last executing test programs: 4.58506384s ago: executing program 1 (id=254): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 4.447714301s ago: executing program 0 (id=257): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.283620344s ago: executing program 1 (id=259): socket$rds(0x15, 0x5, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, 0x0, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c044}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r7, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 4.240930778s ago: executing program 0 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x0, 0x7}) 4.112048098s ago: executing program 3 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64=r1], 0x1c}}, 0x0) 3.298939644s ago: executing program 3 (id=262): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x1ff) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x20000044) 3.242141888s ago: executing program 0 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xb, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.116772278s ago: executing program 2 (id=264): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff", @ANYRES16=r0], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0), 0x0) 3.09658266s ago: executing program 1 (id=265): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) socket$inet6(0xa, 0x3, 0xff) fspick(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) 2.936611523s ago: executing program 2 (id=266): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001380)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x200}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x4000000000000000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) 2.901990446s ago: executing program 3 (id=267): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 2.824570422s ago: executing program 2 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 2.7292445s ago: executing program 0 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.665900954s ago: executing program 2 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64=r1], 0x1c}}, 0x0) 2.59896562s ago: executing program 3 (id=271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x10000024, 0x80, 0xa, 0x2, 0x8, 0x51, 0x4, 0x8001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0a0018000300000d845d1fe622df0447d4b472e200e9b0a388846dadc21364498fa7cf54c0a4846f9c5450e1cec8a7ba110432b3ac6f0008e85a4410c5521c86d44aa1d7517fe998863a29fe29446c4916b007f6dbfd3ffd85217a52305c2f0a8696288fb6e321fbd7df6677245a5ecec1ed7c20430479f6ae8e3948d0b20254e07dd9967c7fdfd29044c956e44d438e799c5ac4a85656418aea895fe8b8db0d893f6dcab70faf0092575119ace48fe4b4e3205f1b532181c2aac0f4c87133667d3bf3d0420f8738108e6024f95fdb38165a1662147441cddb6ad3d97ed400e4b900"], 0x28}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.573063232s ago: executing program 0 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x0, 0x7}) 1.509905938s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x4, 0x3, 0x4, 0x0, 0x5, 0x8, 0x5, 0x802}}}}]}, 0x58}}, 0x4008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x80001) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.509732378s ago: executing program 2 (id=274): socket$rds(0x15, 0x5, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, 0x0, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c044}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r7, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 836.022702ms ago: executing program 2 (id=275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000980)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3f}, @iv={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x78, 0x4000}], 0x1, 0x4058004) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) 334.592332ms ago: executing program 1 (id=276): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001380)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x200}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x4000000000000000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) 291.887036ms ago: executing program 3 (id=277): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x1, 0xf}}}, 0x24}}, 0x20040054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) syz_io_uring_setup(0x241f, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="b6", 0x1, 0x20048004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x406f413, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r6) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010400000000020000000000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 117.20631ms ago: executing program 1 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 62.483355ms ago: executing program 3 (id=279): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 0s ago: executing program 1 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. syzkaller login: [ 67.067651][ T5774] cgroup: Unknown subsys name 'net' [ 67.231969][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.729548][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.297950][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.314173][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.321707][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.329872][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.353604][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.361069][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.387209][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.419183][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.427741][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.436793][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.444770][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.452928][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.461169][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.468639][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.483598][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.495530][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.503186][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.511724][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.528901][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.537097][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.546942][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.556333][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.564073][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.574397][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.959579][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 71.080047][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 71.095644][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 71.159724][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.167016][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.174644][ T5792] bridge_slave_0: entered allmulticast mode [ 71.181555][ T5792] bridge_slave_0: entered promiscuous mode [ 71.216305][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.223471][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.230668][ T5792] bridge_slave_1: entered allmulticast mode [ 71.237641][ T5792] bridge_slave_1: entered promiscuous mode [ 71.256062][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 71.317777][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.340421][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345502][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.347256][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.358194][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.367376][ T5784] bridge_slave_0: entered allmulticast mode [ 71.374379][ T5784] bridge_slave_0: entered promiscuous mode [ 71.397525][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.404783][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.411924][ T5790] bridge_slave_0: entered allmulticast mode [ 71.419785][ T5790] bridge_slave_0: entered promiscuous mode [ 71.428885][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.449350][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.456595][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.463752][ T5784] bridge_slave_1: entered allmulticast mode [ 71.471118][ T5784] bridge_slave_1: entered promiscuous mode [ 71.490124][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.497310][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.504740][ T5790] bridge_slave_1: entered allmulticast mode [ 71.511556][ T5790] bridge_slave_1: entered promiscuous mode [ 71.562925][ T5792] team0: Port device team_slave_0 added [ 71.571791][ T5792] team0: Port device team_slave_1 added [ 71.616601][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.629119][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.653026][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.712135][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.722233][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.730446][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.757233][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.772436][ T5784] team0: Port device team_slave_0 added [ 71.778737][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.786690][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.794018][ T5787] bridge_slave_0: entered allmulticast mode [ 71.800980][ T5787] bridge_slave_0: entered promiscuous mode [ 71.820263][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.827338][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.853345][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.866439][ T5784] team0: Port device team_slave_1 added [ 71.872567][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.880114][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.887290][ T5787] bridge_slave_1: entered allmulticast mode [ 71.894267][ T5787] bridge_slave_1: entered promiscuous mode [ 71.923621][ T5790] team0: Port device team_slave_0 added [ 71.956025][ T5790] team0: Port device team_slave_1 added [ 71.999772][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.021115][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.028322][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.054472][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.067655][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.101245][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.108370][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.135443][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.147578][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.154621][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.180556][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.207646][ T5787] team0: Port device team_slave_0 added [ 72.226112][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.233087][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.259539][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.279992][ T5787] team0: Port device team_slave_1 added [ 72.290050][ T5792] hsr_slave_0: entered promiscuous mode [ 72.296971][ T5792] hsr_slave_1: entered promiscuous mode [ 72.367320][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.374342][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.400329][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.432155][ T5784] hsr_slave_0: entered promiscuous mode [ 72.438483][ T5784] hsr_slave_1: entered promiscuous mode [ 72.445131][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.452932][ T5784] Cannot create hsr debugfs directory [ 72.455459][ T5794] Bluetooth: hci0: command tx timeout [ 72.459184][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.470931][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.497075][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.534780][ T5794] Bluetooth: hci2: command tx timeout [ 72.553574][ T5790] hsr_slave_0: entered promiscuous mode [ 72.560074][ T5790] hsr_slave_1: entered promiscuous mode [ 72.566487][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.575326][ T5790] Cannot create hsr debugfs directory [ 72.604047][ T5794] Bluetooth: hci3: command tx timeout [ 72.604068][ T5789] Bluetooth: hci1: command tx timeout [ 72.735995][ T5787] hsr_slave_0: entered promiscuous mode [ 72.742442][ T5787] hsr_slave_1: entered promiscuous mode [ 72.749367][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.757486][ T5787] Cannot create hsr debugfs directory [ 72.982754][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.995932][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.015890][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.025767][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.091736][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.114391][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.129755][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.149314][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.214085][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.225057][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.261855][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.272037][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.346293][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.358016][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.371828][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.382845][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.466228][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.488766][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.517223][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.542149][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.549404][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.575970][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.587716][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.594875][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.639871][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.647046][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.658755][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.665875][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.697359][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.737431][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.775215][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.782362][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.800850][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.823475][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.838842][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.846057][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.891649][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.898865][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.919230][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.926450][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.038612][ T5787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.052960][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.147944][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.277073][ T5784] veth0_vlan: entered promiscuous mode [ 74.328110][ T5784] veth1_vlan: entered promiscuous mode [ 74.416422][ T5784] veth0_macvtap: entered promiscuous mode [ 74.457187][ T5784] veth1_macvtap: entered promiscuous mode [ 74.487996][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.528632][ T5794] Bluetooth: hci0: command tx timeout [ 74.531225][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.551376][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.562714][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.584308][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.604273][ T5794] Bluetooth: hci2: command tx timeout [ 74.627805][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.636724][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.646475][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.656646][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.681519][ T5792] veth0_vlan: entered promiscuous mode [ 74.687363][ T5794] Bluetooth: hci1: command tx timeout [ 74.694925][ T5794] Bluetooth: hci3: command tx timeout [ 74.735708][ T5790] veth0_vlan: entered promiscuous mode [ 74.750936][ T5792] veth1_vlan: entered promiscuous mode [ 74.762337][ T5790] veth1_vlan: entered promiscuous mode [ 74.812318][ T5787] veth0_vlan: entered promiscuous mode [ 74.855834][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.866452][ T5787] veth1_vlan: entered promiscuous mode [ 74.877510][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.926392][ T5792] veth0_macvtap: entered promiscuous mode [ 74.953425][ T5792] veth1_macvtap: entered promiscuous mode [ 74.961757][ T5790] veth0_macvtap: entered promiscuous mode [ 74.972798][ T5790] veth1_macvtap: entered promiscuous mode [ 74.982769][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.999399][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.999876][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.014062][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.030104][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.041430][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.052429][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.063691][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.080396][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.090958][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.100998][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.111667][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.123230][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.138585][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.149779][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.160776][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.172363][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.185183][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.209576][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.218523][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.227659][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.236593][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.261971][ T5787] veth0_macvtap: entered promiscuous mode [ 75.277568][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.287769][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.297695][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.307178][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.331911][ T5787] veth1_macvtap: entered promiscuous mode [ 75.411459][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.428270][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.439849][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.460583][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.472053][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.486415][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.523494][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.550117][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.562718][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.571696][ T5870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 75.586717][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.599601][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.612927][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.627365][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.641708][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.694502][ T5872] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 75.697473][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.711249][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.720457][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.729410][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.766633][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.783665][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.783724][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.791794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.872378][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.883589][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.930404][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.951823][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.094122][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.119588][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.262718][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.280030][ T5883] tipc: Started in network mode [ 76.293522][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.302606][ T5883] tipc: Node identity ca7c94f0d24d, cluster identity 4711 [ 76.310838][ T5883] tipc: Enabled bearer , priority 0 [ 76.329858][ T5883] syzkaller0: entered promiscuous mode [ 76.348009][ T5883] syzkaller0: entered allmulticast mode [ 76.452880][ T5887] tipc: Resetting bearer [ 76.495590][ T5881] tipc: Resetting bearer [ 76.585030][ T5881] tipc: Disabling bearer [ 76.604929][ T5794] Bluetooth: hci0: command tx timeout [ 76.637458][ T5893] tipc: Started in network mode [ 76.642365][ T5893] tipc: Node identity 42bd84e84454, cluster identity 4711 [ 76.649955][ T5893] tipc: Enabled bearer , priority 0 [ 76.658164][ T5893] syzkaller0: entered promiscuous mode [ 76.666238][ T5893] syzkaller0: entered allmulticast mode [ 76.687712][ T5794] Bluetooth: hci2: command tx timeout [ 76.745700][ T5893] tipc: Resetting bearer [ 76.765022][ T5794] Bluetooth: hci3: command tx timeout [ 76.767190][ T5789] Bluetooth: hci1: command tx timeout [ 76.807425][ T5892] tipc: Resetting bearer [ 76.808254][ T5900] Zero length message leads to an empty skb [ 76.918790][ T5892] tipc: Disabling bearer [ 77.583443][ T5928] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 77.601196][ T5928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 77.658750][ T5928] team0: Port device geneve0 added [ 77.697412][ T5933] tipc: Started in network mode [ 77.702316][ T5933] tipc: Node identity 124b88fc8691, cluster identity 4711 [ 77.732051][ T5933] tipc: Enabled bearer , priority 0 [ 77.751999][ T5929] syzkaller0: entered promiscuous mode [ 77.761552][ T5929] syzkaller0: entered allmulticast mode [ 77.809667][ T5929] tipc: Resetting bearer [ 77.841325][ T5926] tipc: Resetting bearer [ 77.910182][ T5926] tipc: Disabling bearer [ 78.259541][ T5954] tipc: Started in network mode [ 78.284313][ T5954] tipc: Node identity a61f0b482d0d, cluster identity 4711 [ 78.300407][ T5954] tipc: Enabled bearer , priority 0 [ 78.383022][ T5954] syzkaller0: entered promiscuous mode [ 78.407126][ T5954] syzkaller0: entered allmulticast mode [ 78.426569][ T5954] tipc: Resetting bearer [ 78.454534][ T5952] tipc: Resetting bearer [ 78.511482][ T5952] tipc: Disabling bearer [ 78.702014][ T5789] Bluetooth: hci0: command tx timeout [ 78.774192][ T5789] Bluetooth: hci2: command tx timeout [ 78.843890][ T5789] Bluetooth: hci1: command tx timeout [ 78.844852][ T5794] Bluetooth: hci3: command tx timeout [ 79.242351][ T5991] tipc: Enabled bearer , priority 0 [ 79.272717][ T5991] syzkaller0: entered promiscuous mode [ 79.296260][ T5991] syzkaller0: entered allmulticast mode [ 79.364753][ T5991] tipc: Resetting bearer [ 79.384238][ T5990] tipc: Resetting bearer [ 79.454750][ T5990] tipc: Disabling bearer [ 79.681788][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.988705][ T6022] netlink: 'syz.3.68': attribute type 13 has an invalid length. [ 80.146596][ T6030] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 80.847367][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.855896][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.518838][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.583540][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.237128][ T6022] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.249258][ T6022] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.259284][ T6022] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.268465][ T6022] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.399252][ T6037] tipc: Enabling of bearer rejected, failed to enable media [ 82.511113][ T6090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 83.031258][ T6111] tipc: Enabled bearer , priority 0 [ 83.055781][ T6111] syzkaller0: entered promiscuous mode [ 83.075882][ T6111] syzkaller0: entered allmulticast mode [ 83.117346][ T6115] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 83.120053][ T6111] tipc: Resetting bearer [ 83.154039][ T6108] tipc: Resetting bearer [ 83.176804][ T6108] tipc: Disabling bearer [ 83.221271][ T6117] tipc: Enabled bearer , priority 0 [ 83.234518][ T6117] syzkaller0: entered promiscuous mode [ 83.240030][ T6117] syzkaller0: entered allmulticast mode [ 83.273396][ T6117] tipc: Resetting bearer [ 83.295553][ T6116] tipc: Resetting bearer [ 83.351762][ T6116] tipc: Disabling bearer [ 83.828044][ T6141] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 84.831023][ T6188] tipc: Enabled bearer , priority 0 [ 84.916794][ T6191] netlink: 204 bytes leftover after parsing attributes in process `syz.3.127'. [ 84.926577][ T6188] syzkaller0: entered promiscuous mode [ 84.942208][ T6188] syzkaller0: entered allmulticast mode [ 84.973452][ T6188] tipc: Resetting bearer [ 84.993034][ T6187] tipc: Resetting bearer [ 85.061407][ T6187] tipc: Disabling bearer [ 86.024573][ T6233] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 86.442096][ T6252] tipc: Enabled bearer , priority 0 [ 86.466542][ T6252] syzkaller0: entered promiscuous mode [ 86.480827][ T6252] syzkaller0: entered allmulticast mode [ 86.521568][ T6252] tipc: Resetting bearer [ 86.554128][ T6250] tipc: Resetting bearer [ 86.592192][ T6250] tipc: Disabling bearer [ 86.697154][ T23] cfg80211: failed to load regulatory.db [ 86.794470][ T6265] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 87.183292][ T6283] tipc: Enabled bearer , priority 0 [ 87.211812][ T6283] syzkaller0: entered promiscuous mode [ 87.217890][ T6283] syzkaller0: entered allmulticast mode [ 87.227508][ T6283] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.322606][ T6288] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 87.600487][ T6297] syzkaller1: entered promiscuous mode [ 87.617013][ T6297] syzkaller1: entered allmulticast mode [ 87.874261][ T6304] tipc: Resetting bearer [ 88.061663][ T6282] tipc: Resetting bearer [ 88.209580][ T6282] tipc: Disabling bearer [ 88.235186][ T23] tipc: Node number set to 2497349884 [ 88.374516][ T6321] tipc: Enabled bearer , priority 0 [ 88.394065][ T6321] syzkaller0: entered promiscuous mode [ 88.399657][ T6321] syzkaller0: entered allmulticast mode [ 88.442446][ T6321] tipc: Resetting bearer [ 88.469193][ T6320] tipc: Resetting bearer [ 88.586755][ T6320] tipc: Disabling bearer [ 89.310220][ T6359] tipc: Enabled bearer , priority 0 [ 89.398198][ T6359] syzkaller0: entered promiscuous mode [ 89.417662][ T6359] syzkaller0: entered allmulticast mode [ 89.485722][ T6368] tipc: Resetting bearer [ 89.555513][ T6358] tipc: Resetting bearer [ 89.595223][ T6358] tipc: Disabling bearer [ 89.633499][ T6376] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 89.641854][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.211'. [ 89.676993][ T6376] team0: Port device geneve0 added [ 89.713637][ T6377] tipc: Enabled bearer , priority 0 [ 89.737615][ T6374] syzkaller0: entered promiscuous mode [ 89.752520][ T6374] syzkaller0: entered allmulticast mode [ 89.773020][ T6374] tipc: Resetting bearer [ 89.799888][ T6371] tipc: Resetting bearer [ 89.873552][ T6371] tipc: Disabling bearer [ 90.178352][ T6395] netlink: 56 bytes leftover after parsing attributes in process `syz.3.219'. [ 91.457054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.074256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.144935][ T6420] tipc: Enabled bearer , priority 0 [ 92.178641][ T6420] syzkaller0: entered promiscuous mode [ 92.204151][ T6420] syzkaller0: entered allmulticast mode [ 92.244735][ T6420] tipc: Resetting bearer [ 92.276559][ T6417] tipc: Resetting bearer [ 92.322902][ T6417] tipc: Disabling bearer [ 92.890762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.504915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.856670][ T6441] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 93.948200][ T6441] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.034212][ T6457] tipc: Enabled bearer , priority 0 [ 94.053006][ T6457] syzkaller0: entered promiscuous mode [ 94.072051][ T6457] syzkaller0: entered allmulticast mode [ 94.129251][ T6458] netlink: 56 bytes leftover after parsing attributes in process `syz.2.241'. [ 94.147929][ T6456] tipc: Resetting bearer [ 94.227556][ T6456] tipc: Disabling bearer [ 94.733973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.041009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.143408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.348062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.356549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.952906][ T6468] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 95.960789][ T6468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.248'. [ 96.065026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.195802][ T6474] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 97.222131][ T6479] tipc: Enabled bearer , priority 0 [ 97.242948][ T6479] syzkaller0: entered promiscuous mode [ 97.259944][ T6479] syzkaller0: entered allmulticast mode [ 97.297174][ T6479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.581310][ T6484] tipc: Enabled bearer , priority 0 [ 97.592114][ T6484] syzkaller0: entered promiscuous mode [ 97.597761][ T6484] syzkaller0: entered allmulticast mode [ 97.618104][ T6483] tipc: Resetting bearer [ 97.674739][ T6483] tipc: Disabling bearer [ 97.925909][ T6491] tipc: Resetting bearer [ 98.009550][ T6495] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 98.018581][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.257'. [ 98.192498][ T6478] tipc: Resetting bearer [ 98.394019][ T967] tipc: Node number set to 405902576 [ 98.468295][ T6478] tipc: Disabling bearer [ 99.215136][ T6511] tipc: Enabled bearer , priority 0 [ 99.231373][ T6511] syzkaller0: entered promiscuous mode [ 99.237157][ T6511] syzkaller0: entered allmulticast mode [ 99.320429][ T6510] tipc: Resetting bearer [ 99.432751][ T6510] tipc: Disabling bearer [ 101.476270][ T6541] tipc: Enabled bearer , priority 0 [ 101.499126][ T6541] syzkaller0: entered promiscuous mode [ 101.508812][ T6541] syzkaller0: entered allmulticast mode [ 101.605440][ T6541] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.644188][ T6536] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 101.679860][ T6536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.181044][ T6550] netlink: 56 bytes leftover after parsing attributes in process `syz.3.277'. [ 102.232500][ T6542] tipc: Resetting bearer [ 102.415559][ T12] ------------[ cut here ]------------ [ 102.421371][ T12] WARNING: CPU: 1 PID: 12 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.432288][ T12] Modules linked in: [ 102.436284][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 102.443676][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.454015][ T12] Workqueue: phy6 ieee80211_csa_finalize_work [ 102.460139][ T12] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.467632][ T12] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c [ 102.487337][ T12] RSP: 0018:ffffc900001179c0 EFLAGS: 00010293 [ 102.493447][ T12] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88801be45a00 [ 102.501772][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.510042][ T12] RBP: dffffc0000000000 R08: ffff88805ed555af R09: 1ffff1100bdaaab5 [ 102.519110][ C1] ------------[ cut here ]------------ [ 102.519192][ C1] WARNING: CPU: 1 PID: 12 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 102.519234][ C1] Modules linked in: [ 102.519249][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 102.519268][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.519281][ C1] Workqueue: phy6 ieee80211_csa_finalize_work [ 102.519313][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 102.519343][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 102.519359][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 102.519378][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88801be45a00 [ 102.519412][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.519425][ C1] RBP: 0000000000000000 R08: ffff88801be45a00 R09: 0000000000000003 [ 102.519451][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ed563c0 [ 102.519465][ C1] R13: dffffc0000000000 R14: ffff88805ed568b0 R15: ffff8880252fc424 [ 102.519481][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 102.519499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.519514][ C1] CR2: 000000110c3e1f7b CR3: 000000001eb1f000 CR4: 00000000003506e0 [ 102.519533][ C1] Call Trace: [ 102.519542][ C1] [ 102.519563][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 102.519604][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 102.519640][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 102.519684][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 102.519718][ C1] __iterate_interfaces+0x243/0x500 [ 102.519742][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 102.519767][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.519795][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 102.519820][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.519849][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 102.519876][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 102.519905][ C1] ? hw_scan_work+0xf40/0xf40 [ 102.519936][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 102.519957][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 102.519991][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 102.520019][ C1] handle_softirqs+0x280/0x820 [ 102.520042][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 102.520068][ C1] ? do_softirq+0x180/0x180 [ 102.520093][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 102.520124][ C1] __irq_exit_rcu+0xc7/0x190 [ 102.520144][ C1] ? irq_exit_rcu+0x20/0x20 [ 102.520170][ C1] irq_exit_rcu+0x9/0x20 [ 102.520188][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 102.520219][ C1] [ 102.520227][ C1] [ 102.520236][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.520257][ C1] RIP: 0010:console_flush_all+0x889/0xd00 [ 102.520283][ C1] Code: ed 01 00 00 e8 48 2a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 39 2a 1b 00 eb 06 e8 32 2a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 102.520301][ C1] RSP: 0018:ffffc90000117340 EFLAGS: 00000293 [ 102.520323][ C1] RAX: ffffffff816a656e RBX: ffffc900001174df RCX: ffff88801be45a00 [ 102.520340][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.520353][ C1] RBP: ffffc900001174b0 R08: ffffffff90da5507 R09: 1ffffffff21b4aa0 [ 102.520370][ C1] R10: dffffc0000000000 R11: fffffbfff21b4aa1 R12: ffffffff8d4b5960 [ 102.520385][ C1] R13: 1ffffffff19792b0 R14: ffffffff8d4b59b8 R15: dffffc0000000000 [ 102.520409][ C1] ? console_flush_all+0x87e/0xd00 [ 102.520452][ C1] ? console_flush_all+0x10f/0xd00 [ 102.520489][ C1] ? is_console_locked+0x20/0x20 [ 102.520512][ C1] ? lock_chain_count+0x20/0x20 [ 102.520538][ C1] ? __down_trylock_console_sem+0xef/0x1e0 [ 102.520566][ C1] console_unlock+0xae/0x340 [ 102.520593][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 102.520618][ C1] ? __irq_work_queue_local+0x13a/0x3b0 [ 102.520644][ C1] ? irq_work_queue+0xbc/0x140 [ 102.520670][ C1] vprintk_emit+0x477/0x600 [ 102.520697][ C1] ? printk_sprint+0x460/0x460 [ 102.520733][ C1] ? _printk+0xd0/0x110 [ 102.520750][ C1] ? copy_from_kernel_nofault+0x1d2/0x320 [ 102.520785][ C1] _printk+0xd0/0x110 [ 102.520803][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 102.520835][ C1] ? load_image+0x3b0/0x3b0 [ 102.520867][ C1] __show_regs+0x1bf/0x610 [ 102.520896][ C1] ? dump_stack_print_info+0xf5/0x150 [ 102.520922][ C1] show_regs+0x44/0x90 [ 102.520947][ C1] __warn+0x160/0x470 [ 102.520969][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.520996][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.521021][ C1] report_bug+0x2be/0x4f0 [ 102.521041][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.521066][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.521091][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 102.521115][ C1] handle_bug+0xcf/0x120 [ 102.521135][ C1] exc_invalid_op+0x1a/0x50 [ 102.521156][ C1] asm_exc_invalid_op+0x1a/0x20 [ 102.521182][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.521210][ C1] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c [ 102.521226][ C1] RSP: 0018:ffffc900001179c0 EFLAGS: 00010293 [ 102.521245][ C1] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88801be45a00 [ 102.521260][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.521273][ C1] RBP: dffffc0000000000 R08: ffff88805ed555af R09: 1ffff1100bdaaab5 [ 102.521287][ C1] R10: dffffc0000000000 R11: ffffed100bdaaab6 R12: 0000000000000001 [ 102.521301][ C1] R13: ffff88805ed565d9 R14: ffff88801f3f2c70 R15: ffff88801f3f2ce8 [ 102.521324][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 102.521370][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 102.521402][ C1] ieee80211_csa_finalize+0x59a/0xf00 [ 102.521440][ C1] ? mutex_lock_nested+0x20/0x20 [ 102.521466][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 102.521488][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 102.521518][ C1] ? read_lock_is_recursive+0x20/0x20 [ 102.521547][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 102.521576][ C1] ? process_scheduled_works+0x957/0x15b0 [ 102.521599][ C1] process_scheduled_works+0xa45/0x15b0 [ 102.521647][ C1] ? assign_work+0x400/0x400 [ 102.521675][ C1] ? assign_work+0x39e/0x400 [ 102.521701][ C1] worker_thread+0xa55/0xfc0 [ 102.521747][ C1] kthread+0x2fa/0x390 [ 102.521764][ C1] ? pr_cont_work+0x560/0x560 [ 102.521787][ C1] ? kthread_blkcg+0xd0/0xd0 [ 102.521805][ C1] ret_from_fork+0x48/0x80 [ 102.521827][ C1] ? kthread_blkcg+0xd0/0xd0 [ 102.521846][ C1] ret_from_fork_asm+0x11/0x20 [ 102.521885][ C1] [ 102.521912][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.521921][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 102.521940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.521951][ C1] Workqueue: phy6 ieee80211_csa_finalize_work [ 102.521981][ C1] Call Trace: [ 102.521988][ C1] [ 102.521995][ C1] dump_stack_lvl+0x16c/0x230 [ 102.522021][ C1] ? show_regs_print_info+0x20/0x20 [ 102.522044][ C1] ? load_image+0x3b0/0x3b0 [ 102.522073][ C1] panic+0x2c0/0x710 [ 102.522107][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 102.522144][ C1] ? ret_from_fork_asm+0x11/0x20 [ 102.522174][ C1] __warn+0x2e0/0x470 [ 102.522200][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 102.522231][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 102.522259][ C1] report_bug+0x2be/0x4f0 [ 102.522282][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 102.522311][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 102.522340][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 102.522370][ C1] handle_bug+0xcf/0x120 [ 102.522393][ C1] exc_invalid_op+0x1a/0x50 [ 102.522415][ C1] asm_exc_invalid_op+0x1a/0x20 [ 102.522450][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 102.522480][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 102.522496][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 102.522513][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88801be45a00 [ 102.522529][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.522540][ C1] RBP: 0000000000000000 R08: ffff88801be45a00 R09: 0000000000000003 [ 102.522552][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ed563c0 [ 102.522564][ C1] R13: dffffc0000000000 R14: ffff88805ed568b0 R15: ffff8880252fc424 [ 102.522593][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 102.522621][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 102.522654][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 102.522682][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 102.522736][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 102.522770][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 102.522812][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 102.522843][ C1] __iterate_interfaces+0x243/0x500 [ 102.522865][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 102.522889][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.522914][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 102.522937][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.522966][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 102.522990][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 102.523017][ C1] ? hw_scan_work+0xf40/0xf40 [ 102.523046][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 102.523066][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 102.523098][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 102.523123][ C1] handle_softirqs+0x280/0x820 [ 102.523146][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 102.523170][ C1] ? do_softirq+0x180/0x180 [ 102.523192][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 102.523220][ C1] __irq_exit_rcu+0xc7/0x190 [ 102.523239][ C1] ? irq_exit_rcu+0x20/0x20 [ 102.523265][ C1] irq_exit_rcu+0x9/0x20 [ 102.523282][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 102.523310][ C1] [ 102.523316][ C1] [ 102.523323][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.523342][ C1] RIP: 0010:console_flush_all+0x889/0xd00 [ 102.523366][ C1] Code: ed 01 00 00 e8 48 2a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 39 2a 1b 00 eb 06 e8 32 2a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 102.523381][ C1] RSP: 0018:ffffc90000117340 EFLAGS: 00000293 [ 102.523399][ C1] RAX: ffffffff816a656e RBX: ffffc900001174df RCX: ffff88801be45a00 [ 102.523413][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.523425][ C1] RBP: ffffc900001174b0 R08: ffffffff90da5507 R09: 1ffffffff21b4aa0 [ 102.523445][ C1] R10: dffffc0000000000 R11: fffffbfff21b4aa1 R12: ffffffff8d4b5960 [ 102.523459][ C1] R13: 1ffffffff19792b0 R14: ffffffff8d4b59b8 R15: dffffc0000000000 [ 102.523481][ C1] ? console_flush_all+0x87e/0xd00 [ 102.523515][ C1] ? console_flush_all+0x10f/0xd00 [ 102.523549][ C1] ? is_console_locked+0x20/0x20 [ 102.523573][ C1] ? lock_chain_count+0x20/0x20 [ 102.523597][ C1] ? __down_trylock_console_sem+0xef/0x1e0 [ 102.523624][ C1] console_unlock+0xae/0x340 [ 102.523649][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 102.523672][ C1] ? __irq_work_queue_local+0x13a/0x3b0 [ 102.523696][ C1] ? irq_work_queue+0xbc/0x140 [ 102.523720][ C1] vprintk_emit+0x477/0x600 [ 102.523745][ C1] ? printk_sprint+0x460/0x460 [ 102.523774][ C1] ? _printk+0xd0/0x110 [ 102.523791][ C1] ? copy_from_kernel_nofault+0x1d2/0x320 [ 102.523829][ C1] _printk+0xd0/0x110 [ 102.523847][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 102.523878][ C1] ? load_image+0x3b0/0x3b0 [ 102.523909][ C1] __show_regs+0x1bf/0x610 [ 102.523936][ C1] ? dump_stack_print_info+0xf5/0x150 [ 102.523959][ C1] show_regs+0x44/0x90 [ 102.523980][ C1] __warn+0x160/0x470 [ 102.524004][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.524034][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.524061][ C1] report_bug+0x2be/0x4f0 [ 102.524082][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.524110][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.524139][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 102.524167][ C1] handle_bug+0xcf/0x120 [ 102.524191][ C1] exc_invalid_op+0x1a/0x50 [ 102.524213][ C1] asm_exc_invalid_op+0x1a/0x20 [ 102.524241][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 102.524270][ C1] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c [ 102.524286][ C1] RSP: 0018:ffffc900001179c0 EFLAGS: 00010293 [ 102.524303][ C1] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88801be45a00 [ 102.524317][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.524328][ C1] RBP: dffffc0000000000 R08: ffff88805ed555af R09: 1ffff1100bdaaab5 [ 102.524342][ C1] R10: dffffc0000000000 R11: ffffed100bdaaab6 R12: 0000000000000001 [ 102.524356][ C1] R13: ffff88805ed565d9 R14: ffff88801f3f2c70 R15: ffff88801f3f2ce8 [ 102.524377][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 102.524425][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 102.524464][ C1] ieee80211_csa_finalize+0x59a/0xf00 [ 102.524494][ C1] ? mutex_lock_nested+0x20/0x20 [ 102.524520][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 102.524541][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 102.524572][ C1] ? read_lock_is_recursive+0x20/0x20 [ 102.524601][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 102.524631][ C1] ? process_scheduled_works+0x957/0x15b0 [ 102.524654][ C1] process_scheduled_works+0xa45/0x15b0 [ 102.524704][ C1] ? assign_work+0x400/0x400 [ 102.524732][ C1] ? assign_work+0x39e/0x400 [ 102.524759][ C1] worker_thread+0xa55/0xfc0 [ 102.524807][ C1] kthread+0x2fa/0x390 [ 102.524823][ C1] ? pr_cont_work+0x560/0x560 [ 102.524846][ C1] ? kthread_blkcg+0xd0/0xd0 [ 102.524864][ C1] ret_from_fork+0x48/0x80 [ 102.524884][ C1] ? kthread_blkcg+0xd0/0xd0 [ 102.524903][ C1] ret_from_fork_asm+0x11/0x20 [ 102.524942][ C1] [ 102.525245][ C1] Kernel Offset: disabled