last executing test programs: 6.327397993s ago: executing program 1 (id=6): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6a000600001011ff00000000000000000000ffffac141429ff0200000000000000000000000000014e234e20001090"], 0x0) 6.095164384s ago: executing program 3 (id=4): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4352, 0x2, 0xfa11, 0xfffff479}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x4001) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/uevent_helper', 0x12fa82, 0xc4) sendfile(r6, r6, 0x0, 0x7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000200)=0x1c, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x91) 5.907978052s ago: executing program 1 (id=7): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x7ff, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4, @loopback, 0x7d}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.740754308s ago: executing program 1 (id=8): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fallocate(r2, 0x81, 0x7, 0x5) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xff9, 0x0, 0x4) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) io_uring_enter(r6, 0x51e3, 0xc872, 0x43, 0x0, 0x0) write(r0, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) syz_open_pts(r10, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) 5.575360274s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/62, 0x3e}, 0x5}], 0x1, 0x0, 0x0) 5.451873845s ago: executing program 4 (id=5): syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180001fe8000"/36], 0x0) 5.280072991s ago: executing program 2 (id=9): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b23, 0x0) 5.279537051s ago: executing program 4 (id=10): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"/284], 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 3.786691223s ago: executing program 0 (id=17): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) 3.665001374s ago: executing program 0 (id=18): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0xb75844323a2e8854, 0x0, '\x00', [@ra={0x5, 0x2, 0xc18}]}, 0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) ustat(0x1, 0x0) read$FUSE(r4, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) close(0xffffffffffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x320, 0x2000, 0x65, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x7}) 3.523892528s ago: executing program 3 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800018fbd000000fcffff7f00000000000000000c00020001000000040000000800010001"], 0x2c}, 0x1, 0xa00, 0x0, 0x24008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0xffffffffffffffbd}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x5}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20040850}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0xd01, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x36}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a00fd00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000100)={0x2, @win={{0xe36a, 0x5, 0xfffff9b6, 0x4}, 0x0, 0xffffffa5, 0x0, 0x10, 0x0, 0x60}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bf2e, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10090, 0x1b040}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'batadv_slave_1\x00', {0x2, 0x40, @empty}}) 3.364899362s ago: executing program 1 (id=20): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x5, 0xa159, 0x1004, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa0, 0x4d91, 0x80000001, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x3, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000004, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x4, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cd, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x62, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xc, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0x4, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000008, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 3.17359771s ago: executing program 1 (id=21): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000000ec5495e951829238eea30e20b222d00b051257a3098a70556255ae6f3f037359ea2449cc9ee825e53ede97ff0130702c34135d26a03988dceb57792e77031764fdc0", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000300000000000500040000000000"], 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x126382, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000003e0007010000000000000000047c17d2d800000c041a8008000a80ef0771c389c51c62d385ba144a9b944ad0ca9234782ec0364a17b27838a0be5ec2340391cb55ababfc54d54dc4aaf73b6a42e3c6bada3bed6abefcdc9c4655b9106536e975e1e1d788c4f4e75601f5efcac300f3126a79c7810daaced782dc7ceed58579088af77ec965af1c2b9cd3277b98744693e569ef21"], 0x20}}, 0x0) r5 = timerfd_create(0x7, 0x80000) timerfd_settime(r5, 0x2, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000480), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readv(r4, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x10, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) 3.07594504s ago: executing program 4 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_loaded', 0x901000, 0x1e2) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000004c0)={{r3}, 0x10000, 0xe2, 0x1}) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 2.590883686s ago: executing program 3 (id=23): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x180, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x800, 0x0, 0x4}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x61}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x180}}, 0x0) 2.54223814s ago: executing program 3 (id=24): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x598, &(0x7f0000000240)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r5, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2.207953452s ago: executing program 2 (id=25): pipe(&(0x7f0000000040)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close(0x4) write(r2, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2.035165148s ago: executing program 0 (id=26): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/139, 0x8b}], 0x1, 0x867, 0x5, 0x2) 1.864175584s ago: executing program 0 (id=27): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 1.675314022s ago: executing program 2 (id=28): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x24, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}]}, 0x24}}, 0x40010) 1.331982974s ago: executing program 2 (id=29): getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) keyctl$join(0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x0, 0x24e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 690.339455ms ago: executing program 0 (id=30): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$evdev(0x0, 0x4ee97ffd, 0x8e00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 430.03419ms ago: executing program 0 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 0s ago: executing program 1 (id=32): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0x17) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x7c, r4, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast}, 0x1fffffffffffffe, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 50.946561][ T4170] cgroup: Unknown subsys name 'net' [ 51.082055][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.559304][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.692380][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 54.782675][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.798100][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 54.843114][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 54.905858][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.927032][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.934099][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.942627][ T4182] device bridge_slave_0 entered promiscuous mode [ 54.955001][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.962457][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.970236][ T4182] device bridge_slave_1 entered promiscuous mode [ 55.026902][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.033966][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.042342][ T4185] device bridge_slave_0 entered promiscuous mode [ 55.073403][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.080761][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.088893][ T4185] device bridge_slave_1 entered promiscuous mode [ 55.097478][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.114297][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.121388][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.129539][ T4181] device bridge_slave_0 entered promiscuous mode [ 55.159788][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.169177][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.176238][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.184405][ T4181] device bridge_slave_1 entered promiscuous mode [ 55.206624][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.218260][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.246401][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.253705][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.262363][ T4193] device bridge_slave_0 entered promiscuous mode [ 55.269716][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.276770][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.284872][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.308765][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.318253][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.325317][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.333235][ T4193] device bridge_slave_1 entered promiscuous mode [ 55.340352][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.347448][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.355056][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.370853][ T4182] team0: Port device team_slave_0 added [ 55.379366][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.402502][ T4185] team0: Port device team_slave_0 added [ 55.409852][ T4182] team0: Port device team_slave_1 added [ 55.417491][ T4185] team0: Port device team_slave_1 added [ 55.460913][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.472240][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.496801][ T4181] team0: Port device team_slave_0 added [ 55.504212][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.515317][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.525186][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.532388][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.558338][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.570511][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.577492][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.603390][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.616029][ T4181] team0: Port device team_slave_1 added [ 55.642968][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.650215][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.676147][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.693318][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.700297][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.726530][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.781641][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.789365][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.815547][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.828388][ T4193] team0: Port device team_slave_0 added [ 55.834530][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.841818][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.868513][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.882154][ T4183] team0: Port device team_slave_0 added [ 55.891049][ T4182] device hsr_slave_0 entered promiscuous mode [ 55.898092][ T4182] device hsr_slave_1 entered promiscuous mode [ 55.912420][ T4193] team0: Port device team_slave_1 added [ 55.923312][ T4183] team0: Port device team_slave_1 added [ 55.979731][ T4181] device hsr_slave_0 entered promiscuous mode [ 55.986301][ T4181] device hsr_slave_1 entered promiscuous mode [ 55.992867][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.000716][ T4181] Cannot create hsr debugfs directory [ 56.008487][ T4185] device hsr_slave_0 entered promiscuous mode [ 56.015112][ T4185] device hsr_slave_1 entered promiscuous mode [ 56.021896][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.029578][ T4185] Cannot create hsr debugfs directory [ 56.035422][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.042782][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.068854][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.100770][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.107774][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.133815][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.145102][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.152518][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.178659][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.191939][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.199063][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.225035][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.342813][ T4193] device hsr_slave_0 entered promiscuous mode [ 56.349672][ T4193] device hsr_slave_1 entered promiscuous mode [ 56.356145][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.363848][ T4193] Cannot create hsr debugfs directory [ 56.396073][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.402797][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.409941][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.417635][ T4183] Cannot create hsr debugfs directory [ 56.427856][ T4172] Bluetooth: hci2: command 0x0409 tx timeout [ 56.427856][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 56.428330][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 56.434010][ T4172] Bluetooth: hci3: command 0x0409 tx timeout [ 56.440249][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 56.641797][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.652541][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.662498][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.671719][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.732017][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.741060][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.758118][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.779641][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.830053][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.844135][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.856112][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.869992][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.880099][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.904742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.916268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.943694][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.978188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.987555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.996186][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.003341][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.013998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.023285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.031786][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.038879][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.046475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.059784][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.082748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.093000][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.109742][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.134337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.143096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.152759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.162410][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.174860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.190439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.199793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.217714][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.226264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.235017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.258812][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.278579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.286956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.295241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.303740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.316280][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.327423][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.336445][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.346336][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.363609][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.412879][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.435221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.444110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.452685][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.459762][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.469795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.505796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.523719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.536326][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.543449][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.552996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.561587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.569731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.578420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.601291][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.610389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.620187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.638748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.646774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.655509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.665604][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.672704][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.681495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.705145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.715388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.724008][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.731104][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.740050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.749178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.757831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.768733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.776165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.792782][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.824216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.835191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.843465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.855765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.864185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.874367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.883502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.892913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.901514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.914175][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.929432][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.940796][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.962200][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.973605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.981891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.991934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.000906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.010665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.019365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.027066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.034708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.050785][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.061633][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.094367][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.115331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.125805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.135411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.143667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.181427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.191899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.201386][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.208514][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.217789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.226304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.235062][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.242136][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.251170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.260212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.269104][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.276151][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.283973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.293228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.301872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.310674][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.317788][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.325543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.335908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.345471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.365171][ T4182] device veth0_vlan entered promiscuous mode [ 58.375155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.401196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.418450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.446041][ T4182] device veth1_vlan entered promiscuous mode [ 58.492170][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.504054][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.514919][ T4247] Bluetooth: hci3: command 0x041b tx timeout [ 58.516377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.521992][ T4247] Bluetooth: hci1: command 0x041b tx timeout [ 58.528879][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 58.541358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.541470][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 58.550332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.554923][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 58.568546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.578016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.586316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.595791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.604355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.613975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.622647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.631422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.639742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.648320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.656493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.665000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.673951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.683010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.691375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.699986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.708864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.718676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.726587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.734380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.762387][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.799180][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.816760][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.825276][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.839282][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.846686][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.858437][ T4182] device veth0_macvtap entered promiscuous mode [ 58.866664][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.876139][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.895157][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.933815][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.945082][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.970128][ T4182] device veth1_macvtap entered promiscuous mode [ 59.023476][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.034508][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.044807][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.055209][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.064130][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.083791][ T4185] device veth0_vlan entered promiscuous mode [ 59.103333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.112026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.120791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.129321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.136743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.145263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.160491][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.173569][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.184156][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.191995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.201717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.210796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.218568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.225942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.234649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.253941][ T4185] device veth1_vlan entered promiscuous mode [ 59.275342][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.286357][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.296182][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.305025][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.330978][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.340267][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.350871][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.359494][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.371787][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.406700][ T4181] device veth0_vlan entered promiscuous mode [ 59.426078][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.439366][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.451941][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.461172][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.474131][ T4185] device veth0_macvtap entered promiscuous mode [ 59.492961][ T4183] device veth0_vlan entered promiscuous mode [ 59.502939][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.513626][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.524020][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.533406][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.541873][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.557370][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.565828][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.577842][ T4185] device veth1_macvtap entered promiscuous mode [ 59.594205][ T4181] device veth1_vlan entered promiscuous mode [ 59.631613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.641471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.649309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.658294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.669234][ T4183] device veth1_vlan entered promiscuous mode [ 59.686686][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.703713][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.715173][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.749366][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.759338][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.768586][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.776469][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.785444][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.796521][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.805270][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.815562][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.826209][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.837900][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.848553][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.857459][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.866158][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.878354][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.889532][ T4193] device veth0_vlan entered promiscuous mode [ 59.906128][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.914565][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.922664][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.932363][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.959263][ T4193] device veth1_vlan entered promiscuous mode [ 59.974332][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.981638][ T4183] device veth0_macvtap entered promiscuous mode [ 59.995056][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.011261][ T4181] device veth0_macvtap entered promiscuous mode [ 60.019904][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.028089][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.036466][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.055120][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.063659][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.072270][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.080812][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.102157][ T4183] device veth1_macvtap entered promiscuous mode [ 60.150660][ T4181] device veth1_macvtap entered promiscuous mode [ 60.161567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.171124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.180562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.189417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.206477][ T4193] device veth0_macvtap entered promiscuous mode [ 60.213281][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.215873][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.233198][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.236230][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.243813][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.261908][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.273801][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.292623][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.301542][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.309463][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.319611][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.328171][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.336605][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.345214][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.363178][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.373937][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.383907][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.394363][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.405351][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.414736][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.425329][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.438158][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.449598][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.459492][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.470041][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.481398][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.490752][ T4193] device veth1_macvtap entered promiscuous mode [ 60.514694][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.523137][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.532767][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.544057][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.553408][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.564543][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.579625][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.589395][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.589600][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 60.598758][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 60.609542][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 60.610411][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.616441][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 60.628829][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.636451][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 60.642481][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.658520][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.669658][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.679638][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.690183][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.701561][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.721671][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.732353][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.742523][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.754543][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.764886][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.775577][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.785677][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.796466][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.808212][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.834927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.853285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.871751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.881452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.892679][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.902268][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.915380][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.924519][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.934376][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.943138][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.955811][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.978568][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.007089][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.019149][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.030029][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.045821][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.056975][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.083986][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.097141][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.107773][ T4297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.142663][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.175144][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.197585][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.213528][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.230850][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.256614][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.265900][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.389970][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.490627][ T598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.490782][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.508911][ T598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.534581][ T598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.552630][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.553611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.566945][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.603881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.616264][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.616953][ T598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.642102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.667296][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.697120][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.736754][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.777366][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.833428][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.893583][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.932754][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.168044][ T4312] syz.1.8 (4312): drop_caches: 0 [ 62.308986][ T4329] Zero length message leads to an empty skb [ 62.371708][ T4330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10'. [ 62.477244][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 62.525509][ T4333] batman_adv: batadv0: Adding interface: vxlan0 [ 62.542239][ T4333] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.607297][ T4333] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 62.667968][ T4172] Bluetooth: hci3: command 0x0419 tx timeout [ 62.677417][ T4324] Bluetooth: hci2: command 0x0419 tx timeout [ 62.693659][ T4172] Bluetooth: hci1: command 0x0419 tx timeout [ 62.707095][ T4172] Bluetooth: hci4: command 0x0419 tx timeout [ 62.723534][ T4172] Bluetooth: hci0: command 0x0419 tx timeout [ 62.795309][ T4336] netlink: 180 bytes leftover after parsing attributes in process `syz.0.13'. [ 62.887239][ T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.967032][ T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.992162][ T4338] device syzkaller0 entered promiscuous mode [ 63.019554][ T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.044863][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.377077][ T13] usb 3-1: usb_control_msg returned -32 [ 63.383001][ T13] usbtmc 3-1:16.0: can't read capabilities [ 64.075026][ T4361] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 64.304151][ T4370] process 'syz.4.22' launched './file1' with NULL argv: empty string added [ 64.536998][ T4172] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.727024][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.967311][ T4172] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 64.983134][ T4172] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 65.007069][ T4172] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.026918][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.224423][ T4250] usb 3-1: USB disconnect, device number 2 [ 65.297370][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 65.311282][ T4369] udc-core: couldn't find an available UDC or it's busy [ 65.329934][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.352395][ T4369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.378152][ T21] usb 5-1: Product: syz [ 65.400263][ T21] usb 5-1: Manufacturer: syz [ 65.418587][ T21] usb 5-1: SerialNumber: syz [ 65.425662][ T26] audit: type=1326 audit(1768203428.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 65.477937][ T21] usb 5-1: config 0 descriptor?? [ 65.493401][ T26] audit: type=1326 audit(1768203428.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 65.522528][ T26] audit: type=1326 audit(1768203428.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 65.553053][ T26] audit: type=1326 audit(1768203428.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 65.601248][ T26] audit: type=1326 audit(1768203428.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 65.657727][ T26] audit: type=1326 audit(1768203428.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 65.710533][ T26] audit: type=1326 audit(1768203428.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 65.733053][ T26] audit: type=1326 audit(1768203428.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123e91749 code=0x7ffc0000 [ 66.182623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 66.598226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.667068][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.270867][ T13] usb 2-1: USB disconnect, device number 2 [ 67.616726][ C1] ------------[ cut here ]------------ [ 67.622391][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 67.632704][ C1] WARNING: CPU: 1 PID: 20 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 67.642522][ C1] Modules linked in: [ 67.646404][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 67.653685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.663742][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 67.670002][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 0c 19 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 50 4a 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 67.689616][ C1] RSP: 0018:ffffc90000da7608 EFLAGS: 00010246 [ 67.695669][ C1] RAX: 2a7fe821ad079800 RBX: 000000000000000c RCX: ffff88813fe60000 [ 67.703642][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 67.711616][ C1] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520001b4e25 [ 67.719596][ C1] R10: fffff520001b4e25 R11: 1ffff920001b4e24 R12: ffff8880620c5168 [ 67.727573][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 67.735535][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 67.744469][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.751056][ C1] CR2: 0000200000140030 CR3: 0000000074686000 CR4: 00000000003526e0 [ 67.759056][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.767037][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.774997][ C1] Call Trace: [ 67.778297][ C1] [ 67.781236][ C1] rate_control_send_low+0x194/0x790 [ 67.786529][ C1] rate_control_get_rate+0x207/0x5c0 [ 67.791836][ C1] __ieee80211_beacon_get+0x1512/0x1f80 [ 67.797400][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 67.803390][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 67.808872][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 67.814336][ C1] __iterate_interfaces+0x243/0x500 [ 67.819544][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 67.825782][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 67.832032][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 67.839067][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 67.844255][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 67.849456][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 67.855422][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 67.861427][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 67.866099][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 67.871218][ C1] hrtimer_run_softirq+0x176/0x240 [ 67.876328][ C1] handle_softirqs+0x328/0x820 [ 67.881100][ C1] ? run_ksoftirqd+0x98/0xf0 [ 67.885679][ C1] ? do_softirq+0x200/0x200 [ 67.890187][ C1] ? run_ksoftirqd+0x75/0xf0 [ 67.894763][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 67.899977][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 67.905252][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 67.910450][ C1] run_ksoftirqd+0x98/0xf0 [ 67.914857][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 67.920060][ C1] smpboot_thread_fn+0x4f6/0x970 [ 67.924995][ C1] kthread+0x436/0x520 [ 67.929071][ C1] ? cpu_report_death+0x180/0x180 [ 67.934081][ C1] ? kthread_blkcg+0xd0/0xd0 [ 67.938673][ C1] ret_from_fork+0x1f/0x30 [ 67.943103][ C1] [ 67.946111][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.953372][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 67.960639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.970695][ C1] Call Trace: [ 67.973962][ C1] [ 67.976890][ C1] dump_stack_lvl+0x168/0x230 [ 67.981555][ C1] ? show_regs_print_info+0x20/0x20 [ 67.986737][ C1] ? load_image+0x3b0/0x3b0 [ 67.991233][ C1] panic+0x2c9/0x7f0 [ 67.995113][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 67.999605][ C1] ? ret_from_fork+0x1f/0x30 [ 68.004179][ C1] ? __rate_control_send_low+0x630/0x880 [ 68.009797][ C1] __warn+0x248/0x2b0 [ 68.013765][ C1] ? __rate_control_send_low+0x630/0x880 [ 68.019384][ C1] report_bug+0x1b7/0x2e0 [ 68.023703][ C1] handle_bug+0x3a/0x70 [ 68.027846][ C1] exc_invalid_op+0x16/0x40 [ 68.032335][ C1] asm_exc_invalid_op+0x16/0x20 [ 68.037171][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 68.043398][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 0c 19 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 50 4a 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 68.063007][ C1] RSP: 0018:ffffc90000da7608 EFLAGS: 00010246 [ 68.069059][ C1] RAX: 2a7fe821ad079800 RBX: 000000000000000c RCX: ffff88813fe60000 [ 68.077018][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 68.084976][ C1] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520001b4e25 [ 68.092933][ C1] R10: fffff520001b4e25 R11: 1ffff920001b4e24 R12: ffff8880620c5168 [ 68.100887][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 68.108870][ C1] ? __rate_control_send_low+0x630/0x880 [ 68.114520][ C1] rate_control_send_low+0x194/0x790 [ 68.119796][ C1] rate_control_get_rate+0x207/0x5c0 [ 68.125071][ C1] __ieee80211_beacon_get+0x1512/0x1f80 [ 68.130607][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 68.136588][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 68.142036][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 68.147483][ C1] __iterate_interfaces+0x243/0x500 [ 68.152665][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 68.158890][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 68.165113][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 68.172122][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 68.177307][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 68.182489][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 68.188447][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 68.194412][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 68.199077][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 68.204179][ C1] hrtimer_run_softirq+0x176/0x240 [ 68.209278][ C1] handle_softirqs+0x328/0x820 [ 68.214029][ C1] ? run_ksoftirqd+0x98/0xf0 [ 68.218603][ C1] ? do_softirq+0x200/0x200 [ 68.223089][ C1] ? run_ksoftirqd+0x75/0xf0 [ 68.227658][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 68.232839][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 68.238111][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 68.243290][ C1] run_ksoftirqd+0x98/0xf0 [ 68.247690][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 68.252879][ C1] smpboot_thread_fn+0x4f6/0x970 [ 68.257807][ C1] kthread+0x436/0x520 [ 68.261857][ C1] ? cpu_report_death+0x180/0x180 [ 68.266868][ C1] ? kthread_blkcg+0xd0/0xd0 [ 68.271459][ C1] ret_from_fork+0x1f/0x30 [ 68.275866][ C1] [ 68.279172][ C1] Kernel Offset: disabled [ 68.283491][ C1] Rebooting in 86400 seconds..