last executing test programs: 9.143642791s ago: executing program 4 (id=120): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf74", 0x92}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3", 0x89}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.016572923s ago: executing program 4 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r6}, 0x8) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 8.963912394s ago: executing program 0 (id=122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffeff, 0x6, 0x2, 0x3}, 0x3f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005) 8.36759671s ago: executing program 3 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc10, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 8.32944447s ago: executing program 0 (id=124): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x894b, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) 8.111570383s ago: executing program 2 (id=129): getpid() r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) 7.886047895s ago: executing program 3 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) 6.303841742s ago: executing program 2 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008841}, 0x840) 6.275187483s ago: executing program 2 (id=132): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000600)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6.238250123s ago: executing program 1 (id=133): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x9, 0x0, [{0x2, 0x3, 0x1, 0x0, @adapter={0x5, 0x3, 0x9, 0x7, 0x7}}, {0x200, 0x2, 0x1, 0x0, @sint={0xa0f1, 0x4}}, {0x5, 0x1, 0x0, 0x0, @irqchip={0x3, 0x1000}}, {0x7fff, 0x2, 0x1, 0x0, @sint={0x8, 0x64}}, {0x5, 0x0, 0x0, 0x0, @adapter={0x1, 0x100000001, 0xda3a, 0x9, 0x6}}, {0xfffffffe, 0x5, 0x0, 0x0, @msi={0x10001, 0x3e, 0x6, 0x1ff}}, {0x6, 0x4, 0x0, 0x0, @sint={0x0, 0x363}}, {0x6, 0x5, 0x1, 0x0, @msi={0x1, 0x1, 0x410, 0x9}}, {0x1, 0x3, 0x0, 0x0, @irqchip={0x8, 0xe54}}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x35, &(0x7f0000000300)}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 6.135915404s ago: executing program 1 (id=134): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000250, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) keyctl$clear(0x5, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='nicvf0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x3a) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) truncate(&(0x7f0000000100)='./file1\x00', 0xd8) epoll_create1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000340)=""/190}, 0x20) 5.627875879s ago: executing program 3 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffeff, 0x6, 0x2, 0x3}, 0x3f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005) 5.57621456s ago: executing program 4 (id=136): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) openat$ptmx(0xffffffffffffff9c, 0x0, 0x109280, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x2) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001080)={0x20000009}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000000c, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3], 0x2c}}, 0x40008) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r6, 0x0, 0x80, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1028}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'ipvlan1\x00'}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000, 0x4000}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.340475753s ago: executing program 3 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 5.248169154s ago: executing program 0 (id=138): socket$kcm(0x2, 0x7, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0x80184132, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.713301749s ago: executing program 1 (id=139): mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) 4.459817202s ago: executing program 4 (id=140): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) close(0x4) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.243839094s ago: executing program 1 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$namespace(0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000440)=0x7, 0x7) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYBLOB="f1e46cfecf22c1a85e127e75b1262ddf5236b744a0a0f9802be44445f4ff0c869e6e6a1e", @ANYRESOCT=r4, @ANYRES8=0xffffffffffffffff], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x20040040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a01010000fffffff7000000000008a1966862a68e67a03971537baadd09ffa552ac8bb9b86ca8f9c3a7da23c8aed6337a3ef8614aaacb644b7beec2a36c3a2c0cf60298672836d0fe398c63f9bfaf99c77de7a8f226503c0d218f4d38b26149a358b2aafec77e29b0efd643f4236110290dfe870118f5c02243cd6260506d63151327099d03000000c8b058e08d75a4e019bd5276fe716cdf0fee38d454ae0fbca751b862770b285a43924a01dc32f6fa64e39eb0b9bc398e23a4e609f15a142053051911380b8f324b01e8cc2fda5b9b33c16954a293bce01470c433e3485d2a9cd8c4605ea7f3"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000001070102"], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x8000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r9, @ANYRES8, @ANYBLOB="00df25020000006307adfee750fb31000000", @ANYRESOCT=r6], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.203369296s ago: executing program 2 (id=142): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r5, &(0x7f0000000380)="fad33075218151db00316f3a277f", 0xe, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r4, 0x1, 0xda, 0x6, @remote}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3.189749545s ago: executing program 1 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x90, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.131170976s ago: executing program 3 (id=144): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000001640)="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", 0xdb7}], 0x1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x1) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x14, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x0, 0x7, 0x1}}) r8 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000800100000000000040002000000000010000000000000002000040000001701000000000000de62"], 0x24, 0x3) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x6, &(0x7f0000000200)=0x3c, 0x4) 3.088457317s ago: executing program 0 (id=145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) 3.060424627s ago: executing program 4 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r6}, 0x8) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 2.81575404s ago: executing program 0 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffeff, 0x6, 0x2, 0x3}, 0x3f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005) 2.8154863s ago: executing program 1 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee16", 0x1e}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.012782338s ago: executing program 2 (id=149): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000250, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) keyctl$clear(0x5, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='nicvf0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x3a) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) truncate(&(0x7f0000000100)='./file1\x00', 0xd8) epoll_create1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000340)=""/190}, 0x20) 2.005338638s ago: executing program 3 (id=150): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x10201) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000100033062abd700000000000ffffffff000000000000000000000000e00000020000000000000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x118}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={'md5\x00'}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc044) signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) 1.949656639s ago: executing program 4 (id=151): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x90, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001540)='user\x00', &(0x7f0000001580)={'syz', 0x0}, &(0x7f00000015c0)='[:($]-@.*\x94&$(/^\x00', r0) add_key$user(&(0x7f0000001680), 0x0, &(0x7f0000001700)="dfbf724b37d8", 0x6, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x101000) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f00000001c0)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) io_uring_setup(0x7a76, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b424", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) 315.598126ms ago: executing program 2 (id=152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty, 0x2}, 0x1c) r2 = socket(0x28, 0x5, 0x0) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28, 0x20000811}, 0x4008005) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 0s ago: executing program 0 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 47.876355][ T4176] cgroup: Unknown subsys name 'net' [ 47.979320][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.200337][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.057816][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.073480][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.157273][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.177897][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.205431][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 51.234569][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.241862][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.249688][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.283309][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.290575][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.298422][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.335987][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.343249][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.350922][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.360107][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.380319][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.387536][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.395607][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.403880][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.473527][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.482034][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.489638][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.499129][ T4190] team0: Port device team_slave_0 added [ 51.505170][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.512395][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.520121][ T4189] device bridge_slave_0 entered promiscuous mode [ 51.527497][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.534874][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.542628][ T4197] device bridge_slave_0 entered promiscuous mode [ 51.551121][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.560318][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.567436][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.576187][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.584490][ T4190] team0: Port device team_slave_1 added [ 51.597280][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.604523][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.612810][ T4189] device bridge_slave_1 entered promiscuous mode [ 51.619751][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.626966][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.635237][ T4197] device bridge_slave_1 entered promiscuous mode [ 51.643152][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.680836][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.687841][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.713783][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.731984][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.738941][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.765379][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.788172][ T4188] team0: Port device team_slave_0 added [ 51.795679][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.814850][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.825416][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.835710][ T4188] team0: Port device team_slave_1 added [ 51.843036][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.854172][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.864867][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.912035][ T4197] team0: Port device team_slave_0 added [ 51.925142][ T4191] team0: Port device team_slave_0 added [ 51.931310][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.938287][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.964189][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.982043][ T4189] team0: Port device team_slave_0 added [ 51.989370][ T4197] team0: Port device team_slave_1 added [ 51.997042][ T4191] team0: Port device team_slave_1 added [ 52.003231][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.010257][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.036267][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.053046][ T4189] team0: Port device team_slave_1 added [ 52.062127][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.068962][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.120083][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.127124][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.153220][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.172678][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.179822][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.205940][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.217611][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.224866][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.250850][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.268595][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.275697][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.301906][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.313349][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.320298][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.346444][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.363690][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.370650][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.397130][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.444283][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.451472][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.458249][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.466101][ T4188] Cannot create hsr debugfs directory [ 52.522553][ T4189] device hsr_slave_0 entered promiscuous mode [ 52.529451][ T4189] device hsr_slave_1 entered promiscuous mode [ 52.537168][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.544903][ T4189] Cannot create hsr debugfs directory [ 52.559875][ T4197] device hsr_slave_0 entered promiscuous mode [ 52.566672][ T4197] device hsr_slave_1 entered promiscuous mode [ 52.573725][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.581517][ T4197] Cannot create hsr debugfs directory [ 52.629085][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.636144][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.646665][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.654675][ T4191] Cannot create hsr debugfs directory [ 52.782658][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 52.789164][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 52.796937][ T1325] Bluetooth: hci3: command 0x0409 tx timeout [ 52.812055][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 52.862241][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 52.876049][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.886251][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.901253][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.914168][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.969774][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.978511][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.994865][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.013462][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.026247][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.044529][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.057683][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.078186][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.140128][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.149086][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.169820][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.179903][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.201256][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.218232][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.256772][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.270251][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.278540][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.289454][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.297868][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.306082][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.315560][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.324624][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.333558][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.340702][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.356934][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.365507][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.378773][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.390485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.400192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.408954][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.416048][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.426765][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.442487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.457189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.468172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.476947][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.484051][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.492758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.503953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.512438][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.519476][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.527342][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.555233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.565019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.574130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.590689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.599333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.609474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.618197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.628131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.652673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.660986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.670001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.679108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.700972][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.717249][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.726049][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.736950][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.745979][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.754940][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.763595][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.771915][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.780155][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.792430][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.815290][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.826958][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.837500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.854195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.865518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.876835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.891470][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.933406][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.953501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.973388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.987726][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.994831][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.004098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.025414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.036448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.045712][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.052821][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.060863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.070918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.080400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.089931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.101469][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.114583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.124727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.147621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.155688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.165348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.174365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.181399][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.192053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.200499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.209415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.222719][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.242871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.250355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.258723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.268388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.277091][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.284181][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.292339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.300778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.309900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.318713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.333176][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.349368][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.360785][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.371541][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.382590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.390050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.398551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.407293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.417148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.426689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.435165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.450151][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.476968][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.490626][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.499295][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.513955][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.524851][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.533813][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.555725][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.567826][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.581180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.595926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.607050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.635771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.692569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.710004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.721140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.729268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.737096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.747703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.756444][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.763548][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.772063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.780780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.790424][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.797504][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.806562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.815686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.826217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.836547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.849153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.857761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.865573][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 54.872216][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 54.878500][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 54.878874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.884653][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 54.900115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.919602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.927452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.935290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.942196][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 54.947044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.957085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.967896][ T4188] device veth0_vlan entered promiscuous mode [ 54.977130][ T4190] device veth0_vlan entered promiscuous mode [ 54.989852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.000847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.010451][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.035531][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.055373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.068175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.077751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.086626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.095144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.106181][ T4188] device veth1_vlan entered promiscuous mode [ 55.115435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.124045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.132576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.143912][ T4190] device veth1_vlan entered promiscuous mode [ 55.157961][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.197314][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.205838][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.222445][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.230425][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.240369][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.263103][ T4190] device veth0_macvtap entered promiscuous mode [ 55.276961][ T4188] device veth0_macvtap entered promiscuous mode [ 55.293122][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.301207][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.326107][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.335416][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.348393][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.361239][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.371937][ T4190] device veth1_macvtap entered promiscuous mode [ 55.381985][ T4188] device veth1_macvtap entered promiscuous mode [ 55.420266][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.430133][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.445469][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.454610][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.464331][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.476277][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.489628][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.499015][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.510811][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.522024][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.539597][ T4189] device veth0_vlan entered promiscuous mode [ 55.548422][ T4197] device veth0_vlan entered promiscuous mode [ 55.556529][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.565327][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.574423][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.584691][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.593507][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.601555][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.613770][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.625879][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.635577][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.644555][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.653479][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.669366][ T4189] device veth1_vlan entered promiscuous mode [ 55.677048][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.685379][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.693215][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.701450][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.710212][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.720709][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.731591][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.742902][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.755997][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.777902][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.787526][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.797021][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.804890][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.815762][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.825521][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.834274][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.844428][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.875337][ T4197] device veth1_vlan entered promiscuous mode [ 55.960426][ T4197] device veth0_macvtap entered promiscuous mode [ 55.972469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.983210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.991103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.999395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.008811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.017621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.026283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.035058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.043879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.052929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.062582][ T4189] device veth0_macvtap entered promiscuous mode [ 56.072379][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.073520][ T4189] device veth1_macvtap entered promiscuous mode [ 56.080336][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.099171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.109529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.117764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.134215][ T4197] device veth1_macvtap entered promiscuous mode [ 56.167712][ T4191] device veth0_vlan entered promiscuous mode [ 56.178304][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.186936][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.196113][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.215389][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.225360][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.236998][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.237945][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.255405][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.266164][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.277800][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.288936][ T4191] device veth1_vlan entered promiscuous mode [ 56.310811][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.318986][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.329216][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.337255][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.346237][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.355134][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.365832][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.369973][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.375454][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.393935][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.403860][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.414367][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.424509][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.435165][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.450737][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.479238][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.487567][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.496970][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.507635][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.518229][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.529118][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.540350][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.550872][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.563655][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.575885][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.590400][ T4191] device veth0_macvtap entered promiscuous mode [ 56.598414][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.609458][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.619315][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.630482][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.640450][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.650900][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.662775][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.670301][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.678911][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.687918][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.697939][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.707951][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.723336][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.726057][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.732419][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.750585][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.752848][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.764524][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779566][ T4191] device veth1_macvtap entered promiscuous mode [ 56.801788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.809772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.819048][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.836951][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.848269][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.856051][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.861165][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.916944][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.938684][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.949384][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 56.952177][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 56.961490][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 56.962428][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 56.977590][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.988555][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.998753][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.009631][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.019687][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.022227][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 57.036242][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.061251][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.072635][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.083500][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.093835][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.105958][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.115988][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.126537][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.136874][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.147722][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.161272][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.186544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.195979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.207392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.216851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.231115][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.252493][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.261585][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.273767][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.314468][ T4276] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 57.344300][ T4276] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.022273][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 59.022503][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 59.032001][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 59.040292][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 59.101894][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 60.135258][ T4270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.186476][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.225789][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.287174][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.302021][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.321841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.343322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.376176][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.396529][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.438383][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.457272][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.478343][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.503057][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 60.650831][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.679846][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.699070][ T4219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.700254][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.715933][ T4219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.727763][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.738779][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.934023][ T4307] device vlan2 entered promiscuous mode [ 60.939610][ T4307] device bridge0 entered promiscuous mode [ 61.031574][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 61.246251][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.254179][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.552806][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.590163][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.818859][ T4310] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.828499][ T4310] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.839475][ T4310] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.848627][ T4310] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.953952][ T4318] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 61.990042][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.997783][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.067953][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.075118][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.083236][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.090324][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.136388][ T4318] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.147489][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18'. [ 62.224263][ T4318] syz.4.17 (4318) used greatest stack depth: 20112 bytes left [ 62.592268][ T4203] Bluetooth: hci0: Unknown advertising packet type: 0x16 [ 62.592357][ T4203] Bluetooth: hci0: Unknown advertising packet type: 0x1c [ 63.051798][ T4277] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.125156][ T144] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 63.484769][ T4277] usb 2-1: Using ep0 maxpacket: 16 [ 64.204242][ T4277] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 64.289514][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.296982][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.372146][ T4277] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 64.388428][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.396925][ T4277] usb 2-1: Product: syz [ 64.401097][ T4277] usb 2-1: Manufacturer: syz [ 64.411116][ T4277] usb 2-1: SerialNumber: syz [ 64.428307][ T4277] usb 2-1: config 0 descriptor?? [ 64.713252][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.745110][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.006278][ T4362] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.015383][ T4362] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.024629][ T4362] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.033869][ T4362] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.266098][ T4381] device syzkaller0 entered promiscuous mode [ 65.282641][ T4376] netlink: 'syz.4.33': attribute type 39 has an invalid length. [ 66.527054][ T2393] usb 2-1: USB disconnect, device number 2 [ 66.685584][ T4385] syz.0.37 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.615291][ T4407] autofs4:pid:4407:autofs_fill_super: called with bogus options [ 67.851839][ T2393] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.980151][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.987674][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.141714][ T2393] usb 2-1: Using ep0 maxpacket: 8 [ 68.261495][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.282306][ T2393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.284743][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.307874][ T2393] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.317432][ T2393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.336546][ T2393] usb 2-1: config 0 descriptor?? [ 68.577413][ T4412] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.586465][ T4412] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.595680][ T4412] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.610317][ T4412] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.619281][ T2393] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 68.750369][ T4426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 69.042486][ T4430] netlink: 'syz.2.49': attribute type 21 has an invalid length. [ 69.050186][ T4430] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.067960][ T4430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.075638][ T4430] IPv6: NLM_F_CREATE should be set when creating new route [ 69.082922][ T4430] IPv6: NLM_F_CREATE should be set when creating new route [ 69.090189][ T4430] IPv6: NLM_F_CREATE should be set when creating new route [ 69.173496][ T4430] Zero length message leads to an empty skb [ 69.838258][ T4447] netlink: 'syz.4.52': attribute type 39 has an invalid length. [ 70.423621][ T4455] No such timeout policy "syz0" [ 71.059634][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 71.103408][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 71.120406][ T4237] usb 2-1: USB disconnect, device number 3 [ 71.159296][ T4458] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.168439][ T4458] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.177191][ T4458] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.185919][ T4458] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.195652][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202189][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.328670][ T4458] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.881648][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.901657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.911646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.921647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.931643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.941642][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.951640][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.961641][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.971645][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.981643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.996463][ T4473] device syzkaller0 entered promiscuous mode [ 74.021110][ T4468] sched: RT throttling activated [ 74.137971][ T4489] netlink: 'syz.4.66': attribute type 39 has an invalid length. [ 74.177357][ T4493] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.416258][ T4506] input: syz1 as /devices/virtual/input/input5 [ 74.622244][ T2393] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.990698][ T2393] usb 5-1: Using ep0 maxpacket: 32 [ 76.251806][ T2393] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 76.267030][ T2393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.281373][ T2393] usb 5-1: config 0 descriptor?? [ 76.304693][ T1106] cfg80211: failed to load regulatory.db [ 76.335343][ T2393] as10x_usb: device has been detected [ 76.352840][ T2393] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 76.379249][ T2393] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 76.446937][ T2393] as10x_usb: error during firmware upload part1 [ 76.469820][ T2393] Registered device nBox DVB-T Dongle [ 76.548783][ T4524] netlink: 'syz.2.78': attribute type 39 has an invalid length. [ 76.639162][ T4423] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.864537][ T2393] usb 5-1: USB disconnect, device number 2 [ 76.923882][ T2393] Unregistered device nBox DVB-T Dongle [ 76.930180][ T2393] as10x_usb: device has been disconnected [ 77.751982][ T4423] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 77.771689][ T4423] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.791658][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 77.881709][ T4423] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 77.919666][ T4423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.678131][ T4423] usb 1-1: config 0 descriptor?? [ 79.266882][ T4423] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 79.275172][ T4423] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 79.291759][ T4423] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 79.674342][ T4423] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 79.682048][ T4423] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 79.705912][ T4423] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 79.799808][ T4423] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -90 [ 79.819766][ T4423] usb 1-1: USB disconnect, device number 2 [ 79.875551][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.85'. [ 80.001716][ T4548] device syzkaller0 entered promiscuous mode [ 80.281429][ T4563] fido_id[4563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 80.359748][ T4575] (syz.2.86,4575,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 80.368628][ T4575] (syz.2.86,4575,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 81.239704][ T4589] overlayfs: overlapping lowerdir path [ 82.056247][ T4590] program syz.4.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.101836][ T2393] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.341802][ T2393] usb 1-1: Using ep0 maxpacket: 32 [ 82.481962][ T2393] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 82.518097][ T4617] netlink: 'syz.3.99': attribute type 16 has an invalid length. [ 82.525896][ T4617] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.99'. [ 84.106520][ T2393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.197304][ T2393] usb 1-1: config 0 descriptor?? [ 84.231076][ T4619] device syzkaller0 entered promiscuous mode [ 84.309905][ T2393] usb 1-1: can't set config #0, error -71 [ 84.377510][ T2393] usb 1-1: USB disconnect, device number 3 [ 85.801808][ T4423] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.061977][ T4423] usb 5-1: Using ep0 maxpacket: 8 [ 86.184496][ T4423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.203090][ T4423] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.214316][ T4423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.245678][ T4423] usb 5-1: config 0 descriptor?? [ 86.554312][ T4423] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.564853][ T4360] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.572396][ T4424] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.510665][ T4424] usb 1-1: Using ep0 maxpacket: 8 [ 87.562187][ T4423] usb 5-1: USB disconnect, device number 3 [ 87.641996][ T4360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.661793][ T4360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.677301][ T4360] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 87.687242][ T4360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.753419][ T4360] usb 3-1: config 0 descriptor?? [ 89.454539][ T4701] device syzkaller0 entered promiscuous mode [ 89.951803][ T4424] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 89.961467][ T4424] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 89.969835][ T4424] usb 1-1: Product: syz [ 89.974804][ T4424] usb 1-1: Manufacturer: syz [ 89.995912][ T4424] usb 1-1: config 0 descriptor?? [ 90.013657][ T4424] usb 1-1: can't set config #0, error -71 [ 90.026282][ T4424] usb 1-1: USB disconnect, device number 4 [ 90.051950][ T4360] usbhid 3-1:0.0: can't add hid device: -71 [ 90.058160][ T4360] usbhid: probe of 3-1:0.0 failed with error -71 [ 90.087868][ T4712] netlink: 52 bytes leftover after parsing attributes in process `syz.1.126'. [ 90.099138][ T4360] usb 3-1: USB disconnect, device number 2 [ 90.124287][ T4714] netlink: 'syz.2.125': attribute type 39 has an invalid length. [ 92.081849][ T4424] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 92.111966][ T4738] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 92.602462][ T4700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.786080][ T4748] device syzkaller0 entered promiscuous mode [ 93.581661][ T4423] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.657364][ T4424] usb 1-1: device descriptor read/all, error -71 [ 94.211701][ T4423] usb 3-1: Using ep0 maxpacket: 8 [ 94.246610][ T4772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 95.128356][ T4769] netlink: 'syz.4.140': attribute type 39 has an invalid length. [ 95.142002][ T4423] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 95.149773][ T4423] usb 3-1: can't read configurations, error -71 [ 95.237529][ T4776] tipc: Started in network mode [ 95.272484][ T4776] tipc: Node identity 1a13cdaed4d1, cluster identity 4711 [ 95.272698][ T4776] tipc: Enabled bearer , priority 0 [ 95.437775][ T4775] tipc: Disabling bearer [ 96.468623][ T4817] fuse: Unknown parameter 'use00000000000000000000' [ 98.190274][ T4814] block device autoloading is deprecated and will be removed. [ 98.212528][ T4829] ======================================================= [ 98.212528][ T4829] WARNING: The mand mount option has been deprecated and [ 98.212528][ T4829] and is ignored by this kernel. Remove the mand [ 98.212528][ T4829] option from the mount to silence this warning. [ 98.212528][ T4829] ======================================================= [ 98.249494][ T4827] overlayfs: overlapping lowerdir path [ 98.354427][ T4825] program syz.4.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.574623][ C1] ------------[ cut here ]------------ [ 98.580368][ C1] WARNING: CPU: 1 PID: 4812 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 98.590411][ C1] Modules linked in: [ 98.594314][ C1] CPU: 1 PID: 4812 Comm: syz.3.150 Not tainted syzkaller #0 [ 98.601687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.611765][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 98.618077][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 14 2a f8 0f 0b e9 03 ef ff ff e8 61 14 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 a9 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 98.637692][ C1] RSP: 0000:ffffc90000dd08e0 EFLAGS: 00010246 [ 98.643757][ C1] RAX: ffffffff894f202f RBX: ffff88805fd2a268 RCX: ffff8880213f3b80 [ 98.651727][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.659686][ C1] RBP: ffffc90000dd0b08 R08: ffff8880213f3b80 R09: 0000000000000003 [ 98.667652][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88801fdf5400 [ 98.675628][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 98.683595][ C1] FS: 0000555593e72500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 98.692520][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.699086][ C1] CR2: 0000200000011000 CR3: 0000000024b58000 CR4: 00000000003506e0 [ 98.707057][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.715025][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.722991][ C1] Call Trace: [ 98.726256][ C1] [ 98.729086][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 98.735083][ C1] ? verify_lock_unused+0x140/0x140 [ 98.740287][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 98.746113][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 98.751552][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 98.757009][ C1] __iterate_interfaces+0x243/0x500 [ 98.762197][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 98.768414][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 98.774648][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 98.781681][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 98.786857][ C1] ? hw_scan_work+0xed0/0xed0 [ 98.791508][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 98.796712][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 98.801820][ C1] hrtimer_run_softirq+0x176/0x240 [ 98.806914][ C1] handle_softirqs+0x339/0x830 [ 98.811676][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 98.816505][ C1] ? do_softirq+0x210/0x210 [ 98.820983][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 98.826177][ C1] __irq_exit_rcu+0x13b/0x230 [ 98.830914][ C1] ? irq_exit_rcu+0x20/0x20 [ 98.835409][ C1] irq_exit_rcu+0x5/0x20 [ 98.839627][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 98.845250][ C1] [ 98.848176][ C1] [ 98.851088][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 98.857061][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 98.862858][ C1] Code: be ff ff ff ff e8 3c 52 68 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 e6 bd 71 08 e8 61 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 98.882461][ C1] RSP: 0000:ffffc9000307fc68 EFLAGS: 00000282 [ 98.888506][ C1] RAX: 304a48e6bf12f600 RBX: ffff8880b903a340 RCX: 304a48e6bf12f600 [ 98.896468][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 98.904433][ C1] RBP: 1ffff11017227613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 98.912398][ C1] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b913b088 [ 98.920380][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 98.928352][ C1] finish_task_switch+0x12f/0x640 [ 98.933372][ C1] ? __switch_to_asm+0x34/0x60 [ 98.938124][ C1] __schedule+0x11f7/0x43c0 [ 98.942633][ C1] ? release_firmware_map_entry+0x190/0x190 [ 98.948504][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 98.954504][ C1] ? lock_chain_count+0x20/0x20 [ 98.959348][ C1] schedule+0x11b/0x1e0 [ 98.963508][ C1] exit_to_user_mode_loop+0x47/0x130 [ 98.968775][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 98.974325][ C1] irqentry_exit_to_user_mode+0x5/0x30 [ 98.979769][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 98.985265][ C1] RIP: 0033:0x7f9eaf78c7b7 [ 98.989773][ C1] Code: 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 <89> c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 [ 99.009488][ C1] RSP: 002b:00007ffd4cfbb1d8 EFLAGS: 00000246 [ 99.015560][ C1] RAX: 0000000083e3000a RBX: ffffffff83e3000a RCX: ffffffff83e3000a [ 99.023528][ C1] RDX: ffffffff83e30c91 RSI: ffffffff83e3000a RDI: 0000000000000015 [ 99.031483][ C1] RBP: 0000000000000000 R08: 00007f9eafb3c000 R09: 00007f9eafb3e000 [ 99.039455][ C1] R10: 0000000083e3000e R11: 0000000000000015 R12: 00007f9eafb52038 [ 99.047429][ C1] R13: 000000000004bc84 R14: ffffffff83e30c91 R15: 00007f9eb0681720 [ 99.055406][ C1] ? _find_first_zero_bit+0xb1/0xf0 [ 99.060597][ C1] ? iter_xarray_populate_pages+0x32a/0xac0 [ 99.066502][ C1] ? iter_xarray_populate_pages+0x32a/0xac0 [ 99.072388][ C1] ? _find_first_zero_bit+0xb1/0xf0 [ 99.077570][ C1] ? iter_xarray_populate_pages+0x32a/0xac0 [ 99.083473][ C1] [ 99.086489][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.093764][ C1] CPU: 1 PID: 4812 Comm: syz.3.150 Not tainted syzkaller #0 [ 99.101020][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.111058][ C1] Call Trace: [ 99.114324][ C1] [ 99.117153][ C1] dump_stack_lvl+0x188/0x250 [ 99.121812][ C1] ? show_regs_print_info+0x20/0x20 [ 99.126988][ C1] ? load_image+0x400/0x400 [ 99.131469][ C1] panic+0x2e5/0x810 [ 99.135343][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 99.139832][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 99.145531][ C1] __warn+0x248/0x2b0 [ 99.149491][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 99.155189][ C1] report_bug+0x1b7/0x2e0 [ 99.159498][ C1] handle_bug+0x3a/0x70 [ 99.163628][ C1] exc_invalid_op+0x16/0x40 [ 99.168106][ C1] asm_exc_invalid_op+0x16/0x20 [ 99.172934][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 99.179244][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 14 2a f8 0f 0b e9 03 ef ff ff e8 61 14 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 a9 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 99.198826][ C1] RSP: 0000:ffffc90000dd08e0 EFLAGS: 00010246 [ 99.204871][ C1] RAX: ffffffff894f202f RBX: ffff88805fd2a268 RCX: ffff8880213f3b80 [ 99.212829][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.220778][ C1] RBP: ffffc90000dd0b08 R08: ffff8880213f3b80 R09: 0000000000000003 [ 99.228726][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88801fdf5400 [ 99.236677][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 99.244630][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 99.250356][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 99.256324][ C1] ? verify_lock_unused+0x140/0x140 [ 99.261512][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 99.267315][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 99.272758][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 99.278204][ C1] __iterate_interfaces+0x243/0x500 [ 99.283384][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 99.289615][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 99.295843][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 99.302847][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 99.308034][ C1] ? hw_scan_work+0xed0/0xed0 [ 99.312702][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 99.317897][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 99.322990][ C1] hrtimer_run_softirq+0x176/0x240 [ 99.328087][ C1] handle_softirqs+0x339/0x830 [ 99.332833][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 99.337665][ C1] ? do_softirq+0x210/0x210 [ 99.342160][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 99.347346][ C1] __irq_exit_rcu+0x13b/0x230 [ 99.352006][ C1] ? irq_exit_rcu+0x20/0x20 [ 99.356501][ C1] irq_exit_rcu+0x5/0x20 [ 99.360827][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 99.366452][ C1] [ 99.369364][ C1] [ 99.372278][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 99.378249][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 99.384045][ C1] Code: be ff ff ff ff e8 3c 52 68 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 e6 bd 71 08 e8 61 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 99.403637][ C1] RSP: 0000:ffffc9000307fc68 EFLAGS: 00000282 [ 99.409685][ C1] RAX: 304a48e6bf12f600 RBX: ffff8880b903a340 RCX: 304a48e6bf12f600 [ 99.417643][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 99.425597][ C1] RBP: 1ffff11017227613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 99.433552][ C1] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b913b088 [ 99.441503][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 99.449462][ C1] finish_task_switch+0x12f/0x640 [ 99.454468][ C1] ? __switch_to_asm+0x34/0x60 [ 99.459211][ C1] __schedule+0x11f7/0x43c0 [ 99.463705][ C1] ? release_firmware_map_entry+0x190/0x190 [ 99.469571][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 99.475527][ C1] ? lock_chain_count+0x20/0x20 [ 99.480355][ C1] schedule+0x11b/0x1e0 [ 99.484495][ C1] exit_to_user_mode_loop+0x47/0x130 [ 99.489759][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 99.495279][ C1] irqentry_exit_to_user_mode+0x5/0x30 [ 99.500714][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 99.506147][ C1] RIP: 0033:0x7f9eaf78c7b7 [ 99.510546][ C1] Code: 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 <89> c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 [ 99.530123][ C1] RSP: 002b:00007ffd4cfbb1d8 EFLAGS: 00000246 [ 99.536172][ C1] RAX: 0000000083e3000a RBX: ffffffff83e3000a RCX: ffffffff83e3000a [ 99.544129][ C1] RDX: ffffffff83e30c91 RSI: ffffffff83e3000a RDI: 0000000000000015 [ 99.552076][ C1] RBP: 0000000000000000 R08: 00007f9eafb3c000 R09: 00007f9eafb3e000 [ 99.560019][ C1] R10: 0000000083e3000e R11: 0000000000000015 R12: 00007f9eafb52038 [ 99.567964][ C1] R13: 000000000004bc84 R14: ffffffff83e30c91 R15: 00007f9eb0681720 [ 99.575922][ C1] ? _find_first_zero_bit+0xb1/0xf0 [ 99.581100][ C1] ? iter_xarray_populate_pages+0x32a/0xac0 [ 99.586968][ C1] ? iter_xarray_populate_pages+0x32a/0xac0 [ 99.592833][ C1] ? _find_first_zero_bit+0xb1/0xf0 [ 99.598002][ C1] ? iter_xarray_populate_pages+0x32a/0xac0 [ 99.603868][ C1] [ 99.606957][ C1] Kernel Offset: disabled [ 99.611417][ C1] Rebooting in 86400 seconds..