last executing test programs: 15.930467088s ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 15.51478255s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 15.200438494s ago: executing program 2 (id=10): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r5], 0x44}}, 0x8000) 14.874149072s ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 14.774782085s ago: executing program 2 (id=13): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) creat(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x85, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xfff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) fsopen(0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) 12.013255604s ago: executing program 3 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x38, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x38}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 11.404724402s ago: executing program 2 (id=19): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 8.242347764s ago: executing program 4 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 8.192042913s ago: executing program 2 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x34}}, 0x80) 8.097163741s ago: executing program 3 (id=25): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 7.801236789s ago: executing program 1 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 6.715097632s ago: executing program 4 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @multicast2}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r7, 0x200004) fsopen(0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 6.422315001s ago: executing program 2 (id=28): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x10010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b0000", @ANYRES32=0x0], 0x28}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x0, 0x1}, {0x45, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000004c0)={0x2, {{0x2, 0x4e20, @empty}}, 0x1, 0x7, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}]}, 0x410) 6.277714873s ago: executing program 3 (id=29): syz_open_dev$media(0x0, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 6.128293476s ago: executing program 0 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_emit_ethernet(0x262, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd69000000022c06fffe8000000000000000000000000000aaff01000000000000000000000000000138000971650000003b0801"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000140)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', r4, r3, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x4008800) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x18) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r8 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) 5.247418582s ago: executing program 4 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @multicast2}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r7, 0x200004) fsopen(0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 4.951849796s ago: executing program 2 (id=32): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 4.141656108s ago: executing program 4 (id=33): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r5], 0x44}}, 0x8000) 4.082490012s ago: executing program 1 (id=34): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 3.899524015s ago: executing program 1 (id=35): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xad356f19b320d40b) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000c40)="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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) 3.819394829s ago: executing program 3 (id=36): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) 3.732862485s ago: executing program 0 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3.602345367s ago: executing program 0 (id=38): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cfffffffffddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200640b0a000200aaaaaaaaaabb00000c000e8005000100"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=ANY=[], 0x50}}, 0x40008014) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.469893767s ago: executing program 4 (id=39): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x10800}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe4, 0x4}}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x24000001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.681709737s ago: executing program 0 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xfffffffffffffce6, 0x0, &(0x7f0000000100)="ff412f66b0833efc792e968781", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) 2.546271593s ago: executing program 1 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 1.461730498s ago: executing program 4 (id=42): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) creat(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x85, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xfff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) fsopen(0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) 1.41801038s ago: executing program 0 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x110, 0xffffffffffffffff, 0x28658000) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 1.109783577s ago: executing program 1 (id=44): syz_open_dev$media(0x0, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 0s ago: executing program 0 (id=45): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "ff918db4b2ea864f5815795e5c517b777bf7d391e3a422329473449b6549c7ed", "1a324626a66fea4c37e166fb9b76dbb0b34a4b52c396450339b98a84de4a9567", "b767d3283bdd19a0bac6fc57d24dc8ec638ab26a47bc5f7cf96061a759cdef6c", "bea2a66f7ab0e327991883899b8aa68cbdb0cdcc65ba8de2a80f983f3bc5c9b5", "bf445359f87c8d9d44597e290cfd1c5ef93ac3eabc63287ff01f140e67ad238a", "7fb9d290634203eb8f9ca834", 0x8, 0x7fff, 0x6, 0x5, 0x6}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x888e, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getroute={0x14, 0x1a, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008900) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf2501000000959cfe49db43ecd9e5c1cc7b27dd3ea0269ddc7e0ab9ef402e183fd70fbc30d790d81140829956d3a94cb14eef53d99e61c72b8f8a98750adb44e5cfa551d718db35ccf072"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 83.773616][ T5822] cgroup: Unknown subsys name 'net' [ 83.988312][ T5822] cgroup: Unknown subsys name 'cpuset' [ 83.997538][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.623172][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.549976][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.558170][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.566352][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.572034][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.573863][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.588280][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.596480][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.604739][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.604815][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.613622][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.619417][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.627094][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.633509][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.648399][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.655606][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.662903][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.670822][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.678252][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.688864][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.696106][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.703425][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.711939][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.719375][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.724880][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.733667][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.188869][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 90.464302][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 90.555956][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.563297][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.571811][ T5833] bridge_slave_0: entered allmulticast mode [ 90.579235][ T5833] bridge_slave_0: entered promiscuous mode [ 90.632648][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.660917][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.668241][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.678582][ T5833] bridge_slave_1: entered allmulticast mode [ 90.686298][ T5833] bridge_slave_1: entered promiscuous mode [ 90.767405][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.821035][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.838018][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.846562][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.853703][ T5847] bridge_slave_0: entered allmulticast mode [ 90.862283][ T5847] bridge_slave_0: entered promiscuous mode [ 90.892696][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.935114][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.942402][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.950387][ T5847] bridge_slave_1: entered allmulticast mode [ 90.959203][ T5847] bridge_slave_1: entered promiscuous mode [ 90.982411][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.028935][ T5833] team0: Port device team_slave_0 added [ 91.038283][ T5833] team0: Port device team_slave_1 added [ 91.059874][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.076647][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.083852][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.091143][ T5838] bridge_slave_0: entered allmulticast mode [ 91.098602][ T5838] bridge_slave_0: entered promiscuous mode [ 91.125630][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.170773][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.178807][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.186705][ T5838] bridge_slave_1: entered allmulticast mode [ 91.193901][ T5838] bridge_slave_1: entered promiscuous mode [ 91.267439][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.274742][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.301991][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.317262][ T5847] team0: Port device team_slave_0 added [ 91.332492][ T5847] team0: Port device team_slave_1 added [ 91.365390][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.372366][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.398364][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.430331][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.443128][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.452652][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.460540][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.467828][ T5837] bridge_slave_0: entered allmulticast mode [ 91.475566][ T5837] bridge_slave_0: entered promiscuous mode [ 91.516575][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.523551][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.549800][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.588228][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.595985][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.603114][ T5837] bridge_slave_1: entered allmulticast mode [ 91.611043][ T5837] bridge_slave_1: entered promiscuous mode [ 91.643071][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.650195][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.676303][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.695028][ T51] Bluetooth: hci0: command tx timeout [ 91.697980][ T5838] team0: Port device team_slave_0 added [ 91.709634][ T5838] team0: Port device team_slave_1 added [ 91.728024][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.735496][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.742618][ T5834] bridge_slave_0: entered allmulticast mode [ 91.750275][ T5834] bridge_slave_0: entered promiscuous mode [ 91.758650][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.767118][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.768471][ T9] cfg80211: failed to load regulatory.db [ 91.774562][ T51] Bluetooth: hci4: command tx timeout [ 91.784149][ T5841] Bluetooth: hci3: command tx timeout [ 91.785850][ T51] Bluetooth: hci1: command tx timeout [ 91.797902][ T5834] bridge_slave_1: entered allmulticast mode [ 91.805911][ T5834] bridge_slave_1: entered promiscuous mode [ 91.844312][ T51] Bluetooth: hci2: command tx timeout [ 91.871183][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.911026][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.918358][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.944699][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.958464][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.965629][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.991643][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.005675][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.049180][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.061724][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.076918][ T5833] hsr_slave_0: entered promiscuous mode [ 92.083432][ T5833] hsr_slave_1: entered promiscuous mode [ 92.154744][ T5837] team0: Port device team_slave_0 added [ 92.166598][ T5847] hsr_slave_0: entered promiscuous mode [ 92.172944][ T5847] hsr_slave_1: entered promiscuous mode [ 92.179261][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.187162][ T5847] Cannot create hsr debugfs directory [ 92.224725][ T5837] team0: Port device team_slave_1 added [ 92.233849][ T5834] team0: Port device team_slave_0 added [ 92.242140][ T5834] team0: Port device team_slave_1 added [ 92.345158][ T5838] hsr_slave_0: entered promiscuous mode [ 92.351462][ T5838] hsr_slave_1: entered promiscuous mode [ 92.357740][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.365403][ T5838] Cannot create hsr debugfs directory [ 92.389468][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.396628][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.423637][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.435899][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.442881][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.470763][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.483747][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.490955][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.517007][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.542325][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.549426][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.575701][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.711256][ T5834] hsr_slave_0: entered promiscuous mode [ 92.718391][ T5834] hsr_slave_1: entered promiscuous mode [ 92.724921][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.732497][ T5834] Cannot create hsr debugfs directory [ 92.848040][ T5837] hsr_slave_0: entered promiscuous mode [ 92.855377][ T5837] hsr_slave_1: entered promiscuous mode [ 92.861426][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.869075][ T5837] Cannot create hsr debugfs directory [ 93.147461][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.191494][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.235263][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.259259][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.330191][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.346490][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.380070][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.390692][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.465716][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.492294][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.509066][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.540247][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.586793][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.599354][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.611203][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.622333][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.771129][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.774523][ T51] Bluetooth: hci0: command tx timeout [ 93.795803][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.808972][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.831193][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.844636][ T51] Bluetooth: hci3: command tx timeout [ 93.844654][ T5848] Bluetooth: hci1: command tx timeout [ 93.850064][ T51] Bluetooth: hci4: command tx timeout [ 93.868771][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.889729][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.915610][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.922862][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.931652][ T51] Bluetooth: hci2: command tx timeout [ 93.943353][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.968547][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.975705][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.059414][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.102001][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.109159][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.123343][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.162550][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.173311][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.180464][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.217705][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.280497][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.287691][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.311900][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.330578][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.337782][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.368818][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.375971][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.421735][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.428945][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.587830][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.669613][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.712926][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.720138][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.809199][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.816394][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.867708][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.946296][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.122616][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.142879][ T5833] veth0_vlan: entered promiscuous mode [ 95.170688][ T5847] veth0_vlan: entered promiscuous mode [ 95.230088][ T5847] veth1_vlan: entered promiscuous mode [ 95.251341][ T5833] veth1_vlan: entered promiscuous mode [ 95.347315][ T5833] veth0_macvtap: entered promiscuous mode [ 95.367858][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.380111][ T5833] veth1_macvtap: entered promiscuous mode [ 95.406120][ T5847] veth0_macvtap: entered promiscuous mode [ 95.438026][ T5847] veth1_macvtap: entered promiscuous mode [ 95.466297][ T5834] veth0_vlan: entered promiscuous mode [ 95.496954][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.535753][ T5834] veth1_vlan: entered promiscuous mode [ 95.548566][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.561001][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.579138][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.606569][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.616761][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.625634][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.634794][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.659820][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.728309][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.739358][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.748683][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.757856][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.802358][ T5834] veth0_macvtap: entered promiscuous mode [ 95.846742][ T51] Bluetooth: hci0: command tx timeout [ 95.893158][ T5834] veth1_macvtap: entered promiscuous mode [ 95.923356][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.931776][ T51] Bluetooth: hci1: command tx timeout [ 95.934349][ T5848] Bluetooth: hci3: command tx timeout [ 95.939625][ T51] Bluetooth: hci4: command tx timeout [ 95.955242][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.006165][ T51] Bluetooth: hci2: command tx timeout [ 96.016273][ T5837] veth0_vlan: entered promiscuous mode [ 96.028091][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.042126][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.055834][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.072934][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.091235][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.102380][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.111865][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.120788][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.148922][ T5837] veth1_vlan: entered promiscuous mode [ 96.193027][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.267894][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.290655][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.362478][ T5838] veth0_vlan: entered promiscuous mode [ 96.407095][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.418545][ T5838] veth1_vlan: entered promiscuous mode [ 96.432008][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.503764][ T5837] veth0_macvtap: entered promiscuous mode [ 96.530757][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.547304][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.571205][ T5838] veth0_macvtap: entered promiscuous mode [ 96.590019][ T5837] veth1_macvtap: entered promiscuous mode [ 96.630643][ T5838] veth1_macvtap: entered promiscuous mode [ 96.762442][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.859615][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.885143][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.893233][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.927023][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.966917][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.022165][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.034046][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.045648][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.514599][ T5961] xt_CT: No such helper "netbios-ns" [ 97.719919][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.766199][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.775106][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.783830][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.792658][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.925499][ T51] Bluetooth: hci0: command tx timeout [ 97.952091][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.004237][ T51] Bluetooth: hci4: command tx timeout [ 98.004818][ T5841] Bluetooth: hci3: command tx timeout [ 98.010996][ T51] Bluetooth: hci1: command tx timeout [ 98.018294][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.088345][ T51] Bluetooth: hci2: command tx timeout [ 98.131552][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.161430][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.202949][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.228787][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.341255][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.367541][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.525492][ T5975] Zero length message leads to an empty skb [ 98.648836][ T5975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.743817][ T5981] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 98.801979][ T5975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.816317][ T5983] openvswitch: netlink: Duplicate or invalid key (type 0). [ 98.831099][ T5983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.978535][ T5975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.244542][ T5975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.363289][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 99.402952][ T5994] loop2: detected capacity change from 0 to 512 [ 99.504876][ T5996] loop3: detected capacity change from 0 to 512 [ 99.636622][ T5996] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.651089][ T5996] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.393930][ T5996] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.408228][ T5996] EXT4-fs (loop3): 1 truncate cleaned up [ 100.415793][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.821201][ T5994] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.877467][ T5994] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 102.383441][ T5994] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 102.385410][ T5994] EXT4-fs: failed to create workqueue [ 102.400851][ T5994] EXT4-fs (loop2): mount failed [ 102.760644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.804487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.805624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 102.827557][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.501481][ T5975] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.592263][ T5975] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.613199][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 103.633466][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 103.638425][ T5975] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.786552][ T6016] bond_slave_0: entered promiscuous mode [ 103.792580][ T6016] bond_slave_1: entered promiscuous mode [ 103.845246][ T6016] macsec1: entered allmulticast mode [ 103.850601][ T6016] bond0: entered allmulticast mode [ 103.856302][ T6016] bond_slave_0: entered allmulticast mode [ 103.862058][ T6016] bond_slave_1: entered allmulticast mode [ 103.891730][ T6016] bond0: left allmulticast mode [ 103.896826][ T6016] bond_slave_0: left allmulticast mode [ 103.902467][ T6016] bond_slave_1: left allmulticast mode [ 103.913238][ T6016] bond_slave_0: left promiscuous mode [ 103.918779][ T6016] bond_slave_1: left promiscuous mode [ 104.020137][ T6022] loop4: detected capacity change from 0 to 512 [ 104.046698][ T6022] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.121145][ T6022] EXT4-fs (loop4): 1 truncate cleaned up [ 104.137062][ T6022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.947369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.956323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.974633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.631008][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.701433][ T5975] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.864486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.873087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.881738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.302155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.987719][ T6035] xt_CT: No such helper "netbios-ns" [ 107.830152][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 107.843644][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 108.717029][ T6048] team_slave_0: entered promiscuous mode [ 108.722855][ T6048] team_slave_1: entered promiscuous mode [ 108.912691][ T6048] macsec1: entered allmulticast mode [ 108.921372][ T6048] team0: entered allmulticast mode [ 109.604723][ T6048] team_slave_0: entered allmulticast mode [ 109.610677][ T6048] team_slave_1: entered allmulticast mode [ 109.831841][ T6048] team0: left allmulticast mode [ 109.859710][ T6048] team_slave_0: left allmulticast mode [ 109.903375][ T6048] team_slave_1: left allmulticast mode [ 109.935830][ T6048] team_slave_0: left promiscuous mode [ 109.941307][ T6048] team_slave_1: left promiscuous mode [ 110.363044][ T6063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.465723][ T6079] ======================================================= [ 110.465723][ T6079] WARNING: The mand mount option has been deprecated and [ 110.465723][ T6079] and is ignored by this kernel. Remove the mand [ 110.465723][ T6079] option from the mount to silence this warning. [ 110.465723][ T6079] ======================================================= [ 111.069473][ T6069] tap0: tun_chr_ioctl cmd 1074025677 [ 111.083788][ T6069] tap0: linktype set to 0 [ 111.096524][ T6079] lo speed is unknown, defaulting to 1000 [ 111.131337][ T6079] lo speed is unknown, defaulting to 1000 [ 111.139168][ T6079] lo speed is unknown, defaulting to 1000 [ 111.210909][ T6063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.264469][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.393884][ T6063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.597294][ T6079] infiniband sz1: set active [ 111.602174][ T6079] infiniband sz1: added lo [ 111.635613][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.753630][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.267649][ T6079] RDS/IB: sz1: added [ 112.272223][ T6079] smc: adding ib device sz1 with port count 1 [ 112.278636][ T6079] smc: ib device sz1 port 1 has pnetid [ 112.429231][ T5908] lo speed is unknown, defaulting to 1000 [ 112.436612][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.455022][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.473307][ T6082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.498486][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.563413][ T6100] loop4: detected capacity change from 0 to 512 [ 112.573099][ T6063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.738390][ T6079] lo speed is unknown, defaulting to 1000 [ 112.842252][ T5842] lo speed is unknown, defaulting to 1000 [ 112.856791][ T6100] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.881857][ T6100] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 113.877959][ T6100] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 113.893148][ T6079] lo speed is unknown, defaulting to 1000 [ 114.058303][ T6079] lo speed is unknown, defaulting to 1000 [ 114.224268][ T6079] lo speed is unknown, defaulting to 1000 [ 114.290148][ C0] ------------[ cut here ]------------ [ 114.295920][ C0] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#0: swapper/0/0 [ 114.306265][ C0] Modules linked in: [ 114.310317][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 114.321485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.331616][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 114.338010][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 114.357697][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 114.363793][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffffffff8de95280 [ 114.371824][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.379850][ C0] RBP: 0000000000000000 R08: ffffffff8de95280 R09: 0000000000000003 [ 114.387865][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888055c32500 [ 114.395885][ C0] R13: dffffc0000000000 R14: ffff888055c329d0 R15: ffff888079739424 [ 114.403884][ C0] FS: 0000000000000000(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 114.412861][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.419482][ C0] CR2: 00007f2c4f395000 CR3: 0000000032684000 CR4: 00000000003526f0 [ 114.427504][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.435521][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.443512][ C0] Call Trace: [ 114.446850][ C0] [ 114.449722][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 114.455337][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 114.457873][ T6079] lo speed is unknown, defaulting to 1000 [ 114.460847][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 114.472687][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 114.478288][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 114.485540][ C0] __iterate_interfaces+0x2a8/0x590 [ 114.490775][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 114.496924][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 114.504172][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 114.510267][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 114.517350][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 114.522601][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 114.528468][ C0] __hrtimer_run_queues+0x529/0xc60 [ 114.533725][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 114.539498][ C0] ? read_tsc+0x9/0x20 [ 114.543600][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 114.549486][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 114.554649][ C0] handle_softirqs+0x283/0x870 [ 114.559476][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 114.564340][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 114.569672][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 114.574923][ C0] __irq_exit_rcu+0xca/0x1f0 [ 114.579544][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 114.584815][ C0] irq_exit_rcu+0x9/0x30 [ 114.589092][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 114.594782][ C0] [ 114.597760][ C0] [ 114.600715][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.606752][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 114.612525][ C0] Code: 03 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 75 1e 00 f3 0f 1e fa fb f4 d8 d3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 114.632182][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 114.638306][ C0] RAX: 25c2675f9734d100 RBX: ffffffff81975f78 RCX: 25c2675f9734d100 [ 114.646327][ C0] RDX: 0000000000000001 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 114.654340][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 114.662336][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa14ff0 [ 114.670357][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 114.678382][ C0] ? do_idle+0x1e8/0x510 [ 114.682664][ C0] default_idle+0x13/0x20 [ 114.687060][ C0] default_idle_call+0x74/0xb0 [ 114.691865][ C0] do_idle+0x1e8/0x510 [ 114.695988][ C0] ? __pfx_do_idle+0x10/0x10 [ 114.700607][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.705864][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 114.711787][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.718180][ C0] cpu_startup_entry+0x44/0x60 [ 114.722965][ C0] rest_init+0x2de/0x300 [ 114.727392][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 114.732986][ C0] start_kernel+0x47d/0x500 [ 114.737557][ C0] x86_64_start_reservations+0x24/0x30 [ 114.743057][ C0] x86_64_start_kernel+0x143/0x1c0 [ 114.748237][ C0] common_startup_64+0x13e/0x147 [ 114.753223][ C0] [ 114.756300][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.763684][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 114.774804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.784868][ C0] Call Trace: [ 114.788153][ C0] [ 114.791005][ C0] dump_stack_lvl+0x99/0x250 [ 114.795608][ C0] ? __asan_memcpy+0x40/0x70 [ 114.800208][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.805419][ C0] ? __pfx__printk+0x10/0x10 [ 114.810050][ C0] panic+0x2db/0x790 [ 114.813984][ C0] ? __pfx_panic+0x10/0x10 [ 114.818449][ C0] ? common_startup_64+0x13e/0x147 [ 114.823683][ C0] __warn+0x334/0x4c0 [ 114.827681][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 114.833418][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 114.839140][ C0] report_bug+0x2be/0x4f0 [ 114.843474][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 114.849198][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 114.854920][ C0] ? __ieee80211_beacon_get+0x125f/0x1630 [ 114.860640][ C0] handle_bug+0x84/0x160 [ 114.864891][ C0] exc_invalid_op+0x1a/0x50 [ 114.869410][ C0] asm_exc_invalid_op+0x1a/0x20 [ 114.874258][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 114.880600][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 114.900349][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 114.906426][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffffffff8de95280 [ 114.914409][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.922394][ C0] RBP: 0000000000000000 R08: ffffffff8de95280 R09: 0000000000000003 [ 114.930453][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888055c32500 [ 114.938433][ C0] R13: dffffc0000000000 R14: ffff888055c329d0 R15: ffff888079739424 [ 114.946435][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 114.952000][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 114.957732][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 114.963458][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 114.969125][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 114.974605][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 114.980688][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 114.986243][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 114.993444][ C0] __iterate_interfaces+0x2a8/0x590 [ 114.998657][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.004769][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.012016][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.018129][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 115.025190][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 115.030420][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 115.036260][ C0] __hrtimer_run_queues+0x529/0xc60 [ 115.041481][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 115.047211][ C0] ? read_tsc+0x9/0x20 [ 115.051303][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 115.057126][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 115.062259][ C0] handle_softirqs+0x283/0x870 [ 115.067039][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 115.071823][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 115.077136][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 115.082373][ C0] __irq_exit_rcu+0xca/0x1f0 [ 115.086981][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 115.092216][ C0] irq_exit_rcu+0x9/0x30 [ 115.096469][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 115.102133][ C0] [ 115.105090][ C0] [ 115.108030][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.114063][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 115.119822][ C0] Code: 03 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 75 1e 00 f3 0f 1e fa fb f4 d8 d3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 115.139456][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 115.145627][ C0] RAX: 25c2675f9734d100 RBX: ffffffff81975f78 RCX: 25c2675f9734d100 [ 115.153608][ C0] RDX: 0000000000000001 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 115.161600][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 115.169577][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa14ff0 [ 115.177552][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 115.185530][ C0] ? do_idle+0x1e8/0x510 [ 115.189802][ C0] default_idle+0x13/0x20 [ 115.194139][ C0] default_idle_call+0x74/0xb0 [ 115.198944][ C0] do_idle+0x1e8/0x510 [ 115.203031][ C0] ? __pfx_do_idle+0x10/0x10 [ 115.207617][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.212828][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 115.218751][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 115.225090][ C0] cpu_startup_entry+0x44/0x60 [ 115.229865][ C0] rest_init+0x2de/0x300 [ 115.234120][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 115.239685][ C0] start_kernel+0x47d/0x500 [ 115.244237][ C0] x86_64_start_reservations+0x24/0x30 [ 115.249723][ C0] x86_64_start_kernel+0x143/0x1c0 [ 115.254840][ C0] common_startup_64+0x13e/0x147 [ 115.259800][ C0] [ 115.263254][ C0] Kernel Offset: disabled [ 115.267583][ C0] Rebooting in 86400 seconds..