last executing test programs: 49.50451831s ago: executing program 1 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbec, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x6}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 49.072167373s ago: executing program 1 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.048701018s ago: executing program 1 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x200400c4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e6", 0x60}, {0x0}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882", 0x9b}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) 47.997345861s ago: executing program 1 (id=322): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000180)={0xfffffd36, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r0, &(0x7f0000002080)=0x64, 0x23b) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) socket$inet6(0xa, 0x3, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0xf0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}}, 0xf0}}, 0x40004) 45.153927994s ago: executing program 1 (id=327): fsync(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900010073797a3100000000040004801c0004800800024000000000ffff024000010001080002400000000c05000300210000002c0004800800014000000004080001407f"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 45.152916725s ago: executing program 1 (id=329): getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x10, 0x7800, 0xd, 0x4, {{0x12, 0x4, 0x1, 0x3b, 0x48, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x14, 0xf, 0x0, 0x8, [0x1ff, 0x8, 0x3ff, 0x4]}, @ssrr={0x89, 0xf, 0xc0, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "b9dbfee5033d8fe8"}]}]}}}}}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x26008005) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r6 = dup2(r4, r5) r7 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00"}, 0xd, 0x5}) close_range(r6, 0xffffffffffffffff, 0x0) 30.058199599s ago: executing program 32 (id=329): getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x10, 0x7800, 0xd, 0x4, {{0x12, 0x4, 0x1, 0x3b, 0x48, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x14, 0xf, 0x0, 0x8, [0x1ff, 0x8, 0x3ff, 0x4]}, @ssrr={0x89, 0xf, 0xc0, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "b9dbfee5033d8fe8"}]}]}}}}}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x26008005) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r6 = dup2(r4, r5) r7 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00"}, 0xd, 0x5}) close_range(r6, 0xffffffffffffffff, 0x0) 8.794275565s ago: executing program 2 (id=474): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000000500)}], 0x4, 0x0, 0x0, 0x200400c4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e6", 0x60}, {0x0}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882", 0x9b}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) 8.666774092s ago: executing program 2 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbec, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3fe, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x6, 0x7, 0xffffffb2, 0xeaa8, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xa, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0x8, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x2, 0x6, 0x10000, 0x2, 0x7ff, 0x100100, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x3, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x2, 0xfff, 0x800, 0xa3, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x40, 0x5, 0x4, 0x8, 0x8, 0x1004, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x0, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0x4, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x6}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 8.461185493s ago: executing program 2 (id=479): r0 = openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x2, 0x9, 0x1}) 8.288812642s ago: executing program 2 (id=480): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0x0, 0xa, 0x20002f7}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) unshare(0x4020400) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x2, 0x2, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7.260627758s ago: executing program 2 (id=486): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.103486696s ago: executing program 0 (id=490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.593179944s ago: executing program 2 (id=493): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) fsync(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082104, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x0, 0x3) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000f80)=0x1) 6.496667919s ago: executing program 4 (id=494): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000080100000c00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000005e0018421cd37b2a58f9837819279a4f59fd0000000000fe3be809006119eed72705be42faf8008a00"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x800, 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x450901, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x39, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3ffe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_MARK_MASK={0x8}]}, 0x1c}}, 0x0) 5.720793611s ago: executing program 5 (id=495): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1", 0x82}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13de", 0x12}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.401514362s ago: executing program 3 (id=496): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(0x0, r1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4048011) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x33a, 0xf9, 0xff, 0x8, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x9c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r8, 0x0) 4.303317477s ago: executing program 0 (id=497): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x100, 0x5, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x4, 0x2, 0x7, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xfffffffc, 0xca9f, 0x0, 0x8, 0xffffffff, 0xf39e, 0x2, 0x8, 0xa6b5, 0x0, 0x8]}) 4.227950051s ago: executing program 5 (id=498): r0 = gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 3.820830094s ago: executing program 0 (id=499): fsync(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900010073797a3100000000040004801c0004800800024000000000ffff024000010001080002400000000c05000300210000002c0004800800014000000004080001407fffff"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.456708083s ago: executing program 3 (id=500): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) bind$x25(r5, &(0x7f0000000180), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 3.180189838s ago: executing program 3 (id=501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)}, {&(0x7f00000003c0)}, {&(0x7f0000000500)}], 0x4, 0x0, 0x0, 0x200400c4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e6", 0x60}, {0x0}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882", 0x9b}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) 3.15385258s ago: executing program 5 (id=502): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.973146219s ago: executing program 4 (id=503): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.97226251s ago: executing program 3 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbec, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3fe, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x6, 0x7, 0xffffffb2, 0xeaa8, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xa, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0x8, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x2, 0x6, 0x10000, 0x2, 0x7ff, 0x100100, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x3, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x2, 0xfff, 0x800, 0xa3, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x40, 0x5, 0x4, 0x8, 0x8, 0x1004, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x0, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0x4, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x6}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.94693758s ago: executing program 5 (id=505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)}, 0x20004014) 2.848877126s ago: executing program 0 (id=506): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) 2.712384813s ago: executing program 0 (id=507): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) 2.633316217s ago: executing program 4 (id=508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.452273977s ago: executing program 3 (id=509): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8880, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={0x0, 0x0, 0x0, &(0x7f0000001bc0), 0xffffffff, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000009b80)={0x1c, 0x56, 0x601, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x7, 0x6f, 0x0, 0x0, @str='\x00\x00\x00'}, @nested={0x4, 0xe3}]}, 0x1c}], 0x1}, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 2.447498838s ago: executing program 5 (id=519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbec, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3fe, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x6, 0x7, 0xffffffb2, 0xeaa8, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xa, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0x8, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x2, 0x6, 0x10000, 0x2, 0x7ff, 0x100100, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x3, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x2, 0xfff, 0x800, 0xa3, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x40, 0x5, 0x4, 0x8, 0x8, 0x1004, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x0, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0x4, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x6}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.076765068s ago: executing program 4 (id=510): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r3) bind$tipc(r1, 0x0, 0x0) close(r1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x803, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) 1.83787833s ago: executing program 4 (id=511): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 1.072369792s ago: executing program 5 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r3, 0xeed, 0xeed, 0x1, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x6) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendto$inet(r6, &(0x7f0000000300)="425ed2e4", 0x4, 0x1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) 916.76702ms ago: executing program 0 (id=513): r0 = gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 22.956548ms ago: executing program 4 (id=514): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)}, {&(0x7f00000003c0)}, {&(0x7f0000000500)}], 0x4, 0x0, 0x0, 0x200400c4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e6", 0x60}, {0x0}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882", 0x9b}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) 0s ago: executing program 3 (id=515): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. syzkaller login: [ 63.412057][ T4171] cgroup: Unknown subsys name 'net' [ 63.555413][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.191076][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.918224][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.039627][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.069825][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 67.115130][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.138206][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.147932][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.159678][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.175886][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.184943][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.193998][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.231370][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.282640][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.306298][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.397500][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.409100][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.420289][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.453293][ T4187] team0: Port device team_slave_0 added [ 67.479703][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.488592][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.498863][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.533663][ T4187] team0: Port device team_slave_1 added [ 67.552007][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.561366][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.572083][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.582471][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.591992][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.602284][ T4197] device bridge_slave_0 entered promiscuous mode [ 67.623131][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.652332][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.660936][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.670791][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.680441][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.689455][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.699968][ T4197] device bridge_slave_1 entered promiscuous mode [ 67.715576][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.737614][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.745367][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.776132][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.830140][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.840955][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.872054][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.887885][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.922663][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.936438][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.951345][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.971861][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.987466][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.002495][ T4188] team0: Port device team_slave_0 added [ 68.010646][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.025639][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.038574][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.084256][ T4188] team0: Port device team_slave_1 added [ 68.095571][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.111396][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.141516][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.176263][ T4184] team0: Port device team_slave_0 added [ 68.207217][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.216799][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.250781][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.272513][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.280520][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.291881][ T4184] team0: Port device team_slave_1 added [ 68.308909][ T4197] team0: Port device team_slave_0 added [ 68.320017][ T4192] team0: Port device team_slave_0 added [ 68.326952][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.337032][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.374916][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.409284][ T4197] team0: Port device team_slave_1 added [ 68.430031][ T4192] team0: Port device team_slave_1 added [ 68.495635][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.507923][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.556634][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.557392][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 68.580363][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 68.587077][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.594771][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.608510][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 68.623233][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.640431][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 68.647185][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 68.654377][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.664129][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.701986][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.735257][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.744395][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.780755][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.799540][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.810089][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.843973][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.860415][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.867754][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.877749][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.889269][ T4188] Cannot create hsr debugfs directory [ 68.901671][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.910555][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.943848][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.000655][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.009316][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.016786][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.026788][ T4184] Cannot create hsr debugfs directory [ 69.099328][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.106967][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.120521][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.130164][ T4192] Cannot create hsr debugfs directory [ 69.150592][ T4197] device hsr_slave_0 entered promiscuous mode [ 69.159458][ T4197] device hsr_slave_1 entered promiscuous mode [ 69.169927][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.179175][ T4197] Cannot create hsr debugfs directory [ 69.550240][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.569934][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.583400][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.610482][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.680600][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.707194][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.722254][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.756827][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.807553][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.823042][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.842590][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.863996][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.975240][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.991260][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.025427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.036706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.048027][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.062391][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.081305][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.105345][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.142089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.157764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.174015][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.182014][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.196000][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.224622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.235114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.249703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.262902][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.273977][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.285976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.300339][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.313338][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.326486][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.354640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.367826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.381202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.398399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.423174][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.437826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.450501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.469562][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.480459][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.502291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.514776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.533978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.548907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.560257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.570747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.581905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.606270][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.629328][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 70.636852][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.658923][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 70.669367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.682926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.695198][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.703812][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.709359][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 70.738819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.750787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.761622][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 70.761720][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 70.781432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.792691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.805340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.817728][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.825328][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.834961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.859667][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.890177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.905834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.920277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.959408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.969024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.980128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.993561][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.001063][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.013340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.024280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.035542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.046833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.057098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.066761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.076070][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.084765][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.093334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.104504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.114776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.131448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.141115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.165334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.175592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.190086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.199723][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.210028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.241506][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.261976][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.273487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.289618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.304452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.314674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.340778][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.352302][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.360225][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.377039][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.415315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.426116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.435935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.445053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.454767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.467926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.496032][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.514096][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.537288][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.573072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.584645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.594299][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.602744][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.611725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.628963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.648899][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.656617][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.719013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.746844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.765069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.779718][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.788195][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.809423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.824558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.840615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.869150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.894148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.919251][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.928859][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.947732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.966248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.977685][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.989406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.047606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.061512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.075349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.090030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.100558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.112391][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.127279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.143471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.157907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.170702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.182682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.191925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.201088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.211382][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.237276][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.247532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.265052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.282591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.306492][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.376247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.393994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.424783][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.450281][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.499468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.510881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.524147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.540946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.590370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.614075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.655612][ T4188] device veth0_vlan entered promiscuous mode [ 72.689886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.708730][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 72.720861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.748667][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 72.769292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.781299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.796371][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 72.805890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.816524][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 72.829453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.840488][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 72.878007][ T4192] device veth0_vlan entered promiscuous mode [ 72.894956][ T4188] device veth1_vlan entered promiscuous mode [ 72.921981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.941827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.957899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.976069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.993002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.006437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.024992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.041524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.054562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.077345][ T4192] device veth1_vlan entered promiscuous mode [ 73.116063][ T4187] device veth0_vlan entered promiscuous mode [ 73.129601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.151528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.162446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.172101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.181676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.215543][ T4187] device veth1_vlan entered promiscuous mode [ 73.231519][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.262062][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.279009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.292079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.304424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.314870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.360870][ T4192] device veth0_macvtap entered promiscuous mode [ 73.371565][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.382900][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.395031][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.406793][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.420617][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.433987][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.446516][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.462510][ T4188] device veth0_macvtap entered promiscuous mode [ 73.484084][ T4192] device veth1_macvtap entered promiscuous mode [ 73.494246][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.506567][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.520786][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.533722][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.555199][ T4188] device veth1_macvtap entered promiscuous mode [ 73.583818][ T4187] device veth0_macvtap entered promiscuous mode [ 73.606443][ T4187] device veth1_macvtap entered promiscuous mode [ 73.626538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.637303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.648790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.663454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.677034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.690033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.702437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.716420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.726214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.742708][ T4184] device veth0_vlan entered promiscuous mode [ 73.766810][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.789879][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.801882][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.814544][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.832828][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.857120][ T4184] device veth1_vlan entered promiscuous mode [ 73.868222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.879465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.892579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.907414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.918889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.932852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.945858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.960686][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.973561][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.988518][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.001249][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.021981][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.041217][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.059752][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.076947][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.095728][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.113550][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.129613][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.147316][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.184011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.204193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.224217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.237268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.258703][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.273802][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.289192][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.307840][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.343788][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.360017][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.375896][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.404605][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.427701][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.442942][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.464726][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.479087][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.494807][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.513356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.526983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.541962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.601072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.617595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.637732][ T4197] device veth0_vlan entered promiscuous mode [ 74.679602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.700688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.764008][ T4197] device veth1_vlan entered promiscuous mode [ 74.789580][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 74.801649][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 74.820458][ T4184] device veth0_macvtap entered promiscuous mode [ 74.832461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.846693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.857378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.867349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.878143][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 74.885043][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 74.897537][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 74.917295][ T4184] device veth1_macvtap entered promiscuous mode [ 74.953027][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.969069][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.004170][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.013182][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.025805][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.036611][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.045929][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.064815][ T4197] device veth0_macvtap entered promiscuous mode [ 75.079180][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.090858][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.102212][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.115336][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.131453][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.143445][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.156047][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.174684][ T4197] device veth1_macvtap entered promiscuous mode [ 75.188725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.196982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.205965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.217636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.237644][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.254697][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.266549][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.279397][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.291009][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.302763][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.314974][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.338678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.347550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.364097][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.367387][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.383136][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.394158][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.404923][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.414380][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.442058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.455814][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.467063][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.475028][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.483532][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.495266][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.507387][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.521906][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.534920][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.546226][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.558160][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.572073][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.599481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.609635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.621269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.643569][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.658679][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.680531][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.681538][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.700896][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.712452][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.723763][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.740520][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.752579][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.763997][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.775540][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.792852][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.804073][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.814719][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.824469][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.844888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.859697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.870649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.928695][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.937489][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.967190][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.977281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.991649][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.020176][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.059762][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.066378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.128427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.227525][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.237132][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.273898][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.291954][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.336034][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.359251][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.410912][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.436548][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.451424][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.470641][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.797443][ T4278] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.869494][ T4278] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.019527][ T4292] device syzkaller0 entered promiscuous mode [ 77.797801][ T4331] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.857364][ T4331] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.117014][ T4358] device syzkaller0 entered promiscuous mode [ 78.367124][ T4369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'. [ 78.437934][ T4375] loop3: detected capacity change from 0 to 256 [ 78.562575][ T4375] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.083072][ T4387] kvm [4386]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc95a [ 79.138790][ T4387] kvm [4386]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 79.207984][ T4404] device syzkaller0 entered promiscuous mode [ 79.213048][ T4387] kvm [4386]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x100b, nop [ 79.237188][ T4410] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.43' sets config #0 [ 79.285934][ T4387] kvm [4386]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xd956 [ 79.322827][ T4402] kvm: apic: phys broadcast and lowest prio [ 79.363551][ T4387] kvm [4386]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9c5 [ 79.420228][ T4387] kvm [4386]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe1ea [ 79.484909][ T4387] kvm [4386]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4939 [ 79.532411][ T4387] kvm [4386]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 79.583590][ T4387] kvm [4386]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xca56 [ 79.681486][ T4427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 79.747977][ T4427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 80.099717][ T4443] device syzkaller0 entered promiscuous mode [ 80.227284][ T4448] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.62' sets config #0 [ 80.282264][ T4448] kvm: apic: phys broadcast and lowest prio [ 81.046909][ T4487] device syzkaller0 entered promiscuous mode [ 81.687683][ T4509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 81.692483][ T4468] syz.2.70 (4468): drop_caches: 2 [ 81.867091][ T4516] device macvlan2 entered promiscuous mode [ 81.883147][ T4520] Zero length message leads to an empty skb [ 81.907986][ T4512] kvm [4511]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xffeb0000cf00 [ 81.936351][ T4512] kvm [4511]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 81.954749][ T4512] kvm [4511]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xfff6000066e6 [ 81.987384][ T4512] kvm [4511]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 82.314999][ T4524] device syzkaller0 entered promiscuous mode [ 82.773201][ T4528] loop1: detected capacity change from 0 to 4096 [ 82.877568][ T4528] EXT4-fs (loop1): Ignoring removed bh option [ 83.186847][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 83.307112][ T4528] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.86: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 83.341732][ T4528] EXT4-fs (loop1): Remounting filesystem read-only [ 83.349755][ T4528] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.86: directory missing '..' [ 83.438297][ T26] audit: type=1800 audit(1777309669.669:2): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.86" name="bus" dev="loop1" ino=20 res=0 errno=0 [ 84.028063][ C0] sched: RT throttling activated [ 84.255860][ T4542] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.91' sets config #0 [ 84.748658][ T4559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 85.172864][ T4566] kvm [4565]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xffeb0000cf00 [ 85.258417][ T4566] kvm [4565]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 85.299140][ T4566] kvm [4565]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xfff6000066e6 [ 85.368426][ T4566] kvm [4565]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 86.274484][ T4609] loop2: detected capacity change from 0 to 4096 [ 86.401445][ T4609] EXT4-fs (loop2): Ignoring removed bh option [ 86.557717][ T4609] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 86.669085][ T4609] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.110: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 86.985052][ T4609] EXT4-fs (loop2): Remounting filesystem read-only [ 86.993046][ T4609] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.110: directory missing '..' [ 87.048393][ T26] audit: type=1800 audit(1777309673.309:3): pid=4617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.110" name="bus" dev="loop2" ino=20 res=0 errno=0 [ 87.053459][ T7] cfg80211: failed to load regulatory.db [ 87.574474][ T4621] program syz.3.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.423660][ T4637] device syzkaller0 entered promiscuous mode [ 88.643482][ T4648] xt_hashlimit: size too large, truncated to 1048576 [ 88.875608][ T4657] program syz.2.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.048835][ T4694] device syzkaller0 entered promiscuous mode [ 90.227463][ T4697] kvm [4696]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc95a [ 90.283236][ T4697] kvm [4696]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 90.459590][ T4697] kvm [4696]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x100b, nop [ 90.509655][ T4697] kvm [4696]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xd956 [ 90.587009][ T4697] kvm [4696]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9c5 [ 90.689458][ T4697] kvm [4696]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe1ea [ 90.779713][ T4697] kvm [4696]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4939 [ 91.120695][ T26] audit: type=1326 audit(1777309677.389:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98bbd1edd9 code=0x7ffc0000 [ 91.232126][ T26] audit: type=1326 audit(1777309677.429:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f98bbd1edd9 code=0x7ffc0000 [ 91.383329][ T26] audit: type=1326 audit(1777309677.429:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98bbd1edd9 code=0x7ffc0000 [ 91.557232][ T26] audit: type=1326 audit(1777309677.429:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98bbd1edd9 code=0x7ffc0000 [ 91.820222][ T4751] capability: warning: `syz.2.158' uses deprecated v2 capabilities in a way that may be insecure [ 92.667158][ T4770] kvm [4768]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xa25a, nop [ 92.761578][ T4770] kvm [4768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xa25a [ 92.782821][ T4770] kvm [4768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x933e [ 92.852581][ T4770] kvm [4768]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x90af, nop [ 92.902667][ T4770] kvm [4768]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xd1c9, nop [ 93.682041][ T4792] loop2: detected capacity change from 0 to 4096 [ 95.056359][ T4792] EXT4-fs (loop2): Ignoring removed bh option [ 95.963568][ T4792] EXT4-fs: error -4 creating inode table initialization thread [ 95.972243][ T4792] EXT4-fs (loop2): mount failed [ 96.975635][ T4827] loop1: detected capacity change from 0 to 256 [ 97.271246][ T4836] overlayfs: missing 'lowerdir' [ 97.684014][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.718214][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.750686][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.788171][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.986421][ T4852] device syzkaller0 entered promiscuous mode [ 98.195363][ T4871] syz.2.198 uses obsolete (PF_INET,SOCK_PACKET) [ 98.859259][ T4876] netlink: 68 bytes leftover after parsing attributes in process `syz.3.199'. [ 100.050120][ T4939] binder: BINDER_SET_CONTEXT_MGR already set [ 100.057154][ T4939] binder: 4938:4939 ioctl 4018620d 200000004a80 returned -16 [ 100.114887][ T4939] ODEBUG: Out of memory. ODEBUG disabled [ 103.083767][ T4997] overlayfs: missing 'lowerdir' [ 103.091821][ T4939] syz.0.218 (4939): drop_caches: 2 [ 103.445510][ T5004] device syzkaller0 entered promiscuous mode [ 104.478330][ T4258] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.514716][ T5026] netlink: 68 bytes leftover after parsing attributes in process `syz.4.243'. [ 104.815501][ T5032] kvm [5031]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xffcd0000cf00 [ 104.853772][ T5032] kvm [5031]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 104.894366][ T5032] kvm [5031]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 104.968417][ T4258] usb 3-1: config 0 has no interfaces? [ 105.163400][ T4258] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 105.183743][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.217080][ T4258] usb 3-1: Product: syz [ 105.248310][ T4258] usb 3-1: Manufacturer: syz [ 105.265019][ T4258] usb 3-1: SerialNumber: syz [ 105.302441][ T4258] usb 3-1: config 0 descriptor?? [ 105.402845][ T4258] usb 3-1: can't set config #0, error -71 [ 105.510397][ T4258] usb 3-1: USB disconnect, device number 2 [ 105.567620][ T5066] device syzkaller0 entered promiscuous mode [ 105.639530][ T21] kernel read not supported for file /sequencer (pid: 21 comm: kworker/1:0) [ 106.666272][ T5101] loop3: detected capacity change from 0 to 4096 [ 108.004404][ T5101] EXT4-fs (loop3): Ignoring removed bh option [ 108.392848][ T5101] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 108.510220][ T26] audit: type=1800 audit(1777309694.769:8): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.267" name="bus" dev="loop3" ino=20 res=0 errno=0 [ 108.993581][ T5097] syz.0.268 (5097) used greatest stack depth: 21136 bytes left [ 109.138142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1a!!! [ 109.484853][ T5124] tipc: Started in network mode [ 109.507439][ T5124] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 109.528956][ T5124] tipc: Enabling of bearer rejected, failed to enable media [ 109.879972][ T5132] kvm [5131]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xffd80000cf00 [ 109.925302][ T5132] kvm [5131]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 109.980105][ T5132] kvm [5131]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 110.012060][ T5132] kvm [5131]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 110.190173][ T5151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.362263][ T5153] 9pnet_virtio: no channels available for device syz [ 111.649342][ T5108] syz.1.270 (5108): drop_caches: 2 [ 112.474734][ T5174] device syzkaller0 entered promiscuous mode [ 113.348879][ T5209] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 113.565773][ T5209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.992858][ T5218] loop1: detected capacity change from 0 to 4096 [ 114.997734][ T5218] EXT4-fs (loop1): Ignoring removed bh option [ 115.044335][ T5218] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 115.148239][ T26] audit: type=1800 audit(1777309701.399:9): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.305" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 115.401333][ T5214] bond1: (slave gretap1): making interface the new active one [ 115.453884][ T5214] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.545405][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 116.088109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 116.108146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 116.138118][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 116.148065][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 116.168133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 116.178076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 116.198546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 116.218184][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 116.238355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 116.776348][ T5236] device syzkaller0 entered promiscuous mode [ 118.734291][ T5265] loop3: detected capacity change from 0 to 4096 [ 118.989101][ T5272] binder: BINDER_SET_CONTEXT_MGR already set [ 119.026886][ T5272] binder: 5266:5272 ioctl 4018620d 200000004a80 returned -16 [ 119.542704][ T5272] syz.1.322 (5272): drop_caches: 2 [ 119.568367][ T5265] EXT4-fs (loop3): Ignoring removed bh option [ 119.829093][ T5272] syz.1.322 (5272): drop_caches: 2 [ 120.178306][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 120.741114][ T5296] kvm [5295]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xfff200000000 [ 120.756918][ T5296] kvm [5295]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 121.828975][ T26] audit: type=1800 audit(1777309707.179:10): pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 123.091536][ T5333] binder: BINDER_SET_CONTEXT_MGR already set [ 123.101743][ T5333] binder: 5332:5333 ioctl 4018620d 200000004a80 returned -16 [ 123.146154][ T5333] syz.2.338 (5333): drop_caches: 2 [ 123.173584][ T5333] syz.2.338 (5333): drop_caches: 2 [ 123.207742][ T5336] device syzkaller0 entered promiscuous mode [ 127.266155][ T5386] MPTCP: addr_signal error, rm_addr=1 [ 129.509563][ T5407] loop2: detected capacity change from 0 to 4096 [ 131.379966][ T5407] EXT4-fs (loop2): Ignoring removed bh option [ 132.096649][ T5407] EXT4-fs: failed to create workqueue [ 132.102776][ T5407] EXT4-fs (loop2): mount failed [ 132.512948][ T5425] netlink: 'syz.4.363': attribute type 10 has an invalid length. [ 132.586762][ T5420] kvm [5419]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xfff200000000 [ 132.605559][ T5420] kvm [5419]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 132.792736][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.799364][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.782727][ T5466] device syzkaller0 entered promiscuous mode [ 134.940947][ T5472] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 135.508333][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.778200][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 135.898297][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 136.044161][ T5484] kvm [5483]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xfff200000000 [ 136.078336][ T23] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 136.118149][ T23] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 136.126959][ T5484] kvm [5483]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 136.136848][ T23] usb 3-1: Product: syz [ 136.154861][ T23] usb 3-1: Manufacturer: syz [ 136.170250][ T23] usb 3-1: SerialNumber: syz [ 136.189255][ T23] usb 3-1: config 0 descriptor?? [ 136.228373][ T5480] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.350346][ T23] usb 3-1: USB disconnect, device number 3 [ 138.889576][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc95a [ 138.937013][ T5514] kvm [5513]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 138.952184][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x100b, nop [ 138.976143][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xd956 [ 139.025292][ T5507] chnl_net:caif_netlink_parms(): no params data found [ 139.049138][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9c5 [ 139.076915][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe1ea [ 139.109626][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4939 [ 139.118998][ T5514] kvm [5513]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 139.128617][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xca56 [ 139.143127][ T5514] kvm [5513]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x11c7, nop [ 139.223145][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.263805][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.278443][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.331218][ T5507] device bridge_slave_0 entered promiscuous mode [ 139.423871][ T4614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.590838][ T4614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.686134][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.702627][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.716166][ T5507] device bridge_slave_1 entered promiscuous mode [ 139.760806][ T4614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.064463][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 141.666384][ T4614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.087576][ T5507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.179823][ T5507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.217716][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.232249][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.247561][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.270298][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.328195][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.421556][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 143.438199][ T23] usb 3-1: can't read configurations, error -71 [ 143.508337][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 143.552226][ T5507] team0: Port device team_slave_0 added [ 143.590047][ T5507] team0: Port device team_slave_1 added [ 143.755616][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.822936][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.873631][ T5507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.900543][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.915512][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.955600][ T5507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.006232][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.006235][ T5585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.405'. [ 144.026479][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 144.081023][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.157995][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.186473][ T5583] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.282440][ T5507] device hsr_slave_0 entered promiscuous mode [ 144.308930][ T5507] device hsr_slave_1 entered promiscuous mode [ 144.333140][ T5507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.345943][ T5583] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.360697][ T5507] Cannot create hsr debugfs directory [ 144.521535][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.574022][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.672879][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.757957][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.824214][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.896497][ T5583] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.946452][ T5507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.127235][ T5507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.174764][ T5507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.518142][ T5507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.588476][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 146.457075][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.491532][ T5507] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.519994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.553169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.614871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.677989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.749061][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.756490][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.051551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.097528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.143174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.194230][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.202331][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.236543][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc95a [ 147.246088][ T5666] kvm [5665]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 147.312673][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x100b, nop [ 147.355309][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.383319][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xd956 [ 147.427630][ T4614] device hsr_slave_0 left promiscuous mode [ 147.446527][ T4614] device hsr_slave_1 left promiscuous mode [ 147.456641][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9c5 [ 147.510456][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.534741][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.555319][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.621983][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe1ea [ 147.636306][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.669467][ T4614] device bridge_slave_1 left promiscuous mode [ 147.690247][ T4225] Bluetooth: hci1: command 0x0419 tx timeout [ 147.698284][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4939 [ 147.707407][ T5666] kvm [5665]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 147.720375][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.729151][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xca56 [ 147.753601][ T5666] kvm [5665]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x11c7, nop [ 147.954529][ T4614] device bridge_slave_0 left promiscuous mode [ 148.248532][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.614478][ T4614] device veth1_macvtap left promiscuous mode [ 148.631339][ T4614] device veth0_macvtap left promiscuous mode [ 148.656416][ T4614] device veth1_vlan left promiscuous mode [ 148.709277][ T4614] device veth0_vlan left promiscuous mode [ 149.804631][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 149.960906][ T4614] team0 (unregistering): Port device team_slave_0 removed [ 149.993091][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.323447][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.896281][ T4614] bond0 (unregistering): Released all slaves [ 151.021661][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.052163][ T5507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.066862][ T5507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.254896][ T5507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.515130][ T5507] device veth0_vlan entered promiscuous mode [ 151.536421][ T5507] device veth1_vlan entered promiscuous mode [ 151.575090][ T5507] device veth0_macvtap entered promiscuous mode [ 151.591072][ T5507] device veth1_macvtap entered promiscuous mode [ 151.615963][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.632432][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.645155][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.661199][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.674799][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.691516][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.706147][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.722858][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.734103][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.753089][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.766728][ T5507] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.781234][ T5507] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.792232][ T5507] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.805210][ T5507] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.931883][ T5112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.956960][ T5112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.038488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.080671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.132175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.156676][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.184363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.249531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.260145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.269299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.278658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.286305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.298358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.344548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.354534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.370026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.382564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.391476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.402272][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.415313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.425351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.434947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.445134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.455234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.465190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.475118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.484059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.493624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.502860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.511810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.522694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.614497][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.648179][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.670048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.760648][ T5745] device geneve2 entered promiscuous mode [ 152.785885][ T5739] virt_wifi0 speed is unknown, defaulting to 1000 [ 152.845825][ T5743] syz.2.440 (5743): drop_caches: 2 [ 152.961026][ T5743] syz.2.440 (5743): drop_caches: 2 [ 155.840742][ T5830] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.062356][ T5847] device syzkaller0 entered promiscuous mode [ 156.305028][ T5849] syz.3.467 (5849): drop_caches: 2 [ 156.351396][ T5849] syz.3.467 (5849): drop_caches: 2 [ 158.034026][ T5902] overlayfs: failed to clone upperpath [ 158.180607][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 158.371691][ T5882] autofs4:pid:5882:autofs_fill_super: called with bogus options [ 158.466114][ T5918] netlink: 'syz.5.475': attribute type 10 has an invalid length. [ 158.532534][ T5926] netlink: 68 bytes leftover after parsing attributes in process `syz.4.483'. [ 163.284343][ T6019] device syzkaller0 entered promiscuous mode [ 163.999958][ T6034] device syzkaller0 entered promiscuous mode [ 166.205417][ T6056] syz.5.512 (6056): drop_caches: 2 [ 166.457011][ C1] ------------[ cut here ]------------ [ 166.463309][ C1] WARNING: CPU: 1 PID: 6059 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 166.474310][ C1] Modules linked in: [ 166.478360][ C1] CPU: 1 PID: 6059 Comm: syz.5.512 Not tainted syzkaller #0 [ 166.485849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.496103][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 166.502911][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 09 2a f8 0f 0b e9 03 ef ff ff e8 61 09 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 ae 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 166.523209][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 166.530119][ C1] RAX: ffffffff894f2b2f RBX: ffff88805f646268 RCX: ffff88801ff9bb80 [ 166.538616][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.546977][ C1] RBP: ffffc90000dd0b08 R08: ffff88801ff9bb80 R09: 0000000000000003 [ 166.555646][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880581ed800 [ 166.564123][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 166.572710][ C1] FS: 00007f3e438af6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 166.581837][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.588668][ C1] CR2: 0000200000003000 CR3: 00000000621a6000 CR4: 00000000003526e0 [ 166.596935][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.605235][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.613652][ C1] Call Trace: [ 166.617283][ C1] [ 166.620212][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 166.626276][ C1] ? verify_lock_unused+0x140/0x140 [ 166.631587][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 166.637695][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 166.643533][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 166.649307][ C1] __iterate_interfaces+0x243/0x500 [ 166.654676][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 166.662885][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 166.669341][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 166.676639][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 166.682563][ C1] ? hw_scan_work+0xed0/0xed0 [ 166.687477][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 166.693019][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 166.698362][ C1] hrtimer_run_softirq+0x176/0x240 [ 166.703847][ C1] handle_softirqs+0x339/0x830 [ 166.708980][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 166.713953][ C1] ? do_softirq+0x210/0x210 [ 166.718942][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 166.724776][ C1] __irq_exit_rcu+0x13b/0x230 [ 166.729738][ C1] ? irq_exit_rcu+0x20/0x20 [ 166.734815][ C1] irq_exit_rcu+0x5/0x20 [ 166.739221][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 166.745215][ C1] [ 166.748390][ C1] [ 166.751725][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 166.757971][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 166.763878][ C1] Code: be ff ff ff ff e8 3c 62 68 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 e6 cd 71 08 e8 61 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 166.784681][ C1] RSP: 0018:ffffc9000307f708 EFLAGS: 00000282 [ 166.791465][ C1] RAX: 3e304cda3fa40200 RBX: ffff8880b903a340 RCX: 3e304cda3fa40200 [ 166.800316][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe40 [ 166.808852][ C1] RBP: 1ffff11017227613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 166.817301][ C1] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b913b088 [ 166.825509][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 166.833777][ C1] finish_task_switch+0x12f/0x640 [ 166.839008][ C1] ? __switch_to_asm+0x34/0x60 [ 166.843937][ C1] __schedule+0x11f7/0x43c0 [ 166.848652][ C1] ? release_firmware_map_entry+0x190/0x190 [ 166.855001][ C1] ? __mod_timer+0x91e/0xd00 [ 166.859741][ C1] schedule+0x11b/0x1e0 [ 166.864243][ C1] schedule_timeout+0x184/0x2d0 [ 166.869302][ C1] ? console_conditional_schedule+0x40/0x40 [ 166.875214][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 166.881252][ C1] ? update_process_times+0x200/0x200 [ 166.886873][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 166.892130][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 166.897882][ C1] snd_rawmidi_write+0x3b6/0xc10 [ 166.903121][ C1] ? snd_rawmidi_read+0xac0/0xac0 [ 166.908231][ C1] ? sched_dynamic_update+0x210/0x210 [ 166.913726][ C1] ? _copy_from_user+0x111/0x170 [ 166.918955][ C1] ? end_current_label_crit_section+0x14b/0x170 [ 166.925703][ C1] ? common_file_perm+0x171/0x1c0 [ 166.931112][ C1] ? fsnotify_perm+0x5d/0x560 [ 166.936151][ C1] ? security_file_permission+0x75/0xa0 [ 166.942194][ C1] do_iter_write+0x3e4/0x7b0 [ 166.946906][ C1] do_writev+0x281/0x480 [ 166.951371][ C1] ? do_readv+0x460/0x460 [ 166.956115][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 166.962509][ C1] ? lock_chain_count+0x20/0x20 [ 166.967725][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 166.973471][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 166.979493][ C1] do_syscall_64+0x4c/0xa0 [ 166.984168][ C1] ? clear_bhb_loop+0x30/0x80 [ 166.988983][ C1] ? clear_bhb_loop+0x30/0x80 [ 166.994200][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.000331][ C1] RIP: 0033:0x7f3e45676dd9 [ 167.004901][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.025676][ C1] RSP: 002b:00007f3e438af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 167.035105][ C1] RAX: ffffffffffffffda RBX: 00007f3e458f0090 RCX: 00007f3e45676dd9 [ 167.043471][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 167.052354][ C1] RBP: 00007f3e4570cd69 R08: 0000000000000000 R09: 0000000000000000 [ 167.061473][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.070746][ C1] R13: 00007f3e458f0128 R14: 00007f3e458f0090 R15: 00007ffda377f228 [ 167.079581][ C1] [ 167.083045][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.090877][ C1] CPU: 1 PID: 6059 Comm: syz.5.512 Not tainted syzkaller #0 [ 167.098739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.108944][ C1] Call Trace: [ 167.112338][ C1] [ 167.115219][ C1] dump_stack_lvl+0x188/0x250 [ 167.120031][ C1] ? show_regs_print_info+0x20/0x20 [ 167.125419][ C1] ? load_image+0x400/0x400 [ 167.130667][ C1] panic+0x2e5/0x810 [ 167.134614][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 167.139416][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 167.145954][ C1] __warn+0x248/0x2b0 [ 167.149994][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 167.155937][ C1] report_bug+0x1b7/0x2e0 [ 167.160412][ C1] handle_bug+0x3a/0x70 [ 167.164710][ C1] exc_invalid_op+0x16/0x40 [ 167.169793][ C1] asm_exc_invalid_op+0x16/0x20 [ 167.174682][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 167.181602][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 09 2a f8 0f 0b e9 03 ef ff ff e8 61 09 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 ae 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 167.202456][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 167.208565][ C1] RAX: ffffffff894f2b2f RBX: ffff88805f646268 RCX: ffff88801ff9bb80 [ 167.216982][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.225094][ C1] RBP: ffffc90000dd0b08 R08: ffff88801ff9bb80 R09: 0000000000000003 [ 167.233376][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880581ed800 [ 167.241713][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 167.249733][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 167.255874][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 167.262421][ C1] ? verify_lock_unused+0x140/0x140 [ 167.267946][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 167.273917][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 167.279838][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 167.285778][ C1] __iterate_interfaces+0x243/0x500 [ 167.291570][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 167.298140][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 167.305003][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 167.312189][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 167.317665][ C1] ? hw_scan_work+0xed0/0xed0 [ 167.322494][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 167.327904][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 167.333559][ C1] hrtimer_run_softirq+0x176/0x240 [ 167.338708][ C1] handle_softirqs+0x339/0x830 [ 167.343497][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 167.348550][ C1] ? do_softirq+0x210/0x210 [ 167.353385][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 167.358966][ C1] __irq_exit_rcu+0x13b/0x230 [ 167.363780][ C1] ? irq_exit_rcu+0x20/0x20 [ 167.368376][ C1] irq_exit_rcu+0x5/0x20 [ 167.372638][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 167.378541][ C1] [ 167.381544][ C1] [ 167.384520][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 167.390608][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 167.396788][ C1] Code: be ff ff ff ff e8 3c 62 68 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 e6 cd 71 08 e8 61 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 167.416743][ C1] RSP: 0018:ffffc9000307f708 EFLAGS: 00000282 [ 167.423043][ C1] RAX: 3e304cda3fa40200 RBX: ffff8880b903a340 RCX: 3e304cda3fa40200 [ 167.431290][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe40 [ 167.439400][ C1] RBP: 1ffff11017227613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 167.447381][ C1] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b913b088 [ 167.455394][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 167.463817][ C1] finish_task_switch+0x12f/0x640 [ 167.469056][ C1] ? __switch_to_asm+0x34/0x60 [ 167.474024][ C1] __schedule+0x11f7/0x43c0 [ 167.478814][ C1] ? release_firmware_map_entry+0x190/0x190 [ 167.484977][ C1] ? __mod_timer+0x91e/0xd00 [ 167.489898][ C1] schedule+0x11b/0x1e0 [ 167.494175][ C1] schedule_timeout+0x184/0x2d0 [ 167.499293][ C1] ? console_conditional_schedule+0x40/0x40 [ 167.505649][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 167.511908][ C1] ? update_process_times+0x200/0x200 [ 167.517461][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 167.522921][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 167.528350][ C1] snd_rawmidi_write+0x3b6/0xc10 [ 167.533350][ C1] ? snd_rawmidi_read+0xac0/0xac0 [ 167.538511][ C1] ? sched_dynamic_update+0x210/0x210 [ 167.543997][ C1] ? _copy_from_user+0x111/0x170 [ 167.548972][ C1] ? end_current_label_crit_section+0x14b/0x170 [ 167.555583][ C1] ? common_file_perm+0x171/0x1c0 [ 167.561440][ C1] ? fsnotify_perm+0x5d/0x560 [ 167.566931][ C1] ? security_file_permission+0x75/0xa0 [ 167.573292][ C1] do_iter_write+0x3e4/0x7b0 [ 167.579035][ C1] do_writev+0x281/0x480 [ 167.583660][ C1] ? do_readv+0x460/0x460 [ 167.588156][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 167.594749][ C1] ? lock_chain_count+0x20/0x20 [ 167.600112][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 167.605446][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 167.611234][ C1] do_syscall_64+0x4c/0xa0 [ 167.616192][ C1] ? clear_bhb_loop+0x30/0x80 [ 167.621187][ C1] ? clear_bhb_loop+0x30/0x80 [ 167.626213][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.632426][ C1] RIP: 0033:0x7f3e45676dd9 [ 167.636869][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.657176][ C1] RSP: 002b:00007f3e438af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 167.665708][ C1] RAX: ffffffffffffffda RBX: 00007f3e458f0090 RCX: 00007f3e45676dd9 [ 167.673821][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 167.681991][ C1] RBP: 00007f3e4570cd69 R08: 0000000000000000 R09: 0000000000000000 [ 167.690521][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.698825][ C1] R13: 00007f3e458f0128 R14: 00007f3e458f0090 R15: 00007ffda377f228 [ 167.707796][ C1] [ 167.711462][ C1] Kernel Offset: disabled [ 167.715937][ C1] Rebooting in 86400 seconds..