuous mode [ 234.052085][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.059894][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.067826][ T7408] bridge_slave_1: entered allmulticast mode [ 234.107964][ T7408] bridge_slave_1: entered promiscuous mode [ 234.160365][ T7474] overlayfs: missing 'workdir' [ 235.238142][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 235.315322][ T3465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.426717][ T7481] netlink: 6 bytes leftover after parsing attributes in process `syz.1.420'. [ 235.432794][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.463333][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.473515][ T7481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.483268][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.536272][ T9] usb 1-1: config 0 descriptor?? [ 235.557814][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 235.577513][ T3465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.648089][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.695350][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.707671][ T3465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.743350][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.828826][ T3465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.846319][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 235.854256][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.864869][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.887820][ T5907] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.902739][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.917894][ T7408] team0: Port device team_slave_0 added [ 235.923674][ T5907] usb 4-1: Product: syz [ 235.930228][ T5907] usb 4-1: Manufacturer: syz [ 235.939719][ T7408] team0: Port device team_slave_1 added [ 235.945714][ T5907] usb 4-1: SerialNumber: syz [ 235.963315][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 235.986484][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.000317][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 236.014675][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.024493][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 236.024655][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.061987][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 236.069912][ T5828] Bluetooth: hci5: command tx timeout [ 236.075884][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.090042][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 236.098522][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 236.098778][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 236.114736][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 236.125867][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 236.137762][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 236.173499][ T5907] usb 4-1: 0:2 : does not exist [ 236.184823][ T5907] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 236.200502][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.211023][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.237660][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.279835][ T7495] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 236.284607][ T5907] usb 4-1: USB disconnect, device number 2 [ 236.343748][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.367325][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.400530][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.420556][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.438000][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.452825][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 237.668208][ T3465] bridge_slave_1: left allmulticast mode [ 237.676407][ T3465] bridge_slave_1: left promiscuous mode [ 237.684004][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.696989][ T9] pwc: Registered as video103. [ 237.736381][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 237.771856][ T3465] bridge_slave_0: left allmulticast mode [ 237.795242][ T3465] bridge_slave_0: left promiscuous mode [ 237.802623][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.836088][ T9] usb 1-1: USB disconnect, device number 7 [ 239.005958][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.061324][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.085388][ T3465] bond0 (unregistering): Released all slaves [ 239.145818][ T7408] hsr_slave_0: entered promiscuous mode [ 239.154147][ T7408] hsr_slave_1: entered promiscuous mode [ 239.168549][ T7408] debugfs: 'hsr0' already exists in 'hsr' [ 239.175636][ T7408] Cannot create hsr debugfs directory [ 239.194237][ T7505] tipc: Enabling of bearer rejected, failed to enable media [ 239.273522][ T7532] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 239.281867][ T7506] syzkaller0: entered promiscuous mode [ 239.281889][ T7506] syzkaller0: entered allmulticast mode [ 239.283407][ T7528] netlink: 550 bytes leftover after parsing attributes in process `syz.3.432'. [ 239.295693][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 241.380561][ T7532] ------------[ cut here ]------------ [ 241.386514][ T7532] kernel BUG at ./include/rdma/ib_verbs.h:4611! [ 241.393059][ T7532] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 241.399312][ T7532] CPU: 1 UID: 0 PID: 7532 Comm: syz.1.433 Not tainted syzkaller #0 PREEMPT(full) [ 241.408569][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.418615][ T7532] RIP: 0010:ib_device_get_by_netdev+0x529/0x530 [ 241.424934][ T7532] Code: 28 f9 48 8b 44 24 38 42 80 3c 30 00 74 08 4c 89 e7 e8 1b ad 92 f9 4d 8b 3c 24 e9 fd fe ff ff e8 2d e4 10 03 e8 28 85 28 f9 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 241.444524][ T7532] RSP: 0018:ffffc9000493e640 EFLAGS: 00010283 [ 241.450756][ T7532] RAX: ffffffff889d0d38 RBX: ffff88806d3e5104 RCX: 0000000000080000 [ 241.458896][ T7532] RDX: ffffc9000d311000 RSI: 0000000000031136 RDI: 0000000000031137 [ 241.466863][ T7532] RBP: ffffc9000493e720 R08: ffffffff889d0891 R09: ffffffff8e7602e0 [ 241.474824][ T7532] R10: dffffc0000000000 R11: ffffffff88c6ab20 R12: ffff88807d7251b8 [ 241.482787][ T7532] R13: ffff88806d3e4000 R14: dffffc0000000000 R15: 1ffff92000927cd0 [ 241.490751][ T7532] FS: 00007fdd927f66c0(0000) GS:ffff88812555e000(0000) knlGS:0000000000000000 [ 241.499670][ T7532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.506237][ T7532] CR2: 000055558fbca4e8 CR3: 00000000796b6000 CR4: 00000000003526f0 [ 241.514196][ T7532] Call Trace: [ 241.517466][ T7532] [ 241.520392][ T7532] ? ib_device_get_by_netdev+0x81/0x530 [ 241.525931][ T7532] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 241.531948][ T7532] ? virt_wifi_event+0x130/0x280 [ 241.536903][ T7532] ? cma_netdev_callback+0x95/0x5b0 [ 241.542117][ T7532] ? pppoe_device_event+0x80/0x6e0 [ 241.547254][ T7532] siw_netdev_event+0x4c/0x170 [ 241.552040][ T7532] notifier_call_chain+0x1be/0x400 [ 241.557171][ T7532] netdev_compute_master_upper_features+0x91e/0xac0 [ 241.563753][ T7532] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 241.570853][ T7532] ? bond_enslave+0x2bdf/0x3c40 [ 241.575696][ T7532] ? __local_bh_enable_ip+0xd0/0x130 [ 241.580983][ T7532] bond_enslave+0x21cc/0x3c40 [ 241.585760][ T7532] ? __pfx_bond_enslave+0x10/0x10 [ 241.590796][ T7532] ? __pfx___dev_change_flags+0x10/0x10 [ 241.596325][ T7532] ? mutex_is_locked+0x17/0x50 [ 241.601167][ T7532] do_set_master+0x533/0x6d0 [ 241.605779][ T7532] do_setlink+0x1018/0x4590 [ 241.610278][ T7532] ? trace_sched_exit_tp+0x3a/0x150 [ 241.615466][ T7532] ? __pfx_do_setlink+0x10/0x10 [ 241.620310][ T7532] ? __lock_acquire+0x6b5/0x2cf0 [ 241.625240][ T7532] ? trace_irq_disable+0x3b/0x150 [ 241.630266][ T7532] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.635291][ T7532] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.640310][ T7532] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 241.646107][ T7532] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.651302][ T7532] ? __mutex_lock+0xd09/0x1300 [ 241.656047][ T7532] ? __mutex_lock+0x5ac/0x1300 [ 241.660800][ T7532] ? rtnl_newlink+0x8a1/0x1be0 [ 241.665572][ T7532] ? __pfx___mutex_lock+0x10/0x10 [ 241.670686][ T7532] ? ns_capable+0x89/0xe0 [ 241.675010][ T7532] rtnl_newlink+0x15a9/0x1be0 [ 241.679680][ T7532] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.684701][ T7532] ? __lock_acquire+0x6b5/0x2cf0 [ 241.689631][ T7532] ? sock_sendmsg_nosec+0x18f/0x1d0 [ 241.694818][ T7532] ? pointer+0x6fd/0x11f0 [ 241.699139][ T7532] ? __pfx_pointer+0x10/0x10 [ 241.703737][ T7532] ? unwind_next_frame+0xa5/0x23c0 [ 241.708851][ T7532] ? format_decode+0x60f/0xe10 [ 241.713624][ T7532] ? vsnprintf+0xdf1/0xee0 [ 241.718042][ T7532] ? snprintf+0xe8/0x140 [ 241.722280][ T7532] ? is_bpf_text_address+0x26/0x2b0 [ 241.727468][ T7532] ? __lock_acquire+0x6b5/0x2cf0 [ 241.732402][ T7532] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.738633][ T7532] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.743825][ T7532] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 241.748770][ T7532] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 241.753891][ T7532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.759347][ T7532] ? netlink_sendmsg+0x813/0xb40 [ 241.764275][ T7532] ? sock_sendmsg_nosec+0x18f/0x1d0 [ 241.769461][ T7532] ? ____sys_sendmsg+0x589/0x8c0 [ 241.774382][ T7532] ? ___sys_sendmsg+0x2a5/0x360 [ 241.779243][ T7532] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.784336][ T7532] ? do_syscall_64+0x14d/0xf80 [ 241.789108][ T7532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.795164][ T7532] netlink_rcv_skb+0x232/0x4b0 [ 241.799929][ T7532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.805378][ T7532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.810665][ T7532] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.815855][ T7532] netlink_unicast+0x80f/0x9b0 [ 241.820617][ T7532] ? __pfx_netlink_unicast+0x10/0x10 [ 241.825932][ T7532] ? netlink_sendmsg+0x650/0xb40 [ 241.830872][ T7532] ? skb_put+0x11b/0x210 [ 241.835102][ T7532] netlink_sendmsg+0x813/0xb40 [ 241.839876][ T7532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.845156][ T7532] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 241.851653][ T7532] ? __cgroup_account_cputime+0xe5/0x120 [ 241.857369][ T7532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.862642][ T7532] sock_sendmsg_nosec+0x18f/0x1d0 [ 241.867655][ T7532] ____sys_sendmsg+0x589/0x8c0 [ 241.872412][ T7532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.877681][ T7532] ? import_iovec+0x73/0xa0 [ 241.882177][ T7532] ___sys_sendmsg+0x2a5/0x360 [ 241.886859][ T7532] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.892048][ T7532] ? futex_wake+0x4ac/0x580 [ 241.896541][ T7532] ? __fget_files+0x2a/0x420 [ 241.901114][ T7532] ? __fget_files+0x3a0/0x420 [ 241.905786][ T7532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.910768][ T7532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.916229][ T7532] ? rcu_is_watching+0x15/0xb0 [ 241.920992][ T7532] do_syscall_64+0x14d/0xf80 [ 241.925572][ T7532] ? trace_irq_disable+0x3b/0x150 [ 241.930601][ T7532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.936651][ T7532] ? clear_bhb_loop+0x40/0x90 [ 241.941314][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.947188][ T7532] RIP: 0033:0x7fdd9459c629 [ 241.951595][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.971188][ T7532] RSP: 002b:00007fdd927f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.979589][ T7532] RAX: ffffffffffffffda RBX: 00007fdd94815fa0 RCX: 00007fdd9459c629 [ 241.987548][ T7532] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 241.995530][ T7532] RBP: 00007fdd94632b39 R08: 0000000000000000 R09: 0000000000000000 [ 242.003515][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.011505][ T7532] R13: 00007fdd94816038 R14: 00007fdd94815fa0 R15: 00007ffc8f7a8198 [ 242.019481][ T7532] [ 242.022492][ T7532] Modules linked in: [ 242.027287][ T7532] ---[ end trace 0000000000000000 ]--- [ 242.035010][ T7532] RIP: 0010:ib_device_get_by_netdev+0x529/0x530 [ 242.051949][ T7532] Code: 28 f9 48 8b 44 24 38 42 80 3c 30 00 74 08 4c 89 e7 e8 1b ad 92 f9 4d 8b 3c 24 e9 fd fe ff ff e8 2d e4 10 03 e8 28 85 28 f9 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 242.074568][ T7532] RSP: 0018:ffffc9000493e640 EFLAGS: 00010283 [ 242.081006][ T7532] RAX: ffffffff889d0d38 RBX: ffff88806d3e5104 RCX: 0000000000080000 [ 242.089435][ T7532] RDX: ffffc9000d311000 RSI: 0000000000031136 RDI: 0000000000031137 [ 242.098896][ T7532] RBP: ffffc9000493e720 R08: ffffffff889d0891 R09: ffffffff8e7602e0 [ 242.107483][ T7532] R10: dffffc0000000000 R11: ffffffff88c6ab20 R12: ffff88807d7251b8 [ 242.115876][ T7532] R13: ffff88806d3e4000 R14: dffffc0000000000 R15: 1ffff92000927cd0 [ 242.123855][ T7532] FS: 00007fdd927f66c0(0000) GS:ffff88812545e000(0000) knlGS:0000000000000000 [ 242.133258][ T7532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.140289][ T7532] CR2: 00007f8d20bc3484 CR3: 00000000796b6000 CR4: 00000000003526f0 [ 242.148638][ T7532] Kernel panic - not syncing: Fatal exception [ 242.155225][ T7532] Kernel Offset: disabled [ 242.159533][ T7532] Rebooting in 86400 seconds..