last executing test programs: 11.509958263s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd}) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES8=r4], 0xf0}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="110800030000000000000000000000000000ffff64010100ff020000000000000000000000000001ff020000000000000000000000000001ff0100000000000000000012007fe1261c931ebbe979b0db540000000001"], 0x48) r8 = syz_open_dev$video4linux(&(0x7f0000000780), 0x5, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0185648, &(0x7f0000000700)={0xfffffff, 0x1, 0xa, 0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x980921, 0x5, '\x00', @p_u8=0x0}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 11.290540805s ago: executing program 0 (id=1): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x210, 0x202, 0x225, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff], [0xff], 'veth1_vlan\x00', 'team_slave_0\x00', {0xff}}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x31, 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xdc, 0x124, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x6, {0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x334) tkill(r6, 0xb) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000000), 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 8.913298062s ago: executing program 2 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xffffff01, 0xfffffc01, 0x800, 0x5, 0x6, 0xcd, 0x10000, 0x5, 0x2008, 0x9, 0x0, 0x19, 0x12, 0x3, 0xe4f, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea07", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40004, &(0x7f0000000240)={0x11, 0x9, r5, 0x1, 0xfa, 0x6, @remote}, 0x14) 8.651125048s ago: executing program 0 (id=11): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.781468661s ago: executing program 2 (id=15): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_newvlan={0x3c, 0x70, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xf7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) getsockname$unix(r0, &(0x7f0000000480), &(0x7f0000000400)=0x6e) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.453102185s ago: executing program 0 (id=16): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.101500625s ago: executing program 1 (id=17): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) 4.781525891s ago: executing program 3 (id=18): syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x133}, &(0x7f0000000040), &(0x7f00000000c0)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r0) 4.722765221s ago: executing program 1 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x1, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x6, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 3.075892422s ago: executing program 3 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES16=r1, @ANYRES64=r0], 0x70}, 0x1, 0x0, 0x0, 0x4040881}, 0x4000000) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xf, 0x0, &(0x7f0000000000)="1ffdfaae35289d4f333173846fe86c", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.785551062s ago: executing program 1 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000001400)={0x7c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x429c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.540760881s ago: executing program 1 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x8, 0xd401}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.132434961s ago: executing program 1 (id=23): socket$netlink(0x10, 0x3, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x4008700c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4040000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x4070bd28, 0x5, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x18) r11 = socket$can_j1939(0x1d, 0x2, 0x7) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000088c0)={0x14, 0x16, 0xa01, 0x0, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r13, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r11, &(0x7f0000000080)={0x1d, r13, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.017994902s ago: executing program 2 (id=24): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.861701606s ago: executing program 3 (id=25): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x20044040) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c0, 0x800, 0x1000, 0x5cc}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.207982845s ago: executing program 3 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.106725238s ago: executing program 1 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.076296912s ago: executing program 2 (id=28): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000300)='\x00', 0x1) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time_for_children\x00') 955.912402ms ago: executing program 3 (id=29): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10011, r2, 0x78e17000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 710.76389ms ago: executing program 0 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x1, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x6, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 613.387353ms ago: executing program 3 (id=31): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sg(0x0, 0x0, 0x800) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x1fc, 0x7d, 0x2, 0x9, 0x4, 0x2000000001}, 0x0, &(0x7f00000001c0)={0x3ff, 0x7, 0xfffffffffffffffd, 0xb, 0x0, 0xd, 0x80000002, 0x4000005}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x200, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x4, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r1, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) shutdown(r0, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 2 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xffffff01, 0xfffffc01, 0x800, 0x5, 0x6, 0xcd, 0x10000, 0x5, 0x2008, 0x9, 0x0, 0x19, 0x12, 0x3, 0xe4f, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40004, &(0x7f0000000240)={0x11, 0x9, r5, 0x1, 0xfa, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 73.403985][ T5755] cgroup: Unknown subsys name 'net' [ 73.539083][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.238280][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.712069][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.731438][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.741519][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.752646][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.760595][ T5768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.771669][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.832513][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.841065][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.852006][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.860001][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.869377][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.880349][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.888503][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.906532][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.916622][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.927312][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.935781][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.943649][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.944339][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.965378][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.974197][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.992820][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.001406][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.009007][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.394285][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 77.428148][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 77.504252][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 77.615886][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.633357][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.641546][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.649242][ T5767] bridge_slave_0: entered allmulticast mode [ 77.657133][ T5767] bridge_slave_0: entered promiscuous mode [ 77.665685][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.675114][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.682427][ T5771] bridge_slave_0: entered allmulticast mode [ 77.689225][ T5771] bridge_slave_0: entered promiscuous mode [ 77.699019][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.706271][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.714778][ T5771] bridge_slave_1: entered allmulticast mode [ 77.722010][ T5771] bridge_slave_1: entered promiscuous mode [ 77.740804][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.748436][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.755902][ T5767] bridge_slave_1: entered allmulticast mode [ 77.763581][ T5767] bridge_slave_1: entered promiscuous mode [ 77.829677][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.840740][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.848331][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.855757][ T5770] bridge_slave_0: entered allmulticast mode [ 77.863464][ T5770] bridge_slave_0: entered promiscuous mode [ 77.880927][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.890146][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.898161][ T5770] bridge_slave_1: entered allmulticast mode [ 77.905440][ T5770] bridge_slave_1: entered promiscuous mode [ 77.923783][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.961963][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.997607][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.012640][ T5771] team0: Port device team_slave_0 added [ 78.026055][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.039410][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.060978][ T5771] team0: Port device team_slave_1 added [ 78.120784][ T5767] team0: Port device team_slave_0 added [ 78.138610][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.146605][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.154457][ T5772] bridge_slave_0: entered allmulticast mode [ 78.162254][ T5772] bridge_slave_0: entered promiscuous mode [ 78.170435][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.177796][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.185040][ T5772] bridge_slave_1: entered allmulticast mode [ 78.192746][ T5772] bridge_slave_1: entered promiscuous mode [ 78.202617][ T5767] team0: Port device team_slave_1 added [ 78.221809][ T5770] team0: Port device team_slave_0 added [ 78.247728][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.254913][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.281506][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.296528][ T5770] team0: Port device team_slave_1 added [ 78.335270][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.342361][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.369115][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.401086][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.413857][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.420938][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.448301][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.469073][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.476121][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.537731][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.549841][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.557850][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.584939][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.599379][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.635965][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.643507][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.670921][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.700240][ T5771] hsr_slave_0: entered promiscuous mode [ 78.707753][ T5771] hsr_slave_1: entered promiscuous mode [ 78.788254][ T5772] team0: Port device team_slave_0 added [ 78.809398][ T5767] hsr_slave_0: entered promiscuous mode [ 78.817164][ T5767] hsr_slave_1: entered promiscuous mode [ 78.823505][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.831493][ T5767] Cannot create hsr debugfs directory [ 78.847122][ T5772] team0: Port device team_slave_1 added [ 78.853631][ T5780] Bluetooth: hci0: command tx timeout [ 78.891323][ T5770] hsr_slave_0: entered promiscuous mode [ 78.897752][ T5770] hsr_slave_1: entered promiscuous mode [ 78.904910][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.912892][ T5770] Cannot create hsr debugfs directory [ 78.937065][ T5780] Bluetooth: hci1: command tx timeout [ 78.962049][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.969326][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.996280][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.012241][ T5780] Bluetooth: hci2: command tx timeout [ 79.042236][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.049498][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.076671][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.091600][ T5780] Bluetooth: hci3: command tx timeout [ 79.279611][ T5772] hsr_slave_0: entered promiscuous mode [ 79.286366][ T5772] hsr_slave_1: entered promiscuous mode [ 79.293127][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.300703][ T5772] Cannot create hsr debugfs directory [ 79.448836][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.469840][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.481697][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.508298][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.599759][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.617091][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.628154][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.652979][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.734167][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.749296][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.772702][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.801717][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.867198][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.887483][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.908437][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.919577][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.946827][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.006820][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.046795][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.054524][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.087797][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.094988][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.146601][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.180658][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.215320][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.236408][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.243665][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.285008][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.292302][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.329956][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.377523][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.384781][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.424842][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.460837][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.468142][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.559651][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.596251][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.603714][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.636917][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.644252][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.791066][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.897143][ T5771] veth0_vlan: entered promiscuous mode [ 80.915944][ T5771] veth1_vlan: entered promiscuous mode [ 80.932997][ T5780] Bluetooth: hci0: command tx timeout [ 80.993743][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.011680][ T5780] Bluetooth: hci1: command tx timeout [ 81.037502][ T5771] veth0_macvtap: entered promiscuous mode [ 81.049486][ T5771] veth1_macvtap: entered promiscuous mode [ 81.091563][ T5780] Bluetooth: hci2: command tx timeout [ 81.140684][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.172508][ T5780] Bluetooth: hci3: command tx timeout [ 81.185854][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.226661][ T5767] veth0_vlan: entered promiscuous mode [ 81.248515][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.260385][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.271496][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.280549][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.325148][ T5767] veth1_vlan: entered promiscuous mode [ 81.338898][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.437435][ T5767] veth0_macvtap: entered promiscuous mode [ 81.469665][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.495267][ T5767] veth1_macvtap: entered promiscuous mode [ 81.508241][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.528147][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.596728][ T5772] veth0_vlan: entered promiscuous mode [ 81.615509][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.618804][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.635072][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.644148][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.656666][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.677589][ T5770] veth0_vlan: entered promiscuous mode [ 81.686687][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.698541][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.710342][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.727233][ T5772] veth1_vlan: entered promiscuous mode [ 81.744261][ T5770] veth1_vlan: entered promiscuous mode [ 81.765590][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.776245][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.785790][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.795027][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.895936][ T5772] veth0_macvtap: entered promiscuous mode [ 81.985240][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.988153][ T5770] veth0_macvtap: entered promiscuous mode [ 82.024848][ T5772] veth1_macvtap: entered promiscuous mode [ 82.036104][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.062585][ T5826] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 82.087605][ T5770] veth1_macvtap: entered promiscuous mode [ 82.147080][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.156520][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.168113][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.178637][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.188820][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.220300][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.254774][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.278548][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.302607][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.323383][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.334669][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.344868][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.356004][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.368336][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.389754][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.408526][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.408546][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.408564][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.410324][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.424273][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.424305][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.424317][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.424330][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.424343][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.424356][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.425814][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.446886][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.446961][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.446990][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447019][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480557][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480596][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480624][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480652][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.624512][ T5830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5'. [ 82.913625][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.913676][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.021415][ T5780] Bluetooth: hci0: command tx timeout [ 83.028907][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.082258][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.107156][ T5780] Bluetooth: hci1: command tx timeout [ 83.141818][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.141842][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.182206][ T5780] Bluetooth: hci2: command tx timeout [ 83.252795][ T5780] Bluetooth: hci3: command tx timeout [ 83.260291][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.260312][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.350509][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.536965][ T5846] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.674505][ T5854] vivid-003: disconnect [ 84.031470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 84.236250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.245144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.441433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.811756][ T5862] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.011675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.091696][ T5780] Bluetooth: hci0: command tx timeout [ 85.171298][ T5780] Bluetooth: hci1: command tx timeout [ 85.251713][ T5780] Bluetooth: hci2: command tx timeout [ 85.335084][ T5780] Bluetooth: hci3: command tx timeout [ 85.476019][ T5845] vivid-003: reconnect [ 85.571862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.888219][ T5873] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 86.157489][ T5875] syzkaller0: entered promiscuous mode [ 86.166803][ T5875] syzkaller0: entered allmulticast mode [ 86.416431][ T5879] syzkaller0: entered promiscuous mode [ 86.429025][ T5879] syzkaller0: entered allmulticast mode [ 87.600928][ T5877] sched: RT throttling activated [ 87.608891][ T27] cfg80211: failed to load regulatory.db [ 88.596336][ T5873] syz.3.8 (5873) used greatest stack depth: 20808 bytes left [ 89.151385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 89.451256][ T5894] netlink: 'syz.2.15': attribute type 4 has an invalid length. [ 89.564323][ T5897] netlink: 'syz.2.15': attribute type 4 has an invalid length. [ 89.686538][ T28] audit: type=1326 audit(1772825900.029:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 89.865457][ T28] audit: type=1326 audit(1772825900.049:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 89.922526][ T5902] process 'syz.0.16' launched './file2' with NULL argv: empty string added [ 90.071204][ T5894] syz.2.15 (5894) used greatest stack depth: 20560 bytes left [ 90.087323][ T28] audit: type=1326 audit(1772825900.069:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 90.111658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.148194][ T28] audit: type=1326 audit(1772825900.199:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 90.351425][ T28] audit: type=1326 audit(1772825900.199:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 91.951485][ T28] audit: type=1326 audit(1772825900.199:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 92.073613][ T28] audit: type=1326 audit(1772825900.449:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 92.148460][ T5915] Zero length message leads to an empty skb [ 92.169753][ T28] audit: type=1326 audit(1772825900.449:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f4bf9c502 code=0x7ffc0000 [ 92.250355][ T28] audit: type=1326 audit(1772825901.969:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f4bf9c502 code=0x7ffc0000 [ 92.277223][ T5915] Illegal XDP return value 4294967282 on prog (id 2) dev N/A, expect packet loss! [ 92.309751][ T28] audit: type=1326 audit(1772825902.269:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4bf9c799 code=0x7ffc0000 [ 92.601257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.633084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.886191][ T5935] syzkaller0: entered promiscuous mode [ 93.895166][ T5935] syzkaller0: entered allmulticast mode [ 94.886435][ C0] ------------[ cut here ]------------ [ 94.892325][ C0] WARNING: CPU: 0 PID: 5943 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 94.902504][ C0] Modules linked in: [ 94.906440][ C0] CPU: 0 PID: 5943 Comm: syz.0.30 Not tainted syzkaller #0 [ 94.913822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.924009][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 94.930395][ C0] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6 [ 94.950149][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 94.956376][ C0] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff888026b90000 [ 94.964577][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.972800][ C0] RBP: 0000000000000000 R08: ffff888026b90000 R09: 0000000000000003 [ 94.980871][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f5963c0 [ 94.989090][ C0] R13: dffffc0000000000 R14: ffff88805f5968b0 R15: ffff888030c7bc24 [ 94.997116][ C0] FS: 00007f7f4ce3d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 95.006252][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.012858][ C0] CR2: 00007f7f4bfe9e80 CR3: 0000000024691000 CR4: 00000000003506f0 [ 95.020836][ C0] Call Trace: [ 95.024158][ C0] [ 95.027101][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 95.032975][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 95.038540][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 95.045422][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 95.051249][ C0] __iterate_interfaces+0x243/0x500 [ 95.056568][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.062998][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 95.070585][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.077048][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 95.084307][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 95.089516][ C0] __hrtimer_run_queues+0x520/0xc40 [ 95.095088][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 95.101206][ C0] ? hw_scan_work+0xf60/0xf60 [ 95.105912][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 95.111043][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 95.117243][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 95.122377][ C0] handle_softirqs+0x280/0x820 [ 95.127151][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 95.132112][ C0] ? do_softirq+0x1a0/0x1a0 [ 95.136643][ C0] __irq_exit_rcu+0xd3/0x190 [ 95.141285][ C0] ? irq_exit_rcu+0x20/0x20 [ 95.145896][ C0] irq_exit_rcu+0x9/0x20 [ 95.150427][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 95.156173][ C0] [ 95.159153][ C0] [ 95.162105][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.168086][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 95.174003][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 95.194159][ C0] RSP: 0018:ffffc90004cf7900 EFLAGS: 00000206 [ 95.200493][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 16aa19d27c8f3100 [ 95.208834][ C0] RDX: 0000000000000000 RSI: ffffffff8acadae0 RDI: ffffffff8b1c85a0 [ 95.216867][ C0] RBP: ffffc90004cf7a08 R08: dffffc0000000000 R09: 1ffffffff22382a6 [ 95.225228][ C0] R10: dffffc0000000000 R11: fffffbfff22382a7 R12: 1ffff9200099ef2c [ 95.233435][ C0] R13: ffff8880248701a0 R14: 0000000000000246 R15: dffffc0000000000 [ 95.241639][ C0] ? __might_sleep+0xe0/0xe0 [ 95.246236][ C0] ? read_lock_is_recursive+0x20/0x20 [ 95.251665][ C0] ? verify_lock_unused+0x140/0x140 [ 95.256973][ C0] ? __might_fault+0xaa/0x120 [ 95.261692][ C0] __might_fault+0xc6/0x120 [ 95.266310][ C0] ? __might_fault+0xaa/0x120 [ 95.271079][ C0] _copy_from_user+0x2a/0xe0 [ 95.276021][ C0] ___sys_recvmsg+0x176/0x590 [ 95.281026][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 95.286049][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 95.291236][ C0] ? __might_fault+0xc6/0x120 [ 95.296109][ C0] ? __might_fault+0xaa/0x120 [ 95.300791][ C0] do_recvmmsg+0x39a/0x870 [ 95.305331][ C0] ? __sys_recvmmsg+0x290/0x290 [ 95.310186][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 95.316381][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 95.321602][ C0] ? do_recvmmsg+0x870/0x870 [ 95.326192][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 95.331441][ C0] do_syscall_64+0x55/0xa0 [ 95.336141][ C0] ? clear_bhb_loop+0x40/0x90 [ 95.340817][ C0] ? clear_bhb_loop+0x40/0x90 [ 95.345516][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.351430][ C0] RIP: 0033:0x7f7f4bf9c799 [ 95.355853][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.375816][ C0] RSP: 002b:00007f7f4ce3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 95.384383][ C0] RAX: ffffffffffffffda RBX: 00007f7f4c216090 RCX: 00007f7f4bf9c799 [ 95.392408][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000004 [ 95.400488][ C0] RBP: 00007f7f4c032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 95.408570][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 95.416743][ C0] R13: 00007f7f4c216128 R14: 00007f7f4c216090 R15: 00007ffcaacaff68 [ 95.424916][ C0] [ 95.427947][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.435311][ C0] CPU: 0 PID: 5943 Comm: syz.0.30 Not tainted syzkaller #0 [ 95.442676][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.452908][ C0] Call Trace: [ 95.456375][ C0] [ 95.459301][ C0] dump_stack_lvl+0x18c/0x250 [ 95.464077][ C0] ? show_regs_print_info+0x20/0x20 [ 95.469359][ C0] ? load_image+0x400/0x400 [ 95.473962][ C0] panic+0x2dc/0x730 [ 95.477962][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 95.482576][ C0] __warn+0x2e0/0x470 [ 95.486556][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 95.492272][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 95.498174][ C0] report_bug+0x2be/0x4f0 [ 95.502696][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 95.508518][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 95.514334][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 95.520058][ C0] handle_bug+0xcf/0x120 [ 95.524318][ C0] exc_invalid_op+0x1a/0x50 [ 95.528905][ C0] asm_exc_invalid_op+0x1a/0x20 [ 95.534063][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 95.540473][ C0] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6 [ 95.560607][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 95.566698][ C0] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff888026b90000 [ 95.575381][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.583394][ C0] RBP: 0000000000000000 R08: ffff888026b90000 R09: 0000000000000003 [ 95.591535][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f5963c0 [ 95.600163][ C0] R13: dffffc0000000000 R14: ffff88805f5968b0 R15: ffff888030c7bc24 [ 95.608594][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 95.614344][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 95.620237][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 95.626152][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 95.632475][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 95.638128][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 95.644986][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 95.650991][ C0] __iterate_interfaces+0x243/0x500 [ 95.656367][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.663265][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 95.670602][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.677917][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 95.684984][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 95.690375][ C0] __hrtimer_run_queues+0x520/0xc40 [ 95.695594][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 95.701692][ C0] ? hw_scan_work+0xf60/0xf60 [ 95.706407][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 95.711738][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 95.717846][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 95.723066][ C0] handle_softirqs+0x280/0x820 [ 95.727928][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 95.733217][ C0] ? do_softirq+0x1a0/0x1a0 [ 95.737994][ C0] __irq_exit_rcu+0xd3/0x190 [ 95.742585][ C0] ? irq_exit_rcu+0x20/0x20 [ 95.747103][ C0] irq_exit_rcu+0x9/0x20 [ 95.751370][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 95.757265][ C0] [ 95.760201][ C0] [ 95.763238][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.769324][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 95.774965][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 95.794912][ C0] RSP: 0018:ffffc90004cf7900 EFLAGS: 00000206 [ 95.801112][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 16aa19d27c8f3100 [ 95.810003][ C0] RDX: 0000000000000000 RSI: ffffffff8acadae0 RDI: ffffffff8b1c85a0 [ 95.818130][ C0] RBP: ffffc90004cf7a08 R08: dffffc0000000000 R09: 1ffffffff22382a6 [ 95.826501][ C0] R10: dffffc0000000000 R11: fffffbfff22382a7 R12: 1ffff9200099ef2c [ 95.835097][ C0] R13: ffff8880248701a0 R14: 0000000000000246 R15: dffffc0000000000 [ 95.843373][ C0] ? __might_sleep+0xe0/0xe0 [ 95.848059][ C0] ? read_lock_is_recursive+0x20/0x20 [ 95.853913][ C0] ? verify_lock_unused+0x140/0x140 [ 95.859290][ C0] ? __might_fault+0xaa/0x120 [ 95.864227][ C0] __might_fault+0xc6/0x120 [ 95.869083][ C0] ? __might_fault+0xaa/0x120 [ 95.873801][ C0] _copy_from_user+0x2a/0xe0 [ 95.878399][ C0] ___sys_recvmsg+0x176/0x590 [ 95.883117][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 95.888055][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 95.893108][ C0] ? __might_fault+0xc6/0x120 [ 95.897888][ C0] ? __might_fault+0xaa/0x120 [ 95.902940][ C0] do_recvmmsg+0x39a/0x870 [ 95.907418][ C0] ? __sys_recvmmsg+0x290/0x290 [ 95.912369][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 95.918460][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 95.923613][ C0] ? do_recvmmsg+0x870/0x870 [ 95.928262][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 95.933827][ C0] do_syscall_64+0x55/0xa0 [ 95.938425][ C0] ? clear_bhb_loop+0x40/0x90 [ 95.943097][ C0] ? clear_bhb_loop+0x40/0x90 [ 95.948009][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.954110][ C0] RIP: 0033:0x7f7f4bf9c799 [ 95.958542][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.978440][ C0] RSP: 002b:00007f7f4ce3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 95.986874][ C0] RAX: ffffffffffffffda RBX: 00007f7f4c216090 RCX: 00007f7f4bf9c799 [ 95.994960][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000004 [ 96.003017][ C0] RBP: 00007f7f4c032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 96.011191][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 96.019441][ C0] R13: 00007f7f4c216128 R14: 00007f7f4c216090 R15: 00007ffcaacaff68 [ 96.027508][ C0] [ 96.031132][ C0] Kernel Offset: disabled [ 96.035599][ C0] Rebooting in 86400 seconds..