last executing test programs: 1m35.789781552s ago: executing program 0 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0xe40, @private2, 0x4}}, 0x0, 0x0, 0x1d, 0x0, "0bee84a0d6b8edc96c0d7e487f86ab23307066bcf140ddd3d1c838ca4d53ca64534c6302d618caa5ba02000000b3e8a6bd7055dc50689c5d81b60f4fb2494bb0ca8a7cd3f6fccfd90000000000004000"}, 0xd8) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @local, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYRES64=r0, @ANYRES16=r2, @ANYRES8, @ANYBLOB="17f9fdf2880164fb776454cdd46ed90325a70404a2e70bb145a6babc82d11597d14dab2b0471c2b625c7cd955a0b5961de3918641b225da2649abd1399472e877e78ab34cf0d53233fc234f1fd882a6d360a25d916743aadbc0268f8f4b2f711ea29631cde090438f3006754ef56cc0ca869fd8f54a02ed31de45a98a8ffb83c7cf7e1ed23447c2be329be4ca2f988ee30a688c677e24faead2f2399288f50e4ffd08a24066f89316ef31a01d615388fb348489fcb5f8ff7a504a4412d9876a01193d3ebe0dd0ba0605b7d37c9d5ac2a1693e085242af4334a38af7c857b1e3e7d", @ANYBLOB="bb65ee8eb4aee488152cf078ed6e03bb1814f7822364a69780b32ac01cd97383fbb46066d92febf55e2bc7ac53bd4c8e43cc678313e937cf59919d6592c88daf99ae34b9f475bc8c54480769823b1b49544aaf35e86c285e7dfa5ddc1d0240d12244425bd80c711a0c9098172fea1e016cef08db65169a307671aa587dfc27ccd773c9c4200cbb0a4295446456734e4948e67d3ab5c21bcca45eaa89db32518fc21c0c7db2414b5dbca15f7c134c8e4e8577017a72c2a234ef435f52b2b7942d0d070e461a3b934a5ea023b7d0398c289ddf77cbab1f0116a5135931c37e1ff97c5a7accda388c3cd8480bd81e18fccc33a115bdf9db568155470826b5c40df425fc7f29fdaa1ac3379cb7705942aae6f6c2c82914ddccb7fbc63d8c0be22c9c295515e7625b90c969ec0cac408d32d100ec756650e128e5cf2a8dccdb479d09555269b69fd88e72e768eeea7b786fdc8217326eada02822c6f08767fb82e035a4fc2c891264d4c7a4cef98fa21eb474e52e0f5960b2d2e8d57e7502102798d638b72057c1a5e40c664ec3116e052a26c9be93831c277b7be6ca7570ef98a3f8769162eab2ae04d718c1e7f6b861e0afc14beedde51f8b872641c9e90f44bb44d01f5aa3e5a245c4e73708dd9186341597e41bf93cb57564eff88970245a369b3a3e5035b33494b41d932be2b2c3d4cb4f75e2890f37a71c0c49132542b169ed51e3b9a4835e70542878f2a2a9e8b2969d3c28c8ff9f0219574c463cbf25c5b8665bc4970dc834ce4012b59e4f2894db4dee08477a3c03795e33d9a79b19c884e74ed916530f06c7def3338c4d32bba9081825c79a75634f70281e30eb721f2b4170a6e61d91293d4eb66874d5ff3ef94a9c7f50edb9fb547ace8f156816a1b0294695e8894ca730149c2bc8bf5cb6dca2a03a3441f9753e9e04b355dafcb4c4d4fe7887f8d8b3d0c3ee33f8ac0ae2f84325c74b57da0c82d2769d04f9f83202f303a7c7ea573a9717bf58f9d42e462734d8fabfb97fd3bb35918f85dab8530b8960a93c05f7bfb7fa335ddfe473a37e82b77906f8ce013812c81c0614035297e75cf294ca5a9563be6cc62772d100ee65535e2c6725935f9888cba4593d16c09dab83420493ea60ba7b0317754c4e6397de276fb60edfdae19944791c6e221135c7bae2800678dbc26a0bf8bf98e5fb25fc0cd3f1aa905c0fe71ae9515b27e1a588412272b4399aec27997873965915ed099abac3e94824048c437357029c684f6083e1ab7d826541877bcfa29be8a29c9face5cab131775ba26907105d660b2f0c56d90ccf6c5da78dee2fce49d837db066c262720fa7ac04a562f7b8d4087f56faed9af2ba2b050cb064023ad6d1831035d087abc3f10168cc169206d047fdf5430bc659e8c3a0af9a3fe8a04de1cca1ce4c5648173a6816fa44c78886c1a10e4a22bb4fca51af9fabed467f4b214e3d639d8b455e1bca48856d66c2d16d00dbff643cfacea7b97a0665d2b8e53ada5b8a4bff87af7d95843eb2871ace888a1e714daa44bc2fc6d0d7cf63df13a72861750c91a27228525d68f4eaa298537dedfa18f3162feb9d40189c3d203f1c41ece5140c274cd90e73264599e384ec071b2a1a783f8b78936ba2a929cecdde95657a8fe1daef7e1981b2e16e96a1fd0f175b500f5d178106b8f2eb739cb066f2454d4f04f701fdc85c6bdd9a2ed7519a782ed8ab7515e493028bf2c2eba868a2374c09c92aa7f1d7fdfe06e56c55d965ec6ece65421ed54ac425580c6d749a71f198871b5dadd2a3ebe4f7dfa3fc8b31a43a4dc9d17513695b56850565a80af3fd72ff906c17f779196ffb7cc9af6a6188a9e242fefedf87bfd812b04b3554aa9077fb0c3a268200d262540157e99dc0e4ef5aab7b832f10db522d09b152b6a401aee0da9a683d5c4891490fa8f8921ce79ac1b23b08ae0f2ebfd021faa17ea8a3c0c08b5c5c19641a0a6e300e8c48e70a11155d3acd4880cea4adaa6ed9be59e982158b662d299227b334701bffd12b1103a2805968ab94ba413eeaecf6545ccfd48a7aa862d87f785787f1360adacf8657746a5890b0b041f3f306ffb026322423cb173007563d6749c162ecb22d5eba7556c1a1510c1a4faae83093f67fa350bacb797869949f6164965dd2ce278b476f39541213784b72ced1dc7d276a4ba8769ccfd98921281ece4e4de97e1751feeb1de24a871cf4397d7226539b228aa769318e06fff04853d66a1980933359fd9c3e54e4fdc7319b025b044f49b64f9f214592b2a5eb461b1029a58072f3b4ee246a20a4ec07cd0835d7c84aca46cf808516071056c2f6948c16a30357a25aa8180dbb59f415937a7fdd27153966947146109cfcb852dcbf713bb868e763dcdb373c6a3785f3fa69e7270383b31832a02d9554f271bb090dbf2be17340644246e8d7a09a93f028981494b830525cb7a49a639ba7319f23d6879dd69bdbb7415c4eabfa92b89ac1d000639030bb5782d93a5721a11f7a8dcd31097ee290f586feb0ba188109604d824ce8330e49b06cd8866420660fdbd4a74068f0a3ceb1e26a811201d5be2c23a4018139e652205e9df8a4489a4c5f1ae24052ee7c2d011ef975ce73acec3ac46dabd2c78e2b0524e284b79c02c7a1b31682d1ff00ca8b6a79dcfb2717c61f469ca0258f5d8b76f137edb4c6489c65113d03b2a167b53bdf7962c81505efee72cea74c51d8680242d2a31437e1ec04e805ce813500b30a4b83cbf19c101bd92e2eec8aed1b1f8b658bbc01c6c264e24c8bb2f6c00c25d00fcd61dfd05da080d9b8ddd12682f1f918131774240cb3f81a230644a344793956d8b9f79e68ffb25dc87421fcb04a35a0d371ca0227bc4ac28514808f9001d668868bbaa08a5cb424cf0c1bf66546edc56b892b627b5988d8a50a4e1e3de90936c45ce0ccc116b02dd89a5768b0da00e616359842192bfb837d75746dec03a0dac3f4ba45a99666aeb5da70f6d4fbc061c9b4ef46ed317b9c2903f9b585b5b64c842be8c9af8b031481e85f5f167b1633d1069cc4a038ee2e04daee0f0d74ed65dc45c00f4d6580ae9eaf3a064c9a3fe338aaf0df04f638324928b0cce50bb20fdf00f7f935b91d9ffa50d2c07ec6f2a96cc96ea4320b51f44e48920b600ed47999e5eca6b2ca31fa82637b419a52e55094e378e02710971565cf70d48e355c912010d2de281247628a002d59ecab1dba9ce956e456cbcc61df043c9ad4142700e80fdc01982bb6b4b9ac281432b84486962be0ad224555b1e3faed9f46d98924be3339c5f67b8220ed39c28e608a90bdd127f897fe603a96a56670f344781b5d24c2202b0aa3fdcb93d115b51933968a052b266b65142423dfcf596387da82cf1283dd60504d7efde90137080f46128ec2f85c4ed98b6fba64eae9031dd85d70b4f3186272dc5c923f8604c4512dc38b5e709e6a5bac7062eef18db6334db93959072e9dcb3fbaa5ee2bf04ef7fa30948496acfac0d77c3422dc4fd39b0a216c7657e0767a4141fe9463d7ef96d6f00c575eac253327eb7efe3514d2f6c6326ec35cf87ed0059365bca221593c80782f443458b4ba2cfa4d311b353e1cf6e691868e7567002fe9fb4e59f147aa6f89a2cce9d69e668a683267a06c243a12b811e875fc4e5db32f1e9fb51170913fe19c4c22573679fe85b52731dd06f7a9d16977c8c65187a0be031ad753214d7a28eecefec457e7456672e01460b5b6ff9c1d15cfcba0c82948f33febb5ceaa659fee584df658c9e9262408272f74e1088cd6dbb3b51d5589a93854cc43a9dd2ebe73a64d35219e6e5fca17b3e3e0d80208877018c63800b24b264d6fe862a203bf82fe385e0bdf36dbd3b9e7e17604ae36b4c07d605c75c3fbfe1c822b664ea13df273132c90af587f56d97272e554744cdc52275df98ac3c68a1e283b517d36b96b19b43bfd651837ec8e7d7f0664fe9057303c3d9e7dd7cce49e13dbb3f50f90536ae532b76262243833d06551568ee91388b9908968a874eaa5d2e1f6872f635cf56166136ee4d884de1099afa5edd111bd1ef08f58c1611fb5549bc9a215547e52cebd1d1d44029d0757623745648b00feaaf05c739e0a101f0828a36dfb763248f66cfdf61ddb2cfe2d8b0c98239a4e118203ecc45c0a135ddaa58fff81c65e0ed44ba37d80105eaec5bf8811e87be335d6783fc59c39e3ab3d690d146e9c1db296742b5c24e61ae596c3703d24c2c206cba8ae595e34b4e4e0ffe0cc172d09bd1cbc39d7d58e60d90585493eac21e2e58b75af6d0bfaaeecee46c403280fab4ce091b9a5fb36a57babde6eaf266002724851f73d2fce26087ecc66f0959324eddd26fe75ea0befc0ddf766be266c06bb5b5bad08b460b89c1bcffc38568b406234dec3b15417732fcab5e8ccb98e26a9fde03618f24a9536ff69d6202e0d154615d3baac530ea22aea92a8b098b6eb0cd825cd4d073f50f6f89f1ca6cf0757fac53966e6dbd071b07b2c52b6260d6ea83544baa1153c7ae21f9e1c3c89cfe66078c88ddb4a0131453ad1ad29d0eb3e16c525d3443b833b25f1f6fd024ad74ae20a2e5f853c0f19f80be31ffcb08bb1dd8e474c4495282606ab556de5cd032b0ffd1472878f724cec0465d0f948fe08cd722a01b3811dd32d2caf5267fd2fd8302abd140dccd61252c0df1ed61bbf7fb40328926bf1117415640e80725ea95e4ac054313e0903780de9f4c105375a53925e29acc271d82861ec343617fc28df19d7fbfb05781b3a3b0ef124707522dd67c03e699777de35ab5b1c331f7624a7ead5fb555e50ded912b605cec4b0754d4183b441826937acb5f69e97a840ec11c03f8f983f613f73315c59f59b8fd290018b4ea21f6bc68654a261b372197302c00e48a3af89aa0a8b8bbf440a1dab8cf56108114f4c59b685d10483c28e4f3e0cc3e2432756c89a8298393c518d5bc5e5d256a1fd9f4c2e2220af410b62e2c4b84a7c4d6a2fc2164381a7fd91801b24bd13e9e8ce9192d01791846562bf96fced19159791d3dfbca8eca4c14ae3e055aea86a82a047a0714fbbdde38d72296216383e74c7520c071ad8e44ba53520b029f37ebd8f62cde868fddac0e8324107604e88018250d2a12df72572e239df0e6a9f7768f70016f81871d3044c70207fcdf979d464ce2d59e189c9cb698f8896f04cdd28751c86e757df1d065457e5631a78822a3b9e59088aad6d5cbe1457976d1bec985c9029db9ef158825c26c044d4e05efff626dee6411a8b2e6d00402cf0a0446195fa1ee109f561ef621722f1a2c91ba4644dee74a11879b52c79695c0622812f4a66a7cf8321a4d00b68e5468b2f494d7dce010c995e73657718c18af9fcf52d62969aa425e1ade48751668bad7591c522cfc2e80af93ebe364dfdbdc202ec69d3250f05beafd9a71c122ec25fdd07ffbebf61a88d22cbcaa40923f6e06d747319ef7812a27036ca08b86030bd4e66063d01bfa9fccedec409e64b0e799a504b8290340fcddd598d6002021f3917a38525cd1279c8e790b9100bffd472f69be5c5863232bdf00a3c2a02edc367447e0b31788484c15ca0224dbebb77b1342544ac03b6cae4cee37548d6e3616f6916e20067ca54da8025d9077f0438150359e677d46c8a416d4d9aa481b83af2ebf592c274d321970fb426afe7547475571aae1dabfaa47b4fa021f6089b299b95cab09089e9e92bdd17406fee08e6d1d9d158a9444455af0b01f58eea1b91994290a4b70c91162fd525b7f222ee5", @ANYRESOCT=r1, @ANYRESHEX=r2], 0x50) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001600010a0200000000000000fbff0000"], 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000000)={'dvmrp1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) r7 = socket$packet(0x11, 0x3, 0x300) dup(r7) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) 1m35.757092153s ago: executing program 2 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=[@release={0x40046306, 0x3}], 0xfffffedd, 0x0, 0x0}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000010440)=[{&(0x7f0000000040)=""/158, 0x9e}], 0x1, 0xc03, 0x3) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$watch_queue(&(0x7f0000000040), 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 1m31.075834993s ago: executing program 2 (id=29): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`\x05\x00\x00\x00\x00\x00\x00\x00\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) mknod$loop(0x0, 0xfff, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) write(r3, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) 1m30.389552931s ago: executing program 0 (id=30): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) 1m27.367816593s ago: executing program 2 (id=34): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x3, 0xfffffffd) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 1m27.364602284s ago: executing program 0 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003480)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56d49, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x4fe, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xfc, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0xb, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x80000001, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x5, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x9, 0x3, 0x2, 0x1, 0x0, 0x3, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x4, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x5, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m23.845888772s ago: executing program 2 (id=39): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/129, 0x81}], 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002640)}, &(0x7f0000000080)=0xc) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m23.733420813s ago: executing program 0 (id=40): mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x7, 0x10000, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r7) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 1m17.591647479s ago: executing program 2 (id=43): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) close(r0) 1m17.52549093s ago: executing program 0 (id=45): sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 1m17.303215853s ago: executing program 2 (id=47): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x108, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x714, 0x4e23, 0x8000, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xa0, 0x1f, 0x7}, {0x2, 0xfffffffb}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x30}, [@encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e23, @in6=@local}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$inet_tcp(0x2, 0x1, 0x0) 1m17.171083344s ago: executing program 0 (id=48): fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m2.095478258s ago: executing program 32 (id=48): fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m1.992352519s ago: executing program 33 (id=47): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x108, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x714, 0x4e23, 0x8000, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xa0, 0x1f, 0x7}, {0x2, 0xfffffffb}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x30}, [@encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e23, @in6=@local}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$inet_tcp(0x2, 0x1, 0x0) 15.213508466s ago: executing program 3 (id=113): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x200008c8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000440)='!', 0x1) 15.005451668s ago: executing program 1 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$dh_compute(0x17, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000001700)={&(0x7f00000015c0)={'sha224-generic\x00'}, &(0x7f0000001600)="c4226a5fea0396fe50e8843bd4b5116a3357f495f2617773b36c57e9d075146939b270123bc19ff322d0427f0197f706c4fdb8ff72bf76f2b2ccfaf16f800e531eca42552818230c81dc18ff3f242ab03c67f4c231a6394d0a31", 0x5a}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x44, 0x8, 0x5, 0x49, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x8001, @remote, 0x2}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.567619812s ago: executing program 1 (id=115): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) open(0x0, 0x0, 0x22) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c0033008020090008021100000108021100000050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 14.233133596s ago: executing program 3 (id=116): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r4}) 13.971967588s ago: executing program 3 (id=117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14004400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000", @ANYBLOB], 0x1c}}, 0x40480d0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000500000000000000000000ff020000000000220000000000000001e80031"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x20, 0x0, 0x0, 0x3f}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000dc}, 0x4840) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) eventfd2(0x43, 0x1) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r6) 13.913020679s ago: executing program 1 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 11.779576942s ago: executing program 1 (id=120): r0 = socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f0000000500)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r2}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r3}, 0x0, &(0x7f0000000200), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, 0x0, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40890) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480b0) getuid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = mq_open(0x0, 0x40, 0x59, 0x0) mq_notify(r7, 0x0) 10.532599116s ago: executing program 3 (id=121): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setattr(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(r3, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 8.824356804s ago: executing program 4 (id=122): r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = accept$unix(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) r5 = getuid() r6 = getegid() r7 = syz_open_dev$usbmon(&(0x7f0000000d40), 0x6, 0x44140) sendmmsg$unix(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000580)="b0dacc54075c62aff6685fab7f18e82563c3b5509fe91d4a2d4629974471cc9db7836911244a85a095d43c8089d2ea56f7349bb7542d8131a9a6c3689946ce14790c91f36bda81f95e70229a815e7a20523d355d533016e6ad1e3d2013450629301d8e2146bd40e6279e256c83700cd0cffce4eee46ee84532cb4f599fdb24a0c183ab6d5fc2e6e43665b76ec86ff1a0fde67c523ecd7156b8d17b9a249f81f461de0779f1680c2300deb9d444aa3b3dd3ab5fded35b5355f7b5a6fd3d3f167eecc9d45b472af83eb71446c6ba3b85658c", 0xd1}, {&(0x7f0000000680)="c0861c167f3097c1", 0x8}, {&(0x7f00000006c0)="50fb457ba855f4ce3453ae5a215711948ccdbe9e93ccd8f567840f2505a4944f791a9548a7584e342ea8c8498bdad512b1a2935ad09ee8035e7cb1d4ccdeedb900a8c28f81f36e26d87d220fdfcc7b952392625a72b1f7b5e90a6eb175698ff3516b34c1074428fc390c68f5ae790b42328160f0e45e4377c8ba458dc982eb826b9d4c6689", 0x85}, {0x0}, {&(0x7f0000000a80)="bfd38f739971013dcbe617f360487340fba300dc87e121dd5b2afed2e8e4b8d0fa6576e69625291d1a26eb79a83ea70ac68b7d9f132998fbce594b670f1cd73896f820d15d0d2c03e72e19ccaef1304e0b10a3215bf9576688a6cc758ca49b6801e8a62c511895c96af5b942506af2e5b1a7ecca20c474839283029faff71eea4e0ef216114c865b0e9f4e8dba74a1f253522233cd1eb82912f8f852dd944620cbf95b55710a453671", 0xa9}, {&(0x7f0000000b40)="bdb6b7b8ef25687b1dc61b8466eb39f979b9d815a3abfab56851dff7d13103416c747ac1295658167d93f64470f7eaa92da4741629b758fceb82b5e39e40784c50cb2baf9d3fa51f05ca1c3f8c8ce8bb9fb2f22be2468b3b70bb7eebeb799874f9360b8731d65e8b", 0x68}, {&(0x7f0000000bc0)="0d1ee7323c71e6d74c06f2049c1b29763287ea056667dd071a594266661d5fd075dd787adc569a4bf5bfbdcc3d92815ab2ecdb3bb677f54b2ad59b6bba5577c8334e5ff93ead8c92619df0e29b38caa30bfacb9b5fc128ddfa9ac0829249063d0d3cd85cc568f94199050d434da9d605044c0e0fb3da9c278c8ee5808a6561005c1b982622f6ccc02a23fed5461320ec3b4d91e0972bcc2dc35c0d3ff63630a11bb2a1bd3a4677779dc5d4ee5c82725d7051ec003dde1dc4a5865019b2a323ea3d781f0b4ae84e63080164f84671f0ab77aabbb6e358ff1396c0e29c98bb00620d01c905f0ca6a354b0af73f399c2c746066415f7d4296e6fc", 0xf9}], 0x7, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @rights={{0x18, 0x1, 0x1, [r0, r7]}}], 0x38, 0x4010}}], 0x1, 0x400c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000001340)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x46}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x86}, 0x20048056) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r13 = socket$netlink(0x10, 0x3, 0x8000000004) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r14, 0xfff) writev(r13, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.29757539s ago: executing program 3 (id=123): socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$dh_compute(0x17, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000001700)={&(0x7f00000015c0)={'sha224-generic\x00'}, &(0x7f0000001600)="c4226a5fea0396fe50e8843bd4b5116a3357f495f2617773b36c57e9d075146939b270123bc19ff322d0427f0197f706c4fdb8ff72bf76f2b2ccfaf16f800e531eca42552818230c81dc18ff3f242ab03c67f4c231a6394d0a31", 0x5a}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x44, 0x8, 0x5, 0x49, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x8001, @remote, 0x2}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.303949131s ago: executing program 4 (id=124): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4.883643497s ago: executing program 4 (id=125): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r4}) 4.781295408s ago: executing program 1 (id=126): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f8021f0000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.754537598s ago: executing program 4 (id=127): r0 = socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f0000000500)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r2}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r3}, 0x0, &(0x7f0000000200), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, 0x0, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40890) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480b0) getuid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = mq_open(0x0, 0x40, 0x59, 0x0) mq_notify(r7, 0x0) 422.154445ms ago: executing program 4 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 208.984238ms ago: executing program 1 (id=129): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0xfffffffe, 0x0, 0x2000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 172.355758ms ago: executing program 4 (id=130): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003"], 0x80}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x2, @thr={&(0x7f00000006c0)="2e93ceec051a00862cd3e29dbf2988fe0cf4461be5e4182f9dcc8930f6d10afdca9f7b8af41950b07b5f26798ec27055b8a031ce928930e8832110e00410db1c72ea7135a9c62e8f1ba9b9d8a669ad29fea409444194ec8bc7219931526ac9813b7c8373b4a3dd676fcf04995a856b1450ee8841f77e269d78cf59a0973c95a7187c972f167839a51d13f9b2e6a6e00340422bf323ca3d8e39fd6c36699b76492d", &(0x7f0000000780)="8944ae9009d07635e9cc10d0718a120811784af4ed58cc00a2ac7a933a71f6b8628fad4102bac74176ca085c0ba3de89e170359f7838c365ecc92db29e8aba4bfa78b5b0c3aa571599925f24d22dc3314941861f8a34352a5733b257a3"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x2) close(r2) r3 = eventfd2(0xffdffe01, 0x800) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4) write$eventfd(r3, &(0x7f0000000140)=0xffffffff000001fe, 0x8) read(r3, &(0x7f0000000480)=""/82, 0x52) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r5, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x444, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x37c, 0x238, 0x238, 0x37c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff000000], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x20c, 0x274, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x80, 0x1, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@mh={{0x24}, {"32cf", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x14, {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) 0s ago: executing program 3 (id=131): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc0200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x8200) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) landlock_create_ruleset(0x0, 0x0, 0x1) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}]}}}]}, 0x48}}, 0x24000000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 60.213389][ T4175] cgroup: Unknown subsys name 'net' [ 60.319272][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.786241][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.674653][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.732585][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.798347][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.816056][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.849406][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.857286][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.866363][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.878263][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.885436][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.893872][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.919203][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 63.953115][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.968793][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.055864][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.063581][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.071956][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.082370][ T4187] team0: Port device team_slave_0 added [ 64.091670][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.098752][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.107317][ T4189] device bridge_slave_0 entered promiscuous mode [ 64.121249][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.128380][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.136363][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.144967][ T4187] team0: Port device team_slave_1 added [ 64.156470][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.163766][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.172125][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.216889][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.224234][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.232697][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.246235][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.253374][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.261807][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.282299][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.291590][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.298676][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.307357][ T4200] device bridge_slave_0 entered promiscuous mode [ 64.321046][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.328139][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.336522][ T4200] device bridge_slave_1 entered promiscuous mode [ 64.345265][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.355395][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.362506][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.388983][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.402539][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.430479][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.447658][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.454958][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.481212][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.505228][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.522466][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.541484][ T4189] team0: Port device team_slave_0 added [ 64.557048][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.568572][ T4190] team0: Port device team_slave_0 added [ 64.576014][ T4189] team0: Port device team_slave_1 added [ 64.589159][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.599419][ T4190] team0: Port device team_slave_1 added [ 64.627174][ T4188] team0: Port device team_slave_0 added [ 64.640289][ T4188] team0: Port device team_slave_1 added [ 64.672379][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.679378][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.705550][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.723987][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.731867][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.758932][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.785876][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.793310][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.810263][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.817279][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.843601][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.856937][ T4200] team0: Port device team_slave_0 added [ 64.863555][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.870519][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.897202][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.909150][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.916454][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.943135][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.964522][ T4200] team0: Port device team_slave_1 added [ 64.971614][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.978571][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.004869][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.069973][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.076945][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.084120][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.092458][ T4188] Cannot create hsr debugfs directory [ 65.112211][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.119544][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.146116][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.161359][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.171761][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.178617][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.186433][ T4190] Cannot create hsr debugfs directory [ 65.195726][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.202736][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.209272][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.217077][ T4189] Cannot create hsr debugfs directory [ 65.228935][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.236233][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.262666][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.348710][ T4200] device hsr_slave_0 entered promiscuous mode [ 65.357501][ T4200] device hsr_slave_1 entered promiscuous mode [ 65.364549][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.372823][ T4200] Cannot create hsr debugfs directory [ 65.402175][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 65.402175][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 65.414703][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 65.420908][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 65.427307][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 65.672692][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.684683][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.694780][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.717227][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.728170][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.747697][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.768395][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.777831][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.814456][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.842000][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.850756][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.863296][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.922038][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.938362][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.948134][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.978471][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.074308][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.088330][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.099916][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.115582][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.125708][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.137595][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.166988][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.177693][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.188078][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.221391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.230645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.240698][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.247985][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.257438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.266732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.274884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.283786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.293516][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.300582][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.308410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.317733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.330077][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.347832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.360140][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.387168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.396226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.405604][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.412808][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.424091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.432585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.441850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.459731][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.480078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.488505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.498175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.506855][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.514246][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.523387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.532608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.541227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.560038][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.578643][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.589341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.601471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.610379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.621975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.629806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.638046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.647307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.656525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.665658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.675343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.684447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.694235][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.701350][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.709250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.717827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.726312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.734322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.753761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.762621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.774812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.784034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.793144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.802426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.810758][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.817868][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.825899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.869012][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.888676][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.897836][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.913680][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.920874][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.932271][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.942384][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.951664][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.960768][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.969914][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.979222][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.988276][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.995406][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.004958][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.013696][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.022376][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.030800][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.039403][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.047782][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.064016][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.073413][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.083608][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.092586][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.133546][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.165028][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.185341][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.218700][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.228252][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.237112][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.247146][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.257288][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.266256][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.275369][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.284625][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.293057][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.308051][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.328831][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.339249][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.398086][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.409354][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.428494][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.448979][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.461938][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.469611][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.481586][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 67.495932][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.505045][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 67.511715][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 67.516642][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.523320][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 67.532573][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 67.533291][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.546163][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.556409][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.582132][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.606655][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.622373][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.629485][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.678195][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.688128][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.699572][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.709122][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.721915][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.730588][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.738969][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.747458][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.756785][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.780784][ T4189] device veth0_vlan entered promiscuous mode [ 67.799047][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.809460][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.818407][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.827374][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.836667][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.845536][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.854961][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.863446][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.871945][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.880388][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.889265][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.919718][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.945888][ T4189] device veth1_vlan entered promiscuous mode [ 67.963599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.981395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.989026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.005922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.030544][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.098362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.114704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.131128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.139838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.159749][ T4190] device veth0_vlan entered promiscuous mode [ 68.181784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.190849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.200759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.210563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.222424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.230043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.250411][ T4189] device veth0_macvtap entered promiscuous mode [ 68.268315][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.276658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.285042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.293645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.308112][ T4188] device veth0_vlan entered promiscuous mode [ 68.318470][ T4190] device veth1_vlan entered promiscuous mode [ 68.338112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.346682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.357598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.367662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.376585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.385414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.396023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.405224][ T4189] device veth1_macvtap entered promiscuous mode [ 68.449676][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.459032][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.467771][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.477669][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.493738][ T4188] device veth1_vlan entered promiscuous mode [ 68.507548][ T4187] device veth0_vlan entered promiscuous mode [ 68.519329][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.543532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.553525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.563607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.572472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.580787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.591759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.600541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.609832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.623820][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.637726][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.647250][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.656439][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.665460][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.680312][ T4190] device veth0_macvtap entered promiscuous mode [ 68.696223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.705711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.714886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.724420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.734037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.750576][ T4200] device veth0_vlan entered promiscuous mode [ 68.763901][ T4190] device veth1_macvtap entered promiscuous mode [ 68.774806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.783714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.792740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.805576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.814761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.825067][ T4187] device veth1_vlan entered promiscuous mode [ 68.848493][ T4188] device veth0_macvtap entered promiscuous mode [ 68.874858][ T4188] device veth1_macvtap entered promiscuous mode [ 68.886135][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.897327][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.909285][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.924666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.933613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.943033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.952431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.962128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.970040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.979433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.988756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.001407][ T4200] device veth1_vlan entered promiscuous mode [ 69.020273][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.032524][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.042876][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.054102][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.070398][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.081801][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.093149][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.106510][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.118855][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.128649][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.137614][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.146833][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.163670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.173011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.182326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.194346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.205665][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.218208][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.228257][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.239273][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.251737][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.290711][ T4200] device veth0_macvtap entered promiscuous mode [ 69.299284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.314871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.324035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.336617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.348449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.357258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.366829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.378643][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.387755][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.397261][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.406847][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.434829][ T4200] device veth1_macvtap entered promiscuous mode [ 69.480167][ T4187] device veth0_macvtap entered promiscuous mode [ 69.502226][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.502285][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.510225][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.522968][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.538797][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.549939][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.560078][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.561694][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 69.574345][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.582388][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 69.588220][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.596511][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 69.612104][ T4187] device veth1_macvtap entered promiscuous mode [ 69.614643][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 69.628651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.628676][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 69.636773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.652355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.660403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.669107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.678629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.709257][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.720324][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.739865][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.750672][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.761111][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.772428][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.782394][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.795306][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.808210][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.825679][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.835805][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.852016][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.865502][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.876174][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.888021][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.897977][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.908440][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.920086][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.929400][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.940532][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.950603][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.970063][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.980588][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.991623][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.001811][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.012760][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.024739][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.048397][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.058312][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.067854][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.077485][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.087649][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.088979][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.095542][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.112043][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.120775][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.130028][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.144370][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.153592][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.162612][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.171470][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.190238][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.225380][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.264203][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.295618][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.310909][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.315489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.327525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.382719][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.390857][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.414577][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.424579][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.446655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.455112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.463529][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.485192][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.506885][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.522370][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.530790][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.543909][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.667172][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.703757][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.719997][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.743373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.779167][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.831512][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.565811][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.574709][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.304945][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 72.786576][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 72.805634][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 72.831251][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 72.845633][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 72.882017][ T4271] option changes via remount are deprecated (pid=4270 comm=syz.2.3) [ 73.780128][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.686166][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 75.733094][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 75.757515][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.200135][ T4232] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.220773][ T4323] infiniband syz2: set active [ 76.227747][ T4323] infiniband syz2: added ip6_vti0 [ 76.246000][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.292268][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.339919][ T4323] RDS/IB: syz2: added [ 76.360548][ T4323] smc: adding ib device syz2 with port count 1 [ 76.387395][ T4323] smc: ib device syz2 port 1 has pnetid [ 76.462699][ T4191] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.513329][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.664500][ T23] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 76.695231][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.707327][ T23] usb 4-1: config 0 has no interface number 0 [ 76.713581][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.731055][ T23] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.744021][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.761824][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.791160][ T21] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.811481][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.845212][ T21] usb 2-1: config 0 descriptor?? [ 76.951245][ T23] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 76.971204][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.979273][ T23] usb 4-1: Product: syz [ 76.985279][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.991505][ T23] usb 4-1: Manufacturer: syz [ 76.996414][ T23] usb 4-1: SerialNumber: syz [ 77.017763][ T23] usb 4-1: config 0 descriptor?? [ 77.037519][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 77.101896][ T23] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 77.547122][ T21] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 77.597491][ T21] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 77.828923][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.900436][ T4267] usb 2-1: USB disconnect, device number 2 [ 78.053875][ T4343] fido_id[4343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 78.081724][ T21] usb 4-1: USB disconnect, device number 2 [ 78.296919][ T4323] ip6_vti0 speed is unknown, defaulting to 1000 [ 78.329658][ T4350] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 78.421244][ T4191] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.031381][ T4191] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 79.067784][ T4191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.102705][ T4191] usb 5-1: Product: syz [ 79.109991][ T4191] usb 5-1: Manufacturer: syz [ 79.111854][ T4359] Zero length message leads to an empty skb [ 79.124600][ T4191] usb 5-1: SerialNumber: syz [ 79.294257][ T21] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 79.771732][ T4191] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 80.148582][ T4369] overlayfs: conflicting lowerdir path [ 80.447490][ T4375] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 80.518532][ T4370] udc-core: couldn't find an available UDC or it's busy [ 80.542218][ T4370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.866775][ T1108] usb 5-1: USB disconnect, device number 2 [ 82.881690][ T1108] usblp0: removed [ 82.887034][ T4377] binder: 4374:4377 ioctl c0306201 200000000080 returned -14 [ 83.042499][ T4381] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 83.051165][ T4381] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 83.059857][ T4381] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 83.552414][ T4383] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 86.831100][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.922237][ T1106] cfg80211: failed to load regulatory.db [ 88.598130][ T4391] sctp: failed to load transform for md5: -2 [ 88.801213][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 88.942024][ T4232] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 90.736676][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 91.411379][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 91.421547][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 91.432834][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 91.444623][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.459057][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.469524][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.001298][ T4232] usb 2-1: can't set config #16, error -71 [ 92.031845][ T4232] usb 2-1: USB disconnect, device number 3 [ 92.573379][ T4429] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 92.584180][ C1] hrtimer: interrupt took 1648638 ns [ 92.621360][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.981717][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.016023][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.071143][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.145420][ T4232] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.197045][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.258877][ T4232] usb 3-1: config 0 descriptor?? [ 93.773749][ T4232] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 93.842633][ T4232] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 93.940994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #04!!! [ 94.361382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #186!!! [ 94.460983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #186!!! [ 94.560980][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 94.580983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 94.600988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 94.921246][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 98.020984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19e!!! [ 98.040984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19e!!! [ 98.060983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39e!!! [ 98.532979][ T4227] usb 3-1: USB disconnect, device number 2 [ 98.958858][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.47'. [ 105.554913][ T4503] ip6_vti0 speed is unknown, defaulting to 1000 [ 107.872152][ T4521] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 107.879178][ T4521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.916805][ T4521] vhci_hcd vhci_hcd.0: Device attached [ 108.079702][ T4523] vhci_hcd: connection closed [ 108.081788][ T144] vhci_hcd: stop threads [ 108.107818][ T144] vhci_hcd: release socket [ 108.185629][ T144] vhci_hcd: disconnect device [ 108.191284][ T4227] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 108.198974][ T4227] usb 39-1: enqueue for inactive port 0 [ 108.321302][ T4227] vhci_hcd: vhci_device speed not set [ 112.085021][ T4447] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.421525][ T4447] usb 2-1: Using ep0 maxpacket: 32 [ 113.580358][ T4532] [U]  [ 113.649145][ T4447] usb 2-1: device descriptor read/all, error -71 [ 115.167298][ T4556] ip6_vti0 speed is unknown, defaulting to 1000 [ 116.934561][ T4559] ip6_vti0 speed is unknown, defaulting to 1000 [ 117.001563][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 117.134857][ T4575] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 117.365754][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.374261][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.455027][ T4447] Bluetooth: hci6: command 0x0409 tx timeout [ 118.520958][ C0] sched: RT throttling activated [ 118.523756][ T4577] ======================================================= [ 118.523756][ T4577] WARNING: The mand mount option has been deprecated and [ 118.523756][ T4577] and is ignored by this kernel. Remove the mand [ 118.523756][ T4577] option from the mount to silence this warning. [ 118.523756][ T4577] ======================================================= [ 118.564625][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.506234][ T4577] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.751771][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.759188][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.767584][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.774927][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.822713][ T4577] overlayfs: failed to look up (tracing) for ino (-66) [ 119.968183][ T4575] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 121.498032][ T4234] Bluetooth: hci5: command 0x041b tx timeout [ 121.507676][ T4234] Bluetooth: hci6: command 0x041b tx timeout [ 121.777761][ T4556] chnl_net:caif_netlink_parms(): no params data found [ 121.899698][ T4469] Set syz1 is full, maxelem 65536 reached [ 122.046946][ T4559] chnl_net:caif_netlink_parms(): no params data found [ 122.404355][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.496675][ T4556] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.532594][ T4556] device bridge_slave_0 entered promiscuous mode [ 123.920516][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 124.061136][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 126.602629][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 126.829520][ T4234] Bluetooth: hci5: command 0x0419 tx timeout [ 126.834683][ T4611] device syzkaller0 entered promiscuous mode [ 126.893061][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.968300][ T4556] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.265504][ T4556] device bridge_slave_1 entered promiscuous mode [ 130.246515][ T4627] netlink: 68 bytes leftover after parsing attributes in process `syz.1.84'. [ 130.385712][ T4627] dccp_invalid_packet: pskb_may_pull failed [ 130.705818][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.727494][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.823415][ T4559] device bridge_slave_0 entered promiscuous mode [ 131.073905][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.114852][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.222349][ T4559] device bridge_slave_1 entered promiscuous mode [ 131.308856][ T4556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.454005][ T4556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.778019][ T4559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.939596][ T4559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.017152][ T4556] team0: Port device team_slave_0 added [ 132.178165][ T4556] team0: Port device team_slave_1 added [ 132.393030][ T4559] team0: Port device team_slave_0 added [ 132.860223][ T4559] team0: Port device team_slave_1 added [ 132.934675][ T4556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.996742][ T4556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.026757][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.026980][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.298380][ T4556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.179214][ T4556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.201231][ T4556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.361270][ T4556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.386688][ T4648] netlink: 68 bytes leftover after parsing attributes in process `syz.4.88'. [ 134.482388][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.489392][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.721416][ T4559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.876352][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.914500][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.954689][ T4190] syz-executor (4190) used greatest stack depth: 21104 bytes left [ 135.114433][ T4559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.406417][ T4556] device hsr_slave_0 entered promiscuous mode [ 135.481480][ T4556] device hsr_slave_1 entered promiscuous mode [ 135.563302][ T4556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.654656][ T4556] Cannot create hsr debugfs directory [ 136.025856][ T4559] device hsr_slave_0 entered promiscuous mode [ 136.113430][ T4559] device hsr_slave_1 entered promiscuous mode [ 136.141123][ T4559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.169337][ T4559] Cannot create hsr debugfs directory [ 140.554518][ T4660] device syzkaller0 entered promiscuous mode [ 141.145840][ T4556] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.362479][ T4556] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.623869][ T4556] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.302223][ T4556] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.453408][ T4689] netlink: 68 bytes leftover after parsing attributes in process `syz.3.97'. [ 143.477338][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.666124][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.836489][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.870201][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.020271][ T4556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.055314][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.055968][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.074108][ T4556] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.114983][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.115631][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.116507][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.116558][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.117258][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.145240][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.145874][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.146287][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.146328][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.170595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.183125][ T4707] input: syz1 as /devices/virtual/input/input6 [ 148.225889][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.226844][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.227787][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.228490][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.246520][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.247362][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.296033][ T4710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.103'. [ 148.361940][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.362599][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.370847][ T4556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.381934][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.406465][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.407250][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.554222][ T4559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.203955][ T4559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.225918][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.254796][ T4559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.258012][ T4559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.426386][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.529371][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.639597][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.707134][ T4556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.707446][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.707639][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.599711][ T4559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.891720][ T4559] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.050481][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.083753][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.151621][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.254954][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.325706][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.332994][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.594012][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.641849][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.702098][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.709207][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.885143][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.389808][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.463228][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.533935][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.578576][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.631832][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.688763][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.747842][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.798775][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.842979][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.923720][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.975949][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.698098][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.715739][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.751354][ T4772] 9pnet_virtio: no channels available for device syz [ 156.883132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.890684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.028828][ T4559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.457756][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.473529][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.033183][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.975539][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.058819][ T4556] device veth0_vlan entered promiscuous mode [ 161.255007][ T4556] device veth1_vlan entered promiscuous mode [ 161.332828][ T7] libceph: connect (1)[c::]:6789 error -101 [ 161.339394][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 161.396414][ T4793] ceph: No mds server is up or the cluster is laggy [ 161.423962][ T4774] libceph: connect (1)[c::]:6789 error -101 [ 161.430010][ T4774] libceph: mon0 (1)[c::]:6789 connect error [ 161.516228][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.538281][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.632399][ T9] rdma_rxe: ignoring netdev event = 10 for ip6_vti0 [ 161.693161][ T9] infiniband syz2: set down [ 161.771390][ T154] smc: removing ib device syz2 [ 161.784078][ T4556] device veth0_macvtap entered promiscuous mode [ 161.818263][ T4232] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.829535][ T4556] device veth1_macvtap entered promiscuous mode [ 162.045973][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.151049][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.191056][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.262251][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.321960][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.385706][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.426390][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.521236][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.584848][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.634216][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.741220][ T4556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.818467][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.844481][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.894844][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.972994][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.039535][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.185922][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.260312][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.301369][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.361104][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.481917][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.541106][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.580664][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.629130][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.660256][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.881657][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.972067][ T4556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.984959][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.017897][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.124263][ T4556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.181093][ T4556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.251115][ T4556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.321189][ T4556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.431155][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.510677][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.575627][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.618094][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.726972][ T4559] device veth0_vlan entered promiscuous mode [ 164.833260][ T4559] device veth1_vlan entered promiscuous mode [ 164.924862][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.950114][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.992667][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.049231][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.103914][ T4559] device veth0_macvtap entered promiscuous mode [ 165.138518][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.191412][ T4559] device veth1_macvtap entered promiscuous mode [ 165.296502][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.353571][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.388038][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.428864][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.494394][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.545626][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.586240][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.635560][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.666897][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.724216][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.812375][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.849512][ T26] audit: type=1804 audit(1778176820.898:2): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.121" name="bus" dev="ramfs" ino=35718 res=1 errno=0 [ 165.940252][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.008018][ T26] audit: type=1804 audit(1778176820.928:3): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.121" name="bus" dev="ramfs" ino=35718 res=1 errno=0 [ 166.129038][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.212030][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.259319][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.373983][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.453881][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.556808][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.670605][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.771635][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.881416][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.999553][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.128204][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.257280][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.354986][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.434054][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.525886][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.618281][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.710434][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.787621][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.935872][ T4559] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.985748][ T4559] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.040478][ T4559] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.068183][ T4559] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.641973][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.696113][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.764625][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.388099][ T4861] capability: warning: `syz.4.124' uses 32-bit capabilities (legacy support in use) [ 175.652988][ T4873] netlink: 'syz.1.126': attribute type 2 has an invalid length. [ 177.454797][ C0] ------------[ cut here ]------------ [ 177.461470][ C0] WARNING: CPU: 0 PID: 150 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 177.471727][ C0] Modules linked in: [ 177.475721][ C0] CPU: 0 PID: 150 Comm: kworker/0:1H Not tainted syzkaller #0 [ 177.483343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.493630][ C0] Workqueue: events_highpri snd_vmidi_output_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.500190][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 177.506705][ C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 14 2a f8 0f 0b e9 03 ef ff ff e8 61 14 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 a9 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 177.526705][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246 [ 177.533013][ C0] RAX: ffffffff894f202f RBX: ffff88805f8c6268 RCX: ffff88801bfdd940 [ 177.541200][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.549474][ C0] RBP: ffffc90000007b08 R08: ffff88801bfdd940 R09: 0000000000000003 [ 177.557671][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802166e000 [ 177.565856][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c [ 177.574144][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 177.583281][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.590031][ C0] CR2: 00007fb3d90c07e8 CR3: 0000000058776000 CR4: 00000000003506f0 [ 177.598223][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.606584][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.615042][ C0] Call Trace: [ 177.618417][ C0] [ 177.621411][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 177.627594][ C0] ? verify_lock_unused+0x140/0x140 [ 177.632962][ C0] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 177.638962][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 177.644614][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 177.650206][ C0] __iterate_interfaces+0x243/0x500 [ 177.655598][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 177.661994][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 177.668374][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 177.675620][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 177.680952][ C0] ? hw_scan_work+0xed0/0xed0 [ 177.685737][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 177.691111][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 177.696340][ C0] hrtimer_run_softirq+0x176/0x240 [ 177.701626][ C0] handle_softirqs+0x339/0x830 [ 177.706521][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 177.711612][ C0] ? do_softirq+0x210/0x210 [ 177.716212][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 177.721592][ C0] __irq_exit_rcu+0x13b/0x230 [ 177.726398][ C0] ? irq_exit_rcu+0x20/0x20 [ 177.731149][ C0] irq_exit_rcu+0x5/0x20 [ 177.735524][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 177.741340][ C0] [ 177.744365][ C0] [ 177.747392][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 177.753558][ C0] RIP: 0010:finish_lock_switch+0x134/0x280 [ 177.759512][ C0] Code: be ff ff ff ff e8 3c 52 68 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 e6 bd 71 08 e8 61 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 177.779526][ C0] RSP: 0018:ffffc900017ff6c8 EFLAGS: 00000282 [ 177.785769][ C0] RAX: 137ad2ddb1be8400 RBX: ffff8880b903a340 RCX: 137ad2ddb1be8400 [ 177.793951][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 177.802091][ C0] RBP: 1ffff11017207613 R08: ffffffff901d51d7 R09: 1ffffffff203aa3a [ 177.810224][ C0] R10: dffffc0000000000 R11: fffffbfff203aa3b R12: ffff8880b903b088 [ 177.818432][ C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000 [ 177.826669][ C0] finish_task_switch+0x12f/0x640 [ 177.831881][ C0] ? __switch_to_asm+0x34/0x60 [ 177.836768][ C0] __schedule+0x11f7/0x43c0 [ 177.841485][ C0] ? release_firmware_map_entry+0x190/0x190 [ 177.847524][ C0] ? preempt_schedule+0xbc/0xd0 [ 177.852536][ C0] preempt_schedule_common+0x82/0xd0 [ 177.857950][ C0] preempt_schedule+0xbc/0xd0 [ 177.862775][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 177.868568][ C0] ? lock_chain_count+0x20/0x20 [ 177.873591][ C0] ? remove_wait_queue+0x120/0x120 [ 177.878817][ C0] preempt_schedule_thunk+0x16/0x18 [ 177.884151][ C0] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 177.890093][ C0] ? _raw_spin_unlock+0x40/0x40 [ 177.895063][ C0] ? __snd_rawmidi_transmit_ack+0x238/0x2b0 [ 177.901279][ C0] snd_rawmidi_transmit+0x349/0x400 [ 177.906664][ C0] snd_vmidi_output_work+0x1a2/0x3e0 [ 177.912100][ C0] ? snd_virmidi_output_trigger+0xf0/0xf0 [ 177.917952][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 177.923299][ C0] process_one_work+0x85f/0x1010 [ 177.928534][ C0] ? worker_detach_from_pool+0x240/0x240 [ 177.934324][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 177.939757][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 177.944909][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 177.950574][ C0] ? wq_worker_running+0x97/0x170 [ 177.955736][ C0] worker_thread+0xaa6/0x1290 [ 177.960550][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 177.965870][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 177.971937][ C0] kthread+0x436/0x520 [ 177.976100][ C0] ? rcu_lock_release+0x20/0x20 [ 177.981067][ C0] ? kthread_blkcg+0xd0/0xd0 [ 177.985762][ C0] ret_from_fork+0x1f/0x30 [ 177.990294][ C0] [ 177.993406][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.000707][ C0] CPU: 0 PID: 150 Comm: kworker/0:1H Not tainted syzkaller #0 [ 178.008179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.018246][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 178.024682][ C0] Call Trace: [ 178.027975][ C0] [ 178.030833][ C0] dump_stack_lvl+0x188/0x250 [ 178.035545][ C0] ? show_regs_print_info+0x20/0x20 [ 178.040764][ C0] ? load_image+0x400/0x400 [ 178.045299][ C0] panic+0x2e5/0x810 [ 178.049222][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 178.053764][ C0] ? ret_from_fork+0x1f/0x30 [ 178.058396][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 178.064150][ C0] __warn+0x248/0x2b0 [ 178.068157][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 178.073899][ C0] report_bug+0x1b7/0x2e0 [ 178.078261][ C0] handle_bug+0x3a/0x70 [ 178.082448][ C0] exc_invalid_op+0x16/0x40 [ 178.087053][ C0] asm_exc_invalid_op+0x16/0x20 [ 178.091935][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 178.098300][ C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 14 2a f8 0f 0b e9 03 ef ff ff e8 61 14 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 a9 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 178.118189][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246 [ 178.124382][ C0] RAX: ffffffff894f202f RBX: ffff88805f8c6268 RCX: ffff88801bfdd940 [ 178.132377][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.140393][ C0] RBP: ffffc90000007b08 R08: ffff88801bfdd940 R09: 0000000000000003 [ 178.148411][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802166e000 [ 178.156434][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c [ 178.164455][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 178.170324][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 178.176350][ C0] ? verify_lock_unused+0x140/0x140 [ 178.181691][ C0] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 178.187691][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 178.193358][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 178.198870][ C0] __iterate_interfaces+0x243/0x500 [ 178.204102][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 178.210381][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 178.216656][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 178.223701][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 178.228920][ C0] ? hw_scan_work+0xed0/0xed0 [ 178.233618][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 178.238854][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 178.244003][ C0] hrtimer_run_softirq+0x176/0x240 [ 178.249139][ C0] handle_softirqs+0x339/0x830 [ 178.254085][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 178.258977][ C0] ? do_softirq+0x210/0x210 [ 178.263524][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 178.268764][ C0] __irq_exit_rcu+0x13b/0x230 [ 178.273473][ C0] ? irq_exit_rcu+0x20/0x20 [ 178.278016][ C0] irq_exit_rcu+0x5/0x20 [ 178.282281][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 178.288026][ C0] [ 178.291091][ C0] [ 178.294040][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 178.300039][ C0] RIP: 0010:finish_lock_switch+0x134/0x280 [ 178.305966][ C0] Code: be ff ff ff ff e8 3c 52 68 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 e6 bd 71 08 e8 61 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 178.325780][ C0] RSP: 0018:ffffc900017ff6c8 EFLAGS: 00000282 [ 178.331905][ C0] RAX: 137ad2ddb1be8400 RBX: ffff8880b903a340 RCX: 137ad2ddb1be8400 [ 178.339894][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 178.347878][ C0] RBP: 1ffff11017207613 R08: ffffffff901d51d7 R09: 1ffffffff203aa3a [ 178.355868][ C0] R10: dffffc0000000000 R11: fffffbfff203aa3b R12: ffff8880b903b088 [ 178.363869][ C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000 [ 178.371977][ C0] finish_task_switch+0x12f/0x640 [ 178.377036][ C0] ? __switch_to_asm+0x34/0x60 [ 178.381839][ C0] __schedule+0x11f7/0x43c0 [ 178.386471][ C0] ? release_firmware_map_entry+0x190/0x190 [ 178.392400][ C0] ? preempt_schedule+0xbc/0xd0 [ 178.397378][ C0] preempt_schedule_common+0x82/0xd0 [ 178.402783][ C0] preempt_schedule+0xbc/0xd0 [ 178.407483][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 178.413141][ C0] ? lock_chain_count+0x20/0x20 [ 178.418017][ C0] ? remove_wait_queue+0x120/0x120 [ 178.423160][ C0] preempt_schedule_thunk+0x16/0x18 [ 178.428399][ C0] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 178.434232][ C0] ? _raw_spin_unlock+0x40/0x40 [ 178.439114][ C0] ? __snd_rawmidi_transmit_ack+0x238/0x2b0 [ 178.445160][ C0] snd_rawmidi_transmit+0x349/0x400 [ 178.450407][ C0] snd_vmidi_output_work+0x1a2/0x3e0 [ 178.455724][ C0] ? snd_virmidi_output_trigger+0xf0/0xf0 [ 178.461693][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 178.466936][ C0] process_one_work+0x85f/0x1010 [ 178.471924][ C0] ? worker_detach_from_pool+0x240/0x240 [ 178.477572][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 178.482880][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 178.487931][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 178.493492][ C0] ? wq_worker_running+0x97/0x170 [ 178.498535][ C0] worker_thread+0xaa6/0x1290 [ 178.503242][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 178.508462][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 178.514380][ C0] kthread+0x436/0x520 [ 178.518471][ C0] ? rcu_lock_release+0x20/0x20 [ 178.523333][ C0] ? kthread_blkcg+0xd0/0xd0 [ 178.527943][ C0] ret_from_fork+0x1f/0x30 [ 178.532394][ C0] [ 178.535860][ C0] Kernel Offset: disabled [ 178.540194][ C0] Rebooting in 86400 seconds..