last executing test programs: 16.550559574s ago: executing program 3 (id=67): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x1, 0xfffffffc}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 16.036587654s ago: executing program 3 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x7, 0x4) 15.900669828s ago: executing program 3 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) listen(r2, 0x7ff) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r7) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) 14.413540705s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 13.890965835s ago: executing program 4 (id=75): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000000c0)=[0x100000000, 0xfffffffffffffffc]}) 13.890558983s ago: executing program 3 (id=76): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x74) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0xee00) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=0x0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="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"]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 12.595270591s ago: executing program 0 (id=77): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r3) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10042008) sendmsg$inet6(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="eb239f141dde7c7a8147d2e795c63c4cbdd51d74eee27d756173550c1805a48ff3514dc559a01eb9fbe7bb2d03d56c48064867d91011bb8fc602a0a9f5469d825268fd1ce7be84f2be45137deebe6974edb9ba9356e6f5aa4a4353", 0x5b}, {&(0x7f0000000540)="1af541da9cad733597d2b3870ba5c487caee4d4b3266dc25e0c66251be11776f47ff062ea27fe4ba3ff075b099a7ca8d6a58353aabb589b1449fe2d84083492e0934edd2957e2f968b0ce616ac3ca5688c46c2b04f7f4d90321f07cede5415bde8d5981be32668874d3cf26b2c45b7ec956e351d6d", 0x75}, {&(0x7f0000000640)="b4eabab928c5da276e924c798fadbc5358639fa40b771c4108a0be28d81a446b6edd523cec4eac571e8270d0151e67a3e37dc538f8aaeceb13bdb8a816e5ba04cb422b14c221418881acc6e2ebc6e4abbcdcc9e331c99d6ca3149880c00d1620d6bdb958f7b8dc0a001f46b7e52a8cf56f4c15e304df83a45c25ca2c7ce0ff6ab77ea1a7dd7e4c0ef947c9e8864a9a06da7ef5fc", 0x94}, {&(0x7f0000000700)="9d88b777305b7e27b9b4ad3f8c895d585add12923734e51d10d2b131cce722f86f93d3459f6a026c5e8602c6b672880742a84df04f20cccbec37a14075949b8de658aca8fdb7149fa6def4cca4e6e4df9e76c8bed44e695351db77715ecda052c13449cdcc59c9691983a0d91c6e02b808aec6034c966151b2d8118c9079e1be963aaf8326fd06a712c64799e1c49028f18544409851c1701689112dacdff6047e263c3693935bbb13963ceb9510135c65", 0xb1}], 0x4, &(0x7f00000007c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x7c68}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @tclass={{0x14, 0x29, 0x43, 0x1000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0xa8}, 0x4000004) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000300"/28], 0x50) pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 10.783429029s ago: executing program 4 (id=78): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r1, 0x2ffb, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) 8.639787971s ago: executing program 4 (id=82): connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) rseq(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x3e1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x850) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = fanotify_init(0x1a, 0x800) fanotify_mark(r4, 0x641, 0x1028, 0xffffffffffffffff, 0x0) 8.52565113s ago: executing program 1 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 8.276523561s ago: executing program 2 (id=84): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)=""/73, 0x49}], 0x2}, 0x6}], 0x1, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 7.649770312s ago: executing program 1 (id=85): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socket$phonet_pipe(0x23, 0x5, 0x2) 7.384353152s ago: executing program 4 (id=86): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.33952648s ago: executing program 1 (id=87): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_getevents(0x0, 0x9, 0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) 6.194944021s ago: executing program 4 (id=88): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000000c0)=[0x100000000, 0xfffffffffffffffc]}) 6.126150152s ago: executing program 2 (id=89): syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 5.799229889s ago: executing program 1 (id=90): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r4, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) unshare(0x40000800) 4.927888385s ago: executing program 4 (id=91): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "03c1e18767694054fab9e60e9dbd3ab7"}]}}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) 3.626538024s ago: executing program 1 (id=92): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/99, 0x63}], 0x1}, 0xfffffff1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0xa}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/127, 0x7f}, {&(0x7f0000000b80)=""/199, 0xc7}], 0x2}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/200, 0xc8}, {&(0x7f0000000e80)=""/251, 0xfb}], 0x2}, 0xfbed}], 0x5, 0x40010041, 0x0) 3.53529605s ago: executing program 3 (id=93): keyctl$instantiate(0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a73797a2030303030303030303030303030303030323033003ad610ce519dc6b1b9783c88bbb12a95db0e31179000acc8c31840e650a029"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7570646174652064656661756c7420747275737465643aa906000000000000002302184b7950c17dc8ded8b7352e54d9f524d115cbfac984264cc1371bab696ec29938139eaeadac4eb9229398ce2ccc9a7963c3ef54936e29d2db8ea60ecc3d1024a92942bbfead7d3b4cec4fdd90c1df136fd215c7b200e3125f7648945283c8d0b91cbfe8c23be104f6d3ed765704a3ab800b739fdcaa2be4b18e0fd62e690a3bea64a7c01e78631a6b860ffb6b50ed294bf09625bbd6c01abd35306692ec70135c703eb4df7efff37e82d62dbd8ab5f438f181072f62e9b7904dde7b4d12b83bcc266adb62a9f9a878456089f81e414c"], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x4c2e, &(0x7f0000000200)={0x0, 0xa8ad, 0x2000, 0x2, 0xda}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2000401, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) msgget(0x0, 0xe) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) 2.153913482s ago: executing program 0 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031600", 0x4, 0x44000, 0x0, 0x0) 2.152270362s ago: executing program 1 (id=95): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x10000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) 2.139935408s ago: executing program 2 (id=96): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f0000000240)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20012062, 0x1}) io_uring_enter(r0, 0x2d42, 0x2, 0x60, 0x0, 0x0) 1.959023374s ago: executing program 3 (id=97): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) close(r1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5a93, 0x10100, 0xfffffffd, 0x307, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, 0x0) read(r7, &(0x7f0000000a40)=""/141, 0x8d) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00', 0xa7d}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0f, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3e56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004000000000000008008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000dc0)=ANY=[]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r13}, 0x20) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, 0x0, 0x4040) 1.895839939s ago: executing program 0 (id=98): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000300)={0x28, 0x2, r1, r1, 0xffffffffffffff20, 0x8, 0x31}) socket$nl_generic(0x10, 0x3, 0x10) 1.884323687s ago: executing program 2 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004e40), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8091}, 0x4) 1.603814775s ago: executing program 2 (id=100): r0 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x58, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) 595.221558ms ago: executing program 0 (id=101): r0 = socket$nl_rdma(0x10, 0x3, 0x14) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00250000ffb74bd52d7e808e030000000000edfff2361695d8d20c1f3d444de08abc3f6cdcbea405725ddf30278a17d3531fe3f5dc3b62f6fe159cdc8b32f672a29cd2b5df677d0f3eb71599c9ab0f6f4718a8c5332d4f436601e9ee8fac76791967aea8994caa17e63b52f49ebe34b2bb674e4e9d138153bb1cd9f4bf0d3450fd31e799", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000), 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000580)={@remote, @initdev}, &(0x7f00000005c0)=0xffffffffffffff1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x14, 0xa, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24004007) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x4004) r9 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r9, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)}, {&(0x7f0000000800)="b8977f79ab359dae635b2f09d0cbb961fef2fb5af79d677e4a596d93d438ab8a72b2dfff22a4a0515c201b83bcbd91b784ed0d02f6dc7014959a4fee3530d63c2e3535a543aadc32bb3230d943214302e3a6b7e03f7294fcdb4d5a738ccbf1eb2d3e92fe9760f4545a8b694bfa585a49d1edf227ffc20229c527af286557f87af061505e853bc08132e92c884faae3e1ea00300936b710beed0fb95f8f9e0e181d125da5d0cb97d499", 0xa9}, {&(0x7f00000008c0)="810f2336173d0fd74454f367bdd5d5d191c08adc8cccdcc812df1a73bd6d704e61bcdcb8e8336a62a9a7d96a7c65754c22a6441bc3c26a69e230a6cbd3d59585b3e4edf97b81485d3f68aafa9deca2cd1d60a88112792af0f2a3814f9f3bb22f3642dad68f9fe904706ec090b4a5640d58bf82c01f5d81319a318727cb8a06af4fc2f0018056a1298cf179fab5cf28f6bccb99e68900bc36e07a057a17cd87ade05b56c1ef67678bedbfd8261adb0b1f237cdbf5b5c53abe80c86d7332bb35eb376515abbb356f5b07a6eaef6486ad15b62d057006d5c69d73b5fe79efa40c2a1974c1", 0xe3}, {&(0x7f00000009c0)="4fd39c80d6f20dbfd0414b54b48874cee1c6c222ef6fd02961887609778e170ab02afefb4a4d15fc9d2bd0adeecd1b0f211ab7c0355fc413462c58332e65cf2b49a5336aaa5415a906f588189e6e6621cccd717f61", 0x55}, {0x0}], 0x5}}], 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x24004884}, 0x20004801) 235.342482ms ago: executing program 2 (id=102): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffff, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2000081) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x24000001) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) 0s ago: executing program 0 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 80.930941][ T5825] cgroup: Unknown subsys name 'net' [ 81.171291][ T5825] cgroup: Unknown subsys name 'cpuset' [ 81.226397][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.089473][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.757901][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.766592][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.777957][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.797136][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.816044][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.857781][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.861120][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.862449][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.864043][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.865317][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.932971][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.943926][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.946515][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.948936][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.952675][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.988241][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.990930][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.991943][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.998086][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.999284][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.022716][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.024320][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.025087][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.038253][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.040943][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.987641][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.011499][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.093920][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 87.133931][ T1245] cfg80211: failed to load regulatory.db [ 87.258186][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.328721][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.907580][ T5844] Bluetooth: hci0: command tx timeout [ 87.976762][ T5844] Bluetooth: hci1: command tx timeout [ 88.056058][ T5844] Bluetooth: hci2: command tx timeout [ 88.057941][ T59] Bluetooth: hci4: command tx timeout [ 88.058502][ T5157] Bluetooth: hci3: command tx timeout [ 88.070363][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.070516][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.071071][ T5840] bridge_slave_0: entered allmulticast mode [ 88.075430][ T5840] bridge_slave_0: entered promiscuous mode [ 88.195609][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.195861][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.196048][ T5836] bridge_slave_0: entered allmulticast mode [ 88.198677][ T5836] bridge_slave_0: entered promiscuous mode [ 88.217917][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.218052][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.218712][ T5840] bridge_slave_1: entered allmulticast mode [ 88.221693][ T5840] bridge_slave_1: entered promiscuous mode [ 88.359598][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.359696][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.359806][ T5836] bridge_slave_1: entered allmulticast mode [ 88.361361][ T5836] bridge_slave_1: entered promiscuous mode [ 88.517500][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.517636][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.517809][ T5846] bridge_slave_0: entered allmulticast mode [ 88.520961][ T5846] bridge_slave_0: entered promiscuous mode [ 88.848392][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.848542][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.848800][ T5846] bridge_slave_1: entered allmulticast mode [ 88.852053][ T5846] bridge_slave_1: entered promiscuous mode [ 88.853711][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.853811][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.853923][ T5842] bridge_slave_0: entered allmulticast mode [ 88.855378][ T5842] bridge_slave_0: entered promiscuous mode [ 88.957139][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.957297][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.957475][ T5847] bridge_slave_0: entered allmulticast mode [ 88.959516][ T5847] bridge_slave_0: entered promiscuous mode [ 88.972418][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.047731][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.047895][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.048071][ T5842] bridge_slave_1: entered allmulticast mode [ 89.049875][ T5842] bridge_slave_1: entered promiscuous mode [ 89.102191][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.104015][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.104114][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.104257][ T5847] bridge_slave_1: entered allmulticast mode [ 89.116996][ T5847] bridge_slave_1: entered promiscuous mode [ 89.122703][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.291174][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.421393][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.721578][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.724738][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.811612][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.814426][ T5840] team0: Port device team_slave_0 added [ 89.914181][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.917429][ T5836] team0: Port device team_slave_0 added [ 89.919973][ T5840] team0: Port device team_slave_1 added [ 89.925044][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.977413][ T5844] Bluetooth: hci0: command tx timeout [ 90.056186][ T5844] Bluetooth: hci1: command tx timeout [ 90.133313][ T5836] team0: Port device team_slave_1 added [ 90.142620][ T59] Bluetooth: hci2: command tx timeout [ 90.142636][ T5157] Bluetooth: hci4: command tx timeout [ 90.142742][ T5844] Bluetooth: hci3: command tx timeout [ 90.220386][ T5846] team0: Port device team_slave_0 added [ 90.878434][ T5846] team0: Port device team_slave_1 added [ 90.880121][ T5842] team0: Port device team_slave_0 added [ 90.883732][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.883742][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.883755][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.010305][ T5847] team0: Port device team_slave_0 added [ 91.071594][ T5842] team0: Port device team_slave_1 added [ 91.077711][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.077728][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.077751][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.080067][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.080080][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.080101][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.088254][ T5847] team0: Port device team_slave_1 added [ 91.295351][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.295368][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.295390][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.424703][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.424719][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.424733][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.679923][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.679939][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.679962][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.681580][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.681591][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.681623][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.690112][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.690128][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.690150][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.703669][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.703686][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.703709][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.813401][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.813416][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.813439][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.052176][ T5840] hsr_slave_0: entered promiscuous mode [ 92.053617][ T5840] hsr_slave_1: entered promiscuous mode [ 92.055930][ T5844] Bluetooth: hci0: command tx timeout [ 92.138277][ T5844] Bluetooth: hci1: command tx timeout [ 92.216209][ T59] Bluetooth: hci3: command tx timeout [ 92.216230][ T5157] Bluetooth: hci2: command tx timeout [ 92.216342][ T5844] Bluetooth: hci4: command tx timeout [ 92.258705][ T5836] hsr_slave_0: entered promiscuous mode [ 92.260002][ T5836] hsr_slave_1: entered promiscuous mode [ 92.261065][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 92.261190][ T5836] Cannot create hsr debugfs directory [ 92.488279][ T5846] hsr_slave_0: entered promiscuous mode [ 92.489337][ T5846] hsr_slave_1: entered promiscuous mode [ 92.489901][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 92.489924][ T5846] Cannot create hsr debugfs directory [ 92.856701][ T5842] hsr_slave_0: entered promiscuous mode [ 92.858176][ T5842] hsr_slave_1: entered promiscuous mode [ 92.859114][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.859137][ T5842] Cannot create hsr debugfs directory [ 92.972604][ T5847] hsr_slave_0: entered promiscuous mode [ 92.973411][ T5847] hsr_slave_1: entered promiscuous mode [ 92.973941][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.973959][ T5847] Cannot create hsr debugfs directory [ 94.136074][ T5844] Bluetooth: hci0: command tx timeout [ 94.217311][ T5844] Bluetooth: hci1: command tx timeout [ 94.296070][ T59] Bluetooth: hci3: command tx timeout [ 94.296103][ T59] Bluetooth: hci2: command tx timeout [ 94.296166][ T5844] Bluetooth: hci4: command tx timeout [ 94.680003][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.726984][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.753305][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.805173][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.937915][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.015087][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.062197][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.108735][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.244857][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.288357][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.334823][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.394460][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.571051][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.625493][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.657740][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.710571][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.923990][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.956622][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.003892][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.044313][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.083745][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.227447][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.235254][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.293003][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.293569][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.367603][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.367907][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.421446][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.444679][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.500318][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.500518][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.551247][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.552486][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.620173][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.670132][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.670369][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.680239][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.741244][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.741432][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.877652][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.939818][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.948830][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.949113][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.002893][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.003886][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.122463][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.183123][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.183298][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.279755][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.279901][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.362667][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.009830][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.245415][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.403425][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.430448][ T5846] veth0_vlan: entered promiscuous mode [ 98.498841][ T5846] veth1_vlan: entered promiscuous mode [ 98.555582][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.583049][ T5842] veth0_vlan: entered promiscuous mode [ 98.661611][ T5842] veth1_vlan: entered promiscuous mode [ 98.731775][ T5840] veth0_vlan: entered promiscuous mode [ 98.739891][ T5847] veth0_vlan: entered promiscuous mode [ 98.772011][ T5846] veth0_macvtap: entered promiscuous mode [ 98.805600][ T5840] veth1_vlan: entered promiscuous mode [ 98.817583][ T5846] veth1_macvtap: entered promiscuous mode [ 98.823409][ T5847] veth1_vlan: entered promiscuous mode [ 98.913288][ T5836] veth0_vlan: entered promiscuous mode [ 98.929483][ T5842] veth0_macvtap: entered promiscuous mode [ 98.935312][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.973233][ T5842] veth1_macvtap: entered promiscuous mode [ 98.994313][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.002890][ T5836] veth1_vlan: entered promiscuous mode [ 99.087752][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.112218][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.131667][ T5840] veth0_macvtap: entered promiscuous mode [ 99.135122][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.150017][ T5847] veth0_macvtap: entered promiscuous mode [ 99.157648][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.174646][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.179971][ T5840] veth1_macvtap: entered promiscuous mode [ 99.249279][ T5847] veth1_macvtap: entered promiscuous mode [ 99.269881][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.374928][ T1304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.436238][ T1304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.473009][ T1304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.490284][ T1304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.510126][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.511536][ T5836] veth0_macvtap: entered promiscuous mode [ 99.532284][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.603371][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.604036][ T5836] veth1_macvtap: entered promiscuous mode [ 99.609637][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.661911][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.661936][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.745588][ T1304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.773273][ T1304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.794582][ T1304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.869049][ T1304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.895206][ T1304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.902407][ T1304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.954199][ T1304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.985476][ T4022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.985497][ T4022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.995349][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.024486][ T1304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.224094][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.231277][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.231299][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.439131][ T4022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.448448][ T4022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.509935][ T4022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.558790][ T4022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.576970][ T4082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.576990][ T4082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.734114][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.734136][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.034217][ T4022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.034239][ T4022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.177252][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.177275][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.212136][ T5962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 101.362206][ T5963] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.602914][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.602936][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.847137][ T4022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.847159][ T4022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.474200][ T4082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.474215][ T4082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.665842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.396857][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'. [ 104.925467][ T6001] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.336049][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 105.590264][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.995798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.146225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 106.363903][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 106.363941][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.400441][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 106.400458][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 106.400468][ T9] usb 2-1: Manufacturer: syz [ 106.449401][ T9] usb 2-1: config 0 descriptor?? [ 106.496568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.505874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.536140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.536422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.536595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.536793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.537107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.119403][ T9] rc_core: IR keymap rc-hauppauge not found [ 107.119424][ T9] Registered IR keymap rc-empty [ 107.168162][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.169230][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.203172][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 107.246493][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 107.325357][ T9] usb 2-1: USB disconnect, device number 2 [ 108.476440][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.571765][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.935079][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.996202][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.523278][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.630416][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.178084][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.648051][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.881072][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.960165][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.165403][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.295378][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.585962][ T6053] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 115.586032][ T6053] netlink: 'syz.2.30': attribute type 8 has an invalid length. [ 115.586068][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'. [ 115.664158][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.200770][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.309154][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.733796][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.859295][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.582590][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.166458][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.712468][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.845890][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.031116][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.122630][ T6068] Zero length message leads to an empty skb [ 119.245905][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 119.253827][ T5830] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 119.253852][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.253869][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.276369][ T5830] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.276397][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.276413][ T5830] usb 2-1: Product: syz [ 119.276425][ T5830] usb 2-1: Manufacturer: syz [ 119.276437][ T5830] usb 2-1: SerialNumber: syz [ 119.506433][ T6075] syz_tun: entered allmulticast mode [ 119.771595][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.166304][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.240657][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.419233][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.733760][ T37] audit: type=1326 audit(1756592163.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.2.39" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb3779ebe9 code=0x0 [ 120.966742][ T5830] usb 2-1: 0:2 : does not exist [ 120.982301][ T5830] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 121.116729][ T6075] syz_tun: left allmulticast mode [ 121.326341][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.274440][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.472167][ T5830] usb 2-1: USB disconnect, device number 3 [ 122.648660][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.872279][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.610433][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.087343][ T6099] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 125.234629][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.247014][ T6105] 9pnet_fd: Insufficient options for proto=fd [ 128.531186][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.773884][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.877476][ T6135] nfs: Unknown parameter '' [ 129.078587][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.053158][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.387651][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.492569][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.547629][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.622141][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.752791][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.290223][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.290284][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.833564][ T6181] tipc: Started in network mode [ 135.833590][ T6181] tipc: Node identity fe73753f18d3, cluster identity 4711 [ 135.834219][ T6181] tipc: Enabled bearer , priority 0 [ 135.856365][ T6181] syzkaller0: entered promiscuous mode [ 135.856392][ T6181] syzkaller0: entered allmulticast mode [ 135.947779][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.107829][ T6181] tipc: Resetting bearer [ 136.361139][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.697900][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.718167][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 136.755939][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.755993][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.756013][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.839667][ T5976] tipc: Node number set to 3869275455 [ 136.841131][ T10] usb 1-1: config 0 descriptor?? [ 137.085505][ T6181] tipc: Resetting bearer [ 137.206776][ T6181] tipc: Disabling bearer [ 137.337287][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.454715][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 137.454766][ T5976] usb 1-1: USB disconnect, device number 2 [ 139.220127][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.414371][ T6205] trusted_key: encrypted_key: insufficient parameters specified [ 139.727781][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.117649][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.360366][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.806037][ T37] audit: type=1326 audit(1756592185.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.2.73" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb3779ebe9 code=0x0 [ 143.298646][ T6226] 9pnet_fd: Insufficient options for proto=fd [ 144.186489][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.026928][ T6250] netlink: 'syz.4.82': attribute type 29 has an invalid length. [ 146.147171][ T6249] netlink: 'syz.4.82': attribute type 29 has an invalid length. [ 146.281527][ T6254] capability: warning: `syz.1.85' uses deprecated v2 capabilities in a way that may be insecure [ 147.080053][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.411515][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.220313][ T6276] netlink: 'syz.1.90': attribute type 12 has an invalid length. [ 149.220466][ T6276] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.90'. [ 149.290530][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.842060][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.957472][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.111620][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.429468][ T6284] trusted_key: encrypted_key: insufficient parameters specified [ 151.809536][ T6289] tipc: Started in network mode [ 151.809563][ T6289] tipc: Node identity 822336438c85, cluster identity 4711 [ 151.810256][ T6289] tipc: Enabled bearer , priority 0 [ 151.814881][ T6289] syzkaller0: entered promiscuous mode [ 151.814906][ T6289] syzkaller0: entered allmulticast mode [ 152.216169][ T5830] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 152.385057][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.385097][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.385137][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.385157][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.798664][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.929408][ T5941] tipc: Node number set to 245773891 [ 153.226244][ T6299] tipc: Resetting bearer [ 153.544829][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 153.622110][ T6299] tipc: Disabling bearer [ 153.954532][ T6317] [ 153.954544][ T6317] ====================================================== [ 153.954552][ T6317] WARNING: possible circular locking dependency detected [ 153.954569][ T6317] syzkaller #0 Not tainted [ 153.954578][ T6317] ------------------------------------------------------ [ 153.954585][ T6317] syz.2.102/6317 is trying to acquire lock: [ 153.954595][ T6317] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 153.954656][ T6317] [ 153.954656][ T6317] but task is already holding lock: [ 153.954663][ T6317] ffffffff8efa6ba8 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 153.954702][ T6317] [ 153.954702][ T6317] which lock already depends on the new lock. [ 153.954702][ T6317] [ 153.954708][ T6317] [ 153.954708][ T6317] the existing dependency chain (in reverse order) is: [ 153.954715][ T6317] [ 153.954715][ T6317] -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: [ 153.954738][ T6317] lock_acquire+0x120/0x360 [ 153.954758][ T6317] rt_write_lock+0x6a/0x110 [ 153.954774][ T6317] smc_hash_sk+0x8f/0x2a0 [ 153.954789][ T6317] smc_sk_init+0x5a4/0x7f0 [ 153.954805][ T6317] __smc_create+0x10d/0x280 [ 153.954824][ T6317] __sock_create+0x4b3/0x9f0 [ 153.954841][ T6317] __sys_socket+0xd7/0x1b0 [ 153.954856][ T6317] __x64_sys_socket+0x7a/0x90 [ 153.954872][ T6317] do_syscall_64+0xfa/0x3b0 [ 153.954892][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.954907][ T6317] [ 153.954907][ T6317] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 153.954930][ T6317] validate_chain+0xb9b/0x2140 [ 153.954952][ T6317] __lock_acquire+0xab9/0xd20 [ 153.954970][ T6317] reacquire_held_locks+0x127/0x1d0 [ 153.955081][ T6317] lock_release+0x1b4/0x3e0 [ 153.955099][ T6317] __local_bh_enable_ip+0x10c/0x270 [ 153.955117][ T6317] sock_i_ino+0xa9/0xc0 [ 153.955137][ T6317] smc_diag_dump_proto+0xa4c/0x1fb0 [ 153.955154][ T6317] smc_diag_dump+0x59/0xa0 [ 153.955170][ T6317] netlink_dump+0x6e4/0xe90 [ 153.955187][ T6317] __netlink_dump_start+0x5cb/0x7e0 [ 153.955203][ T6317] smc_diag_handler_dump+0x178/0x210 [ 153.955216][ T6317] sock_diag_rcv_msg+0x4c9/0x600 [ 153.955232][ T6317] netlink_rcv_skb+0x205/0x470 [ 153.955247][ T6317] netlink_unicast+0x843/0xa10 [ 153.955261][ T6317] netlink_sendmsg+0x805/0xb30 [ 153.955279][ T6317] __sock_sendmsg+0x219/0x270 [ 153.955293][ T6317] ____sys_sendmsg+0x508/0x820 [ 153.955313][ T6317] ___sys_sendmsg+0x21f/0x2a0 [ 153.955329][ T6317] __x64_sys_sendmsg+0x1a1/0x260 [ 153.955347][ T6317] do_syscall_64+0xfa/0x3b0 [ 153.955363][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.955376][ T6317] [ 153.955376][ T6317] other info that might help us debug this: [ 153.955376][ T6317] [ 153.955381][ T6317] Possible unsafe locking scenario: [ 153.955381][ T6317] [ 153.955385][ T6317] CPU0 CPU1 [ 153.955388][ T6317] ---- ---- [ 153.955392][ T6317] rlock(smc_v6_hashinfo.lock); [ 153.955402][ T6317] lock((softirq_ctrl.lock)); [ 153.955411][ T6317] lock(smc_v6_hashinfo.lock); [ 153.955421][ T6317] lock((softirq_ctrl.lock)); [ 153.955430][ T6317] [ 153.955430][ T6317] *** DEADLOCK *** [ 153.955430][ T6317] [ 153.955435][ T6317] 3 locks held by syz.2.102/6317: [ 153.955443][ T6317] #0: ffff8880109f8908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 153.955477][ T6317] #1: ffffffff8efa6ba8 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 153.955508][ T6317] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 153.955537][ T6317] [ 153.955537][ T6317] stack backtrace: [ 153.955560][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.955577][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.955591][ T6317] Call Trace: [ 153.955596][ T6317] [ 153.955603][ T6317] dump_stack_lvl+0x189/0x250 [ 153.955625][ T6317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.955643][ T6317] ? __pfx__printk+0x10/0x10 [ 153.955657][ T6317] ? print_lock_name+0xde/0x100 [ 153.955671][ T6317] print_circular_bug+0x2ee/0x310 [ 153.955689][ T6317] check_noncircular+0x134/0x160 [ 153.955714][ T6317] validate_chain+0xb9b/0x2140 [ 153.955732][ T6317] ? validate_chain+0x897/0x2140 [ 153.955755][ T6317] __lock_acquire+0xab9/0xd20 [ 153.955771][ T6317] reacquire_held_locks+0x127/0x1d0 [ 153.955788][ T6317] ? __local_bh_disable_ip+0x264/0x400 [ 153.955804][ T6317] lock_release+0x1b4/0x3e0 [ 153.955819][ T6317] ? __local_bh_enable_ip+0x100/0x270 [ 153.955834][ T6317] __local_bh_enable_ip+0x10c/0x270 [ 153.955849][ T6317] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 153.955865][ T6317] ? rt_read_unlock+0x65/0xa0 [ 153.955878][ T6317] ? sock_i_ino+0x24/0xc0 [ 153.955894][ T6317] sock_i_ino+0xa9/0xc0 [ 153.955911][ T6317] smc_diag_dump_proto+0xa4c/0x1fb0 [ 153.955932][ T6317] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 153.955947][ T6317] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 153.955967][ T6317] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 153.955994][ T6317] ? __phys_addr+0xd3/0x180 [ 153.956013][ T6317] ? __kasan_kmalloc_large+0x85/0xa0 [ 153.956030][ T6317] ? rcu_is_watching+0x15/0xb0 [ 153.956049][ T6317] ? rcu_is_watching+0x15/0xb0 [ 153.956067][ T6317] ? trace_kmalloc+0x1f/0xd0 [ 153.956081][ T6317] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 153.956099][ T6317] ? __build_skb_around+0x257/0x3e0 [ 153.956116][ T6317] smc_diag_dump+0x59/0xa0 [ 153.956129][ T6317] netlink_dump+0x6e4/0xe90 [ 153.956146][ T6317] ? __pfx_netlink_dump+0x10/0x10 [ 153.956168][ T6317] __netlink_dump_start+0x5cb/0x7e0 [ 153.956184][ T6317] smc_diag_handler_dump+0x178/0x210 [ 153.956199][ T6317] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 153.956212][ T6317] ? __pfx_smc_diag_dump+0x10/0x10 [ 153.956226][ T6317] ? sock_diag_lock_handler+0x19/0x290 [ 153.956246][ T6317] ? sock_diag_lock_handler+0x19/0x290 [ 153.956261][ T6317] sock_diag_rcv_msg+0x4c9/0x600 [ 153.956277][ T6317] netlink_rcv_skb+0x205/0x470 [ 153.956298][ T6317] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 153.956313][ T6317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.956331][ T6317] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.956349][ T6317] netlink_unicast+0x843/0xa10 [ 153.956365][ T6317] ? __pfx_netlink_unicast+0x10/0x10 [ 153.956379][ T6317] ? netlink_sendmsg+0x642/0xb30 [ 153.956394][ T6317] ? skb_put+0x11b/0x210 [ 153.956409][ T6317] netlink_sendmsg+0x805/0xb30 [ 153.956426][ T6317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.956443][ T6317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.956455][ T6317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.956469][ T6317] __sock_sendmsg+0x219/0x270 [ 153.956483][ T6317] ____sys_sendmsg+0x508/0x820 [ 153.956500][ T6317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.956519][ T6317] ? import_iovec+0x74/0xa0 [ 153.956533][ T6317] ___sys_sendmsg+0x21f/0x2a0 [ 153.956549][ T6317] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.956576][ T6317] ? __fget_files+0x2a/0x420 [ 153.956591][ T6317] ? __fget_files+0x3a6/0x420 [ 153.956610][ T6317] __x64_sys_sendmsg+0x1a1/0x260 [ 153.956627][ T6317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.956646][ T6317] ? rcu_is_watching+0x15/0xb0 [ 153.956664][ T6317] ? do_syscall_64+0xbe/0x3b0 [ 153.956680][ T6317] do_syscall_64+0xfa/0x3b0 [ 153.956695][ T6317] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.956710][ T6317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.956722][ T6317] ? clear_bhb_loop+0x60/0xb0 [ 153.956752][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.956765][ T6317] RIP: 0033:0x7ffb3779ebe9 [ 153.956783][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.956795][ T6317] RSP: 002b:00007ffb359bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.956809][ T6317] RAX: ffffffffffffffda RBX: 00007ffb379d6180 RCX: 00007ffb3779ebe9 [ 153.956819][ T6317] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000008 [ 153.956828][ T6317] RBP: 00007ffb37821e19 R08: 0000000000000000 R09: 0000000000000000 [ 153.956836][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.956844][ T6317] R13: 00007ffb379d6218 R14: 00007ffb379d6180 R15: 00007ffcaaf6f8e8 [ 153.956859][ T6317] [ 154.407197][ T5830] usb 4-1: usb_control_msg returned -32 [ 154.407238][ T5830] usbtmc 4-1:16.0: can't read capabilities [ 155.589308][ T990] usb 4-1: USB disconnect, device number 2