last executing test programs: 17.199490888s ago: executing program 3 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r3) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.544210439s ago: executing program 3 (id=152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a310000008005000100070000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote, r7}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r8, &(0x7f0000000400), 0x12) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 7.328966213s ago: executing program 2 (id=182): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x434f3680a12cb3e3}, 0x4008800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.245317646s ago: executing program 3 (id=183): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000940)={r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x24004980}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r4, 0xfffffe00) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 7.078108121s ago: executing program 2 (id=184): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="320a0500230800001000128008000100767469000400029a080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) 6.728779612s ago: executing program 2 (id=187): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd4", 0x73}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507", 0x70}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x29, 0xd, 0x6, 0x5, 0x9, 0xe, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x8000000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x9, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.994836805s ago: executing program 4 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x73d6, 0x481, 0xfff}, {0x1, 0x0, 0x4, 0x5, 0xb}, 0x3, 0x3, 0xbf3}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9d19ad734573514e}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x14000050) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.920222478s ago: executing program 2 (id=192): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYBLOB="180800"/15, @ANYRES32], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 4.876783699s ago: executing program 4 (id=193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a310000008005000100070000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote, r7}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r8, &(0x7f0000000400), 0x12) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 4.865392569s ago: executing program 3 (id=194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 4.508226871s ago: executing program 0 (id=195): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x434f3680a12cb3e3}, 0x4008800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.828624542s ago: executing program 0 (id=197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000700)={0x11, 0x15, 0x0, 0x1, 0xaf, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900), 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.714220655s ago: executing program 4 (id=198): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYBLOB="180800"/15, @ANYBLOB, @ANYRES32], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 3.647151587s ago: executing program 1 (id=199): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="320a0500230800001000128008000100767469000400029a080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) 3.474120783s ago: executing program 1 (id=200): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r3) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.473830363s ago: executing program 2 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xa, 0x8b, 0x1d, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x9, 0xffff, 0xfff5, 0x9, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) 3.051851896s ago: executing program 3 (id=202): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd4", 0x73}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507", 0x70}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x29, 0xd, 0x6, 0x5, 0x9, 0xe, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x8000000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x9, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.747219305s ago: executing program 4 (id=203): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000007c0)=ANY=[], 0x0, 0x3}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 2.720214416s ago: executing program 1 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x73d6, 0x481, 0xfff}, {0x1, 0x0, 0x4, 0x5, 0xb}, 0x3, 0x3, 0xbf3}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9d19ad734573514e}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x14000050) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.672707347s ago: executing program 0 (id=205): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000940)={r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}]}, 0x1c}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x24004980}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r4, 0xfffffe00) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60010000090601020000000000000000020000050900020073797a32000000000900020073797a3000000000240007801800148014000240ff02000000000000000000000000000108000a40000000064c0008800c00078008000b400000009e100007800a0011000180000000100007800c001940000000000000000d100007800c001b4000000000000000000900020073797a30000000003c0008800c000780050015000b000000100007800a001100aaaaaaaaaaaa00000c000780060005404e240000100007800900130073797a32000000006c0008800c00078008000640000000050c00078008000840000000180c0007800500030008000000100007800c000180080001400a010101100007800b0a001100bbbbbbbbbbbb00000c001a001d00000018000780140017006772653000000000000000000000000008000940000000070500"], 0x160}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 1.662942439s ago: executing program 4 (id=206): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYBLOB="180800000000000000000000000000001811", @ANYBLOB, @ANYRES32], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.647036009s ago: executing program 0 (id=207): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x434f3680a12cb3e3}, 0x4008800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.646373569s ago: executing program 2 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a310000008005000100070000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote, r7}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r8, &(0x7f0000000400), 0x12) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 1.446190006s ago: executing program 0 (id=209): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000000327bd7000fbdbdf2500000000", @ANYBLOB="320a0500230800001000128008000100767469000400029a080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c0005006c010000000000000c000200ff", @ANYRES16=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES16=r3], 0x7c}}, 0x20000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, 0xffffffffffffffff, 0xaa0f4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 1.389346487s ago: executing program 1 (id=210): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="320a0500230800001000128008000100767469000400029a080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) 1.388890257s ago: executing program 0 (id=211): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYBLOB="180800"/15, @ANYRES32], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 574.877262ms ago: executing program 1 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000015c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4000084) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x5c, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3f, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @void, @void, @void, @void, @val={0x5, 0x4, {0x9, 0x7e, 0x7, "90"}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0xb0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x4c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={{{}, {}, @device_b}, @sp_mp_confirm={0xf, 0x2, {0x202, @default, {0x1, 0x3, [{0x4, 0x1}, {0x1, 0x1}, {0x18}]}, @val={0x72, 0x6}, @void}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 502.479704ms ago: executing program 3 (id=213): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYBLOB="180800"/15, @ANYBLOB, @ANYRES32], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 354.154589ms ago: executing program 1 (id=214): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r3) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=215): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 60.351585][ T4174] cgroup: Unknown subsys name 'net' [ 60.474176][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.955173][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.330143][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.406297][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.474519][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 63.519962][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.544803][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.554212][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.563032][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.576448][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.583828][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.591827][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.646824][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.675814][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.693028][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 63.715387][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.722659][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.730984][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.745154][ T4188] team0: Port device team_slave_0 added [ 63.756834][ T4188] team0: Port device team_slave_1 added [ 63.770496][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.777600][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.786604][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.813651][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.820921][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.829092][ T4195] device bridge_slave_0 entered promiscuous mode [ 63.870020][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.877196][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.885720][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.893836][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.901194][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.910104][ T4195] device bridge_slave_1 entered promiscuous mode [ 63.928663][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.935648][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.961895][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.973922][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.982037][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.990467][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.006471][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.022317][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.029401][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.055593][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.079461][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.102264][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.114692][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.140251][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.177223][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.184686][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.193120][ T4198] device bridge_slave_0 entered promiscuous mode [ 64.202537][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.228426][ T4192] team0: Port device team_slave_0 added [ 64.241476][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.249584][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.257518][ T4198] device bridge_slave_1 entered promiscuous mode [ 64.274191][ T4195] team0: Port device team_slave_0 added [ 64.284040][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.291567][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.301298][ T4192] team0: Port device team_slave_1 added [ 64.320681][ T4195] team0: Port device team_slave_1 added [ 64.361350][ T4193] team0: Port device team_slave_0 added [ 64.385598][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.392685][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.419144][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.432738][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.444886][ T4193] team0: Port device team_slave_1 added [ 64.451328][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.459061][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.485449][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.504543][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.512458][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.538551][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.551709][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.561371][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.568678][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.594682][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.640514][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.647525][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.674316][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.713582][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.721490][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.747766][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.767803][ T4198] team0: Port device team_slave_0 added [ 64.797276][ T4198] team0: Port device team_slave_1 added [ 64.829431][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.836484][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.843609][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.851813][ T4192] Cannot create hsr debugfs directory [ 64.868536][ T4195] device hsr_slave_0 entered promiscuous mode [ 64.875313][ T4195] device hsr_slave_1 entered promiscuous mode [ 64.882910][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.890857][ T4195] Cannot create hsr debugfs directory [ 64.938548][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 64.958025][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.965007][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.991038][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.012846][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.020809][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.027501][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.035223][ T4193] Cannot create hsr debugfs directory [ 65.046302][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.053725][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.079893][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.106207][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 65.112880][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 65.128055][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 65.177908][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 65.209940][ T4198] device hsr_slave_0 entered promiscuous mode [ 65.217269][ T4198] device hsr_slave_1 entered promiscuous mode [ 65.224475][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.232172][ T4198] Cannot create hsr debugfs directory [ 65.284351][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.324747][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.337334][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.371457][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.516125][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.538850][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.551166][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.572813][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.604652][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.614568][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.624813][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.644673][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.702405][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.715173][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.739730][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.763121][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.777265][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.804399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.815170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.845106][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.853997][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.874995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.885116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.895506][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.902804][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.915396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.924141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.933211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.942024][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.949534][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.963279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.971307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.979752][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.002902][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.018494][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.030444][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.040870][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.056038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.066139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.075014][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.082146][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.103512][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.112953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.121621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.132229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.142978][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.150134][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.159909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.170053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.186506][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.205433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.215698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.226167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.240496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.277560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.288954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.297977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.307415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.316781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.326612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.335230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.343139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.351849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.361926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.370440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.379407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.388226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.412773][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.430958][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.441960][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.451064][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.461268][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.471577][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.478754][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.487172][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.497262][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.506090][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.513218][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.553225][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.562118][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.571486][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.581105][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.591021][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.601866][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.612048][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.624224][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.633984][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.643981][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.669196][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.680917][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.696468][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.714748][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.724308][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.735029][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.744412][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.757467][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.791526][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.836453][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.850200][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.857391][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.874325][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.896061][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.927928][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.936707][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.955511][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.962675][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.972718][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.987034][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.009334][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.018153][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 67.029899][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.043334][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.050506][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.064608][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.074311][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.088689][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.095786][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.104584][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.113671][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.122987][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.130125][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.138996][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.147066][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.165698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.174964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.188331][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 67.208317][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 67.214664][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 67.233543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.253570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.268600][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 67.279593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.296380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.306482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.319762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.327306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.340443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.353923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.366357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.383098][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.400103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.409578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.417500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.426373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.436082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.445151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.453771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.464737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.499819][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.526242][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.545221][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.562684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.572990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.581168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.596062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.604972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.619244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.629878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.638556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.647018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.656451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.665629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.681110][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.692331][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.730443][ T4195] device veth0_vlan entered promiscuous mode [ 67.743884][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.776321][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.790103][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.804914][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.834600][ T4195] device veth1_vlan entered promiscuous mode [ 67.880260][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.889179][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.909839][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.923652][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.986999][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.014178][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.024220][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.043422][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.069801][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.089805][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.100974][ T4188] device veth0_vlan entered promiscuous mode [ 68.132664][ T4195] device veth0_macvtap entered promiscuous mode [ 68.150216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.159133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.166636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.174790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.184130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.192424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.202412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.214066][ T4188] device veth1_vlan entered promiscuous mode [ 68.236461][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.245057][ T4195] device veth1_macvtap entered promiscuous mode [ 68.261071][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.273898][ T4192] device veth0_vlan entered promiscuous mode [ 68.297363][ T4192] device veth1_vlan entered promiscuous mode [ 68.305664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.314305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.323031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.331689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.341340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.352055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.361377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.370639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.390751][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.429034][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.441582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.451196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.462022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.472704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.481759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.491535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.501318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.510593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.520042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.544365][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.554569][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.563867][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.574850][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.588604][ T4188] device veth0_macvtap entered promiscuous mode [ 68.598678][ T4192] device veth0_macvtap entered promiscuous mode [ 68.605988][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.614635][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.625354][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.634418][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.644815][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.654076][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.673414][ T4188] device veth1_macvtap entered promiscuous mode [ 68.684920][ T4192] device veth1_macvtap entered promiscuous mode [ 68.705810][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.715866][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.730294][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.760470][ T4193] device veth0_vlan entered promiscuous mode [ 68.772139][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.782057][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.792696][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.801426][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.811643][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.822958][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.846261][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.862662][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.873383][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.885640][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.907114][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.916252][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.925141][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.934177][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.943684][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.953248][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.970230][ T4198] device veth0_vlan entered promiscuous mode [ 68.981822][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.995878][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.007310][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.031263][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.045827][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.054917][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.063925][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.072814][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.081601][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095293][ T4193] device veth1_vlan entered promiscuous mode [ 69.101892][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 69.118343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.130831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.140696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.151640][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.163492][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.174385][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.185997][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.198595][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.231802][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.241252][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.250631][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.262297][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.272344][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 69.278487][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 69.284632][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.293708][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 69.300279][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.309383][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.334078][ T4198] device veth1_vlan entered promiscuous mode [ 69.348222][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 69.354052][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.370511][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.412364][ T4193] device veth0_macvtap entered promiscuous mode [ 69.422824][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.431310][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.440128][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.449027][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.457606][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.485225][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.495664][ T4193] device veth1_macvtap entered promiscuous mode [ 69.538713][ T4198] device veth0_macvtap entered promiscuous mode [ 69.552384][ T4198] device veth1_macvtap entered promiscuous mode [ 69.568867][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.577370][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.583449][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.597950][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.603457][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.642648][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.655495][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.665872][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.676861][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.690131][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.702763][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.714254][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.722871][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.731685][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.744281][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.753446][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.768587][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.776567][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.789075][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.811983][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.822720][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.833477][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.847877][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.858702][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.868632][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.879168][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.894170][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.912726][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.931724][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.943242][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.959707][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.971065][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.983881][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.996111][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.013423][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.022648][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.031782][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.045524][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.054489][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.067258][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.078582][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.088500][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.099165][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.109344][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.120234][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.130110][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.141795][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.154944][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.183612][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.194814][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.203288][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.219844][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.231578][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.248983][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.261408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.271516][ T4266] autofs4:pid:4266:autofs_fill_super: called with bogus options [ 70.280756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.289994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.334520][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351270][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.365152][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.371094][ T4266] loop2: detected capacity change from 0 to 4096 [ 70.385864][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.418646][ T897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.426514][ T897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.466550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.485623][ T897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.530594][ T897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.576664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.593041][ T4266] ntfs3: loop2: failed to convert "0080" to maciceland [ 70.654195][ T4266] ntfs3: loop2: failed to convert "0080" to maciceland [ 70.670391][ T4266] ntfs3: loop2: failed to convert name for inode 1e. [ 70.715108][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.735146][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.761788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.797100][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.821063][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.852083][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.871019][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.903512][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.923547][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.945981][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.962506][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.986862][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.180931][ T4273] loop1: detected capacity change from 0 to 32768 [ 71.196341][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 71.261715][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.274166][ T4273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4273) [ 71.288412][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.301109][ T4273] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 71.309995][ T4273] BTRFS info (device loop1): metadata ratio 0 [ 71.316098][ T4273] BTRFS info (device loop1): turning on sync discard [ 71.322849][ T4273] BTRFS info (device loop1): using free space tree [ 71.329410][ T4273] BTRFS info (device loop1): has skinny extents [ 71.344165][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 71.350296][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 71.356364][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 71.418212][ T4227] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.547700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 71.557684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 71.567681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.577680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.587679][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.597677][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.607684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.617681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.627694][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.637677][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.107872][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 73.358341][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 73.457910][ T4273] BTRFS info (device loop1): enabling ssd optimizations [ 73.478244][ T4227] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 73.486760][ T4227] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 73.553801][ T4227] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 73.586088][ T4227] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 73.619952][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.733592][ T4227] usb 5-1: string descriptor 0 read error: -71 [ 73.918100][ T4227] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 73.928015][ T4227] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 73.948987][ T4227] usb 5-1: config 0 descriptor?? [ 73.970787][ T4281] loop0: detected capacity change from 0 to 32768 [ 73.979287][ T4227] usb 5-1: can't set config #0, error -71 [ 74.003005][ T4281] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4281) [ 74.270737][ T26] audit: type=1800 audit(1781164099.373:2): pid=4315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 74.456539][ T4227] usb 5-1: USB disconnect, device number 2 [ 75.003380][ T4281] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 75.086677][ T4281] BTRFS info (device loop0): use zlib compression, level 3 [ 75.142571][ T4281] BTRFS info (device loop0): using free space tree [ 75.167996][ T4281] BTRFS info (device loop0): has skinny extents [ 75.367044][ T4281] BTRFS error (device loop0): open_ctree failed: -12 [ 75.462958][ T4341] loop4: detected capacity change from 0 to 64 [ 75.491212][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 75.967900][ T4340] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.065424][ T4360] loop4: detected capacity change from 0 to 128 [ 76.280363][ T4358] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 77.187929][ T4340] usb 1-1: Using ep0 maxpacket: 16 [ 77.257185][ T4360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.295404][ T4360] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.312155][ T4340] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 77.342999][ T4340] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.557974][ T4340] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.583096][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.607590][ T4340] usb 1-1: Product: syz [ 77.622634][ T4340] usb 1-1: Manufacturer: syz [ 77.627291][ T4340] usb 1-1: SerialNumber: syz [ 77.759479][ T4363] loop1: detected capacity change from 0 to 131072 [ 77.796872][ T4358] bridge0: port 3(veth3) entered blocking state [ 77.806077][ T4358] bridge0: port 3(veth3) entered disabled state [ 77.813732][ T4358] device veth3 entered promiscuous mode [ 77.881285][ T4365] bridge0: port 4(dummy0) entered blocking state [ 77.903138][ T4365] bridge0: port 4(dummy0) entered disabled state [ 77.915186][ T4365] device dummy0 entered promiscuous mode [ 77.921609][ T4371] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 77.930000][ T4371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15'. [ 77.979565][ T4371] bridge0: port 4(dummy0) entered blocking state [ 77.986210][ T4371] bridge0: port 4(dummy0) entered forwarding state [ 77.988707][ T4340] usb 1-1: 0:2 : does not exist [ 78.019532][ T4371] bridge0: port 4(dummy0) entered disabled state [ 78.038617][ T4363] F2FS-fs (loop1): Test dummy encryption mode enabled [ 78.060914][ T4363] F2FS-fs (loop1): invalid crc value [ 78.092513][ T4363] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 1 [ 78.099312][ T4363] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 78.141573][ T4340] usb 1-1: USB disconnect, device number 2 [ 78.279863][ T4371] syz.2.15 (4371) used greatest stack depth: 20752 bytes left [ 78.301851][ T4384] loop4: detected capacity change from 0 to 16 [ 78.340540][ T4384] ======================================================= [ 78.340540][ T4384] WARNING: The mand mount option has been deprecated and [ 78.340540][ T4384] and is ignored by this kernel. Remove the mand [ 78.340540][ T4384] option from the mount to silence this warning. [ 78.340540][ T4384] ======================================================= [ 78.464451][ T4384] erofs: (device loop4): mounted with root inode @ nid 36. [ 78.527592][ T4391] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 78.572715][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.787713][ T4338] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.837850][ T4338] usb 5-1: Using ep0 maxpacket: 16 [ 79.888629][ T4405] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.097916][ T4338] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.117732][ T4338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.169760][ T4420] loop0: detected capacity change from 0 to 32768 [ 82.041755][ T4422] sched: RT throttling activated [ 82.227998][ T4338] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.247708][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.255967][ T4338] usb 5-1: Product: syz [ 82.260462][ T4338] usb 5-1: Manufacturer: syz [ 82.267280][ T4420] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.309704][ T4338] usb 5-1: can't set config #1, error -71 [ 82.332522][ T4338] usb 5-1: USB disconnect, device number 3 [ 82.341642][ T4420] syz.0.28 (4420) used greatest stack depth: 20408 bytes left [ 82.446188][ T4439] netlink: 'syz.4.31': attribute type 3 has an invalid length. [ 82.644763][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 82.678619][ T4433] ODEBUG: Out of memory. ODEBUG disabled [ 83.425214][ T4442] device syzkaller0 entered promiscuous mode [ 83.467383][ T4449] tipc: Started in network mode [ 83.529690][ T4449] tipc: Node identity 6e1c117cea8e, cluster identity 4711 [ 83.567470][ T4449] tipc: Enabled bearer , priority 0 [ 83.592898][ T4449] tipc: Resetting bearer [ 83.637244][ T4450] device syzkaller0 entered promiscuous mode [ 83.653908][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 83.890821][ T4448] tipc: Resetting bearer [ 84.016541][ T4448] tipc: Disabling bearer [ 84.040660][ T4452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 84.260786][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 84.297166][ T4459] netlink: 'syz.0.37': attribute type 9 has an invalid length. [ 84.321611][ T4459] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.331692][ T4459] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.340706][ T4459] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.349487][ T4459] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.429400][ T4459] Zero length message leads to an empty skb [ 85.429820][ T4472] loop3: detected capacity change from 0 to 16 [ 85.444386][ T4471] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 85.507550][ T4472] erofs: (device loop3): mounted with root inode @ nid 36. [ 85.867677][ T4349] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.026162][ T4481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 86.138822][ T4349] usb 4-1: Using ep0 maxpacket: 16 [ 86.168616][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 86.267918][ T4349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.301973][ T4349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.668068][ T4349] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.869632][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.070088][ T4349] usb 4-1: Product: syz [ 87.150665][ T4349] usb 4-1: Manufacturer: syz [ 87.342996][ T4349] usb 4-1: SerialNumber: syz [ 87.354404][ T1346] cfg80211: failed to load regulatory.db [ 87.680498][ T4496] tipc: Enabled bearer , priority 0 [ 87.698527][ T4496] device syzkaller0 entered promiscuous mode [ 87.763582][ T4486] netlink: 196 bytes leftover after parsing attributes in process `syz.1.45'. [ 87.777936][ T4349] usb 4-1: 0:2 : does not exist [ 87.788282][ T4349] usb 4-1: unit 6 not found! [ 87.795193][ T4496] tipc: Resetting bearer [ 87.812088][ T4499] device syzkaller0 entered promiscuous mode [ 87.820987][ T4349] usb 4-1: USB disconnect, device number 2 [ 87.871424][ T4495] tipc: Resetting bearer [ 87.964073][ T4495] tipc: Disabling bearer [ 88.128742][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.485177][ T4504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.50'. [ 89.216197][ T4433] Set syz1 is full, maxelem 65536 reached [ 89.387216][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 89.406391][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54'. [ 89.577047][ T4519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 90.401229][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 90.485313][ T4526] tipc: Started in network mode [ 90.508022][ T4526] tipc: Node identity 827c17abb25d, cluster identity 4711 [ 90.552908][ T4526] tipc: Enabled bearer , priority 0 [ 90.606733][ T4526] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 91.047897][ T4531] tipc: Resetting bearer [ 91.681188][ T4525] tipc: Disabling bearer [ 91.774880][ T4229] tipc: Node number set to 807475115 [ 91.795219][ T4541] tipc: Started in network mode [ 91.820028][ T4541] tipc: Node identity eeee3f715b6f, cluster identity 4711 [ 91.827313][ T4541] tipc: Enabled bearer , priority 0 [ 91.867901][ T4543] device syzkaller0 entered promiscuous mode [ 91.925872][ T4546] device syzkaller0 entered promiscuous mode [ 91.951334][ T4544] device syzkaller0 entered promiscuous mode [ 91.975099][ T4541] tipc: Resetting bearer [ 92.142653][ T4540] tipc: Resetting bearer [ 92.165141][ T4540] tipc: Disabling bearer [ 92.951625][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 93.031876][ T4555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 93.135015][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.68'. [ 93.260440][ T4565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 93.275412][ T4559] netlink: 'syz.1.65': attribute type 3 has an invalid length. [ 93.488259][ T4563] netlink: 196 bytes leftover after parsing attributes in process `syz.2.69'. [ 94.463755][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 94.816742][ T4585] tipc: Enabled bearer , priority 0 [ 94.858504][ T4585] device syzkaller0 entered promiscuous mode [ 94.899394][ T4585] tipc: Resetting bearer [ 94.916368][ T4586] tipc: Enabled bearer , priority 0 [ 94.963250][ T4584] tipc: Resetting bearer [ 94.997090][ T4584] tipc: Disabling bearer [ 95.033803][ T4586] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 95.131025][ T4589] tipc: Resetting bearer [ 95.212532][ T4592] device syzkaller0 entered promiscuous mode [ 95.598945][ T4595] device syzkaller0 entered promiscuous mode [ 95.719580][ T4583] tipc: Disabling bearer [ 96.010648][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 96.053318][ T4601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.80'. [ 97.110198][ T4607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 98.091366][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.275475][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 98.526365][ T4625] tipc: Enabled bearer , priority 0 [ 98.578263][ T4624] device syzkaller0 entered promiscuous mode [ 98.587785][ T4627] device syzkaller0 entered promiscuous mode [ 98.682614][ T4623] netlink: 196 bytes leftover after parsing attributes in process `syz.3.86'. [ 98.695399][ T4627] tipc: Resetting bearer [ 98.720923][ T4621] tipc: Resetting bearer [ 98.756730][ T4621] tipc: Disabling bearer [ 98.929480][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 98.996200][ T4636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'. [ 99.476640][ T4640] device syzkaller0 entered promiscuous mode [ 100.239041][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 100.309874][ T4649] tipc: Enabled bearer , priority 0 [ 100.318197][ T4649] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.687523][ T4338] tipc: Node number set to 2224165244 [ 101.797959][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 102.977760][ T4556] Set syz1 is full, maxelem 65536 reached [ 103.056614][ T4672] tipc: Resetting bearer [ 103.092380][ T4675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 103.160541][ T4678] tipc: Started in network mode [ 103.175495][ T4678] tipc: Node identity 565871423a1c, cluster identity 4711 [ 103.183272][ T4678] tipc: Enabled bearer , priority 0 [ 103.192365][ T4648] tipc: Disabling bearer [ 103.201815][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 103.211208][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 103.269955][ T4681] tipc: Resetting bearer [ 103.316147][ T4674] device syzkaller0 entered promiscuous mode [ 103.327232][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 103.347470][ T4673] tipc: Resetting bearer [ 103.384225][ T4673] tipc: Disabling bearer [ 104.562523][ T4703] device syzkaller0 entered promiscuous mode [ 106.168544][ T4714] netlink: 'syz.4.112': attribute type 3 has an invalid length. [ 106.635665][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 106.670650][ T4719] device syzkaller0 entered promiscuous mode [ 106.681335][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 106.698429][ T4725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.115'. [ 106.964923][ T4735] tipc: Enabled bearer , priority 0 [ 107.001219][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 107.118025][ T4735] device syzkaller0 entered promiscuous mode [ 107.130401][ T4731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 107.191623][ T4734] netlink: 196 bytes leftover after parsing attributes in process `syz.4.116'. [ 107.548247][ T4744] tipc: Resetting bearer [ 107.834838][ T4733] tipc: Resetting bearer [ 107.887827][ T4733] tipc: Disabling bearer [ 109.237140][ T4758] netlink: 'syz.4.125': attribute type 3 has an invalid length. [ 109.276727][ T4764] tipc: Enabling of bearer rejected, failed to enable media [ 109.351043][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 109.378502][ T4766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 109.461886][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 109.556619][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 110.059598][ T4779] device syzkaller0 entered promiscuous mode [ 110.191222][ T4783] device syzkaller0 entered promiscuous mode [ 111.806469][ T4812] tipc: Enabled bearer , priority 0 [ 111.895358][ T4813] netlink: 'syz.4.139': attribute type 3 has an invalid length. [ 111.958503][ T4819] device syzkaller0 entered promiscuous mode [ 112.333383][ T4812] tipc: Resetting bearer [ 112.365162][ T4810] tipc: Resetting bearer [ 112.443819][ T4810] tipc: Disabling bearer [ 112.475547][ T4824] __nla_validate_parse: 1 callbacks suppressed [ 112.475562][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 112.476375][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 112.509212][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 112.644949][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 112.854831][ T4837] device syzkaller0 entered promiscuous mode [ 114.369138][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.150'. [ 114.573599][ T4860] device syzkaller0 entered promiscuous mode [ 114.630469][ T4869] netlink: 'syz.3.152': attribute type 3 has an invalid length. [ 114.924456][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 115.721416][ T4879] tipc: Enabled bearer , priority 0 [ 115.748491][ T4879] device syzkaller0 entered promiscuous mode [ 115.808662][ T4879] tipc: Resetting bearer [ 115.833929][ T4878] tipc: Resetting bearer [ 115.868649][ T4878] tipc: Disabling bearer [ 115.918072][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 115.947472][ T4883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.157'. [ 116.114951][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 117.517433][ T4881] netlink: 196 bytes leftover after parsing attributes in process `syz.4.155'. [ 117.547127][ T4900] tipc: Enabled bearer , priority 0 [ 117.561221][ T4900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.750193][ T4902] device syzkaller0 entered promiscuous mode [ 118.029454][ T4909] tipc: Resetting bearer [ 118.035553][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 118.213189][ T4899] tipc: Disabling bearer [ 119.226875][ T4916] device syzkaller0 entered promiscuous mode [ 119.254306][ T4918] tipc: Enabled bearer , priority 0 [ 119.407101][ T4918] device syzkaller0 entered promiscuous mode [ 119.421586][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 119.441293][ T4923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'. [ 119.479516][ T4918] tipc: Resetting bearer [ 119.513011][ T4917] tipc: Resetting bearer [ 119.537560][ T4917] tipc: Disabling bearer [ 119.608535][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 120.927441][ T4943] device syzkaller0 entered promiscuous mode [ 122.607914][ T4956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 122.714875][ T4866] Set syz1 is full, maxelem 65536 reached [ 122.754304][ T4961] tipc: Enabling of bearer rejected, failed to enable media [ 122.799032][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 122.829514][ T4963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 122.998680][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 123.115500][ T4977] device syzkaller0 entered promiscuous mode [ 124.054913][ T4969] netlink: 196 bytes leftover after parsing attributes in process `syz.3.183'. [ 124.470173][ T4997] tipc: Enabled bearer , priority 0 [ 124.811912][ T4995] tipc: Disabling bearer [ 125.784264][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 125.887163][ T5013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'. [ 126.120271][ T5011] netlink: 'syz.4.193': attribute type 3 has an invalid length. [ 126.453963][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 126.526742][ T5029] tipc: Enabling of bearer rejected, failed to enable media [ 126.562405][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'. [ 127.140288][ T5032] device syzkaller0 entered promiscuous mode [ 127.516059][ T5056] netlink: 196 bytes leftover after parsing attributes in process `syz.0.205'. [ 127.902327][ T5060] tipc: Enabled bearer , priority 0 [ 128.381142][ T5063] tipc: Disabling bearer [ 128.451701][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 128.483910][ T5067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 128.559995][ T5072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 128.889083][ T5074] netlink: 'syz.2.208': attribute type 3 has an invalid length. [ 129.051384][ T5076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 129.722885][ T5088] tipc: Enabling of bearer rejected, failed to enable media [ 130.408181][ C0] ------------[ cut here ]------------ [ 130.414001][ C0] WARNING: CPU: 0 PID: 5089 at net/mac80211/tx.c:4861 __ieee80211_beacon_get+0x179f/0x2000 [ 130.424137][ C0] Modules linked in: [ 130.428124][ C0] CPU: 0 PID: 5089 Comm: syz.3.213 Not tainted syzkaller #0 [ 130.435445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.445599][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 130.452037][ C0] Code: 29 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d 87 29 f8 0f 0b e9 03 ef ff ff e8 01 87 29 f8 <0f> 0b e9 76 f2 ff ff e8 25 b8 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 130.471720][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246 [ 130.477851][ C0] RAX: ffffffff894fc1ef RBX: ffff88805f9b6268 RCX: ffff88801dc7d940 [ 130.485853][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.493916][ C0] RBP: ffffc90000007b08 R08: ffff88801dc7d940 R09: 0000000000000003 [ 130.501959][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888077a99a00 [ 130.510038][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c [ 130.518075][ C0] FS: 00007ff92b4816c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 130.527040][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.533799][ C0] CR2: 000000110c38a0bc CR3: 00000000775a4000 CR4: 00000000003506f0 [ 130.541843][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.549896][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.557945][ C0] Call Trace: [ 130.561267][ C0] [ 130.564155][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 130.570234][ C0] ? verify_lock_unused+0x140/0x140 [ 130.575499][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 130.580643][ C0] ? verify_lock_unused+0x140/0x140 [ 130.585900][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 130.591466][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 130.596988][ C0] __iterate_interfaces+0x243/0x500 [ 130.602279][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 130.608737][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 130.615017][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 130.622161][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 130.627404][ C0] ? hw_scan_work+0xec0/0xec0 [ 130.632175][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 130.637434][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 130.642832][ C0] hrtimer_run_softirq+0x176/0x240 [ 130.648025][ C0] handle_softirqs+0x339/0x830 [ 130.652842][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 130.657789][ C0] ? do_softirq+0x210/0x210 [ 130.662336][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 130.667583][ C0] __irq_exit_rcu+0x13b/0x230 [ 130.672354][ C0] ? irq_exit_rcu+0x20/0x20 [ 130.676912][ C0] irq_exit_rcu+0x5/0x20 [ 130.681256][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 130.686939][ C0] [ 130.689964][ C0] [ 130.692932][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.699028][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 130.705573][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 4f 9d 8b f7 65 8b 05 70 86 3b 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 130.725280][ C0] RSP: 0018:ffffc90004a9f5c0 EFLAGS: 00000206 [ 130.731470][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 7636549fb16a8f00 [ 130.739618][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: 0000000000000001 [ 130.747668][ C0] RBP: ffffc90004a9f650 R08: ffffffff901d8177 R09: 1ffffffff203b02e [ 130.755679][ C0] R10: dffffc0000000000 R11: fffffbfff203b02f R12: dffffc0000000000 [ 130.763749][ C0] R13: 0000000000000000 R14: ffff888075749ec0 R15: 1ffff92000953eb8 [ 130.771831][ C0] ? _raw_spin_unlock+0x40/0x40 [ 130.776735][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 130.781865][ C0] __wake_up_sync_key+0x128/0x190 [ 130.786937][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 130.793046][ C0] ? sock_load_diag_module+0x130/0x130 [ 130.798585][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 130.803876][ C0] ? unix_unhash+0x10/0x10 [ 130.808393][ C0] ? mark_lock+0x94/0x320 [ 130.812767][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 130.817897][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 130.823321][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 130.828212][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 130.833290][ C0] ? import_iovec+0x6f/0xa0 [ 130.837883][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 130.842601][ C0] ? __sys_recvmsg+0x280/0x280 [ 130.847421][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 130.852550][ C0] ? __might_fault+0xb3/0x110 [ 130.857266][ C0] do_recvmmsg+0x382/0x850 [ 130.861766][ C0] ? __sys_recvmmsg+0x290/0x290 [ 130.866673][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 130.871777][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 130.876839][ C0] ? do_recvmmsg+0x850/0x850 [ 130.881501][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 130.886741][ C0] do_syscall_64+0x4c/0xa0 [ 130.891215][ C0] ? clear_bhb_loop+0x30/0x80 [ 130.895939][ C0] ? clear_bhb_loop+0x30/0x80 [ 130.900705][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.906630][ C0] RIP: 0033:0x7ff92d248e59 [ 130.911134][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.930810][ C0] RSP: 002b:00007ff92b481028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 130.939326][ C0] RAX: ffffffffffffffda RBX: 00007ff92d4c2090 RCX: 00007ff92d248e59 [ 130.947337][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 130.955411][ C0] RBP: 00007ff92d2ded6f R08: 0000000000000000 R09: 0000000000000000 [ 130.963491][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 130.971567][ C0] R13: 00007ff92d4c2128 R14: 00007ff92d4c2090 R15: 00007fff4f5e0178 [ 130.979624][ C0] [ 130.982691][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.990003][ C0] CPU: 0 PID: 5089 Comm: syz.3.213 Not tainted syzkaller #0 [ 130.997328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.007413][ C0] Call Trace: [ 131.010726][ C0] [ 131.013600][ C0] dump_stack_lvl+0x188/0x250 [ 131.018336][ C0] ? show_regs_print_info+0x20/0x20 [ 131.023569][ C0] ? load_image+0x400/0x400 [ 131.028121][ C0] panic+0x2e5/0x810 [ 131.032065][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 131.036617][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 131.042379][ C0] __warn+0x248/0x2b0 [ 131.046402][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 131.052170][ C0] report_bug+0x1b7/0x2e0 [ 131.056544][ C0] handle_bug+0x3a/0x70 [ 131.060733][ C0] exc_invalid_op+0x16/0x40 [ 131.065265][ C0] asm_exc_invalid_op+0x16/0x20 [ 131.070150][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 131.076523][ C0] Code: 29 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d 87 29 f8 0f 0b e9 03 ef ff ff e8 01 87 29 f8 <0f> 0b e9 76 f2 ff ff e8 25 b8 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 131.096168][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246 [ 131.102279][ C0] RAX: ffffffff894fc1ef RBX: ffff88805f9b6268 RCX: ffff88801dc7d940 [ 131.110371][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.118381][ C0] RBP: ffffc90000007b08 R08: ffff88801dc7d940 R09: 0000000000000003 [ 131.126408][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888077a99a00 [ 131.134441][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c [ 131.142457][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 131.148259][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 131.154280][ C0] ? verify_lock_unused+0x140/0x140 [ 131.159529][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 131.164591][ C0] ? verify_lock_unused+0x140/0x140 [ 131.169944][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 131.175452][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 131.180969][ C0] __iterate_interfaces+0x243/0x500 [ 131.186214][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.192501][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.198780][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 131.205843][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 131.211087][ C0] ? hw_scan_work+0xec0/0xec0 [ 131.215797][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 131.221053][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 131.226214][ C0] hrtimer_run_softirq+0x176/0x240 [ 131.231372][ C0] handle_softirqs+0x339/0x830 [ 131.236201][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 131.241093][ C0] ? do_softirq+0x210/0x210 [ 131.245635][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 131.250880][ C0] __irq_exit_rcu+0x13b/0x230 [ 131.255590][ C0] ? irq_exit_rcu+0x20/0x20 [ 131.260139][ C0] irq_exit_rcu+0x5/0x20 [ 131.264413][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 131.270089][ C0] [ 131.273045][ C0] [ 131.276009][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.282051][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 131.288591][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 4f 9d 8b f7 65 8b 05 70 86 3b 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 131.308241][ C0] RSP: 0018:ffffc90004a9f5c0 EFLAGS: 00000206 [ 131.314343][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 7636549fb16a8f00 [ 131.322336][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: 0000000000000001 [ 131.330336][ C0] RBP: ffffc90004a9f650 R08: ffffffff901d8177 R09: 1ffffffff203b02e [ 131.338334][ C0] R10: dffffc0000000000 R11: fffffbfff203b02f R12: dffffc0000000000 [ 131.346335][ C0] R13: 0000000000000000 R14: ffff888075749ec0 R15: 1ffff92000953eb8 [ 131.354350][ C0] ? _raw_spin_unlock+0x40/0x40 [ 131.359240][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 131.364308][ C0] __wake_up_sync_key+0x128/0x190 [ 131.369415][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 131.375438][ C0] ? sock_load_diag_module+0x130/0x130 [ 131.380945][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 131.386197][ C0] ? unix_unhash+0x10/0x10 [ 131.390660][ C0] ? mark_lock+0x94/0x320 [ 131.395035][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 131.400103][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 131.405522][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 131.410338][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 131.415415][ C0] ? import_iovec+0x6f/0xa0 [ 131.419963][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 131.424690][ C0] ? __sys_recvmsg+0x280/0x280 [ 131.429520][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 131.434602][ C0] ? __might_fault+0xb3/0x110 [ 131.439314][ C0] do_recvmmsg+0x382/0x850 [ 131.443938][ C0] ? __sys_recvmmsg+0x290/0x290 [ 131.448840][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 131.453913][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 131.459004][ C0] ? do_recvmmsg+0x850/0x850 [ 131.463643][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 131.468885][ C0] do_syscall_64+0x4c/0xa0 [ 131.473335][ C0] ? clear_bhb_loop+0x30/0x80 [ 131.478065][ C0] ? clear_bhb_loop+0x30/0x80 [ 131.482792][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.488723][ C0] RIP: 0033:0x7ff92d248e59 [ 131.493176][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.512816][ C0] RSP: 002b:00007ff92b481028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 131.521272][ C0] RAX: ffffffffffffffda RBX: 00007ff92d4c2090 RCX: 00007ff92d248e59 [ 131.529321][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 131.537415][ C0] RBP: 00007ff92d2ded6f R08: 0000000000000000 R09: 0000000000000000 [ 131.545421][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 131.553427][ C0] R13: 00007ff92d4c2128 R14: 00007ff92d4c2090 R15: 00007fff4f5e0178 [ 131.561450][ C0] [ 131.564818][ C0] Kernel Offset: disabled [ 131.569318][ C0] Rebooting in 86400 seconds..