last executing test programs: 16.162533273s ago: executing program 3 (id=8): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@gettaction={0x94, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r5, r7, 0x9, 0x7, 0x1}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x3], 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x9], &(0x7f0000000400)}) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 15.684497576s ago: executing program 2 (id=9): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@gettaction={0xd0, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r5, r7, 0x9, 0x7, 0x1}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x3], 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x9], &(0x7f0000000400)}) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 13.320784931s ago: executing program 2 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 13.230405571s ago: executing program 3 (id=13): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000040), 0x55, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004080) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x14) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x859, &(0x7f0000001280)={0x0, 0xfad3, 0x800, 0xfffffffc, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) 10.217078692s ago: executing program 3 (id=17): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x25, 0xfa00, {0x1, 0x0, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0xf8, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r6 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 9.382660375s ago: executing program 4 (id=18): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 8.310332696s ago: executing program 4 (id=19): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) keyctl$read(0x20, 0x0, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) accept4(r3, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000200)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x208, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xdaf2}, {0x8, 0x13, 0xd9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x274000}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfff3}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0x80000000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x8127}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf5}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=0x0, @ANYBLOB='\f\x00'/12], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000000c0)=']){%%)^&!+)\x00', &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030000000000000000000001"], 0x48}}, 0x0) 8.305203319s ago: executing program 3 (id=20): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 8.183211111s ago: executing program 2 (id=21): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) socket(0x1d, 0x2, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140)=0xff, r1, &(0x7f00000001c0)=0x4, 0x4, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x4000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, 0x0) socket$inet6(0xa, 0x0, 0x7f1) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) fsopen(&(0x7f0000000200)='vxfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001840)='environ\x00') 8.004361565s ago: executing program 4 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x90003, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000e00)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="443e229aa1ef302c5e000000000000000a0000000400000014000100ff01000000000000000000000000000115000280bf74a7dffdd8f8331ba40dfabcc81c750e000000"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x30, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {0x4, 0xf}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x800) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) r10 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000020000009b2d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004001d3c00"/28], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 6.632947051s ago: executing program 0 (id=24): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000480)=[0x2], 0x0, &(0x7f0000000040), 0x0, 0x8}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x2, 0x3}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x97}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x400c0d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 6.632568897s ago: executing program 1 (id=25): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x90003, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000e00)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="443e229aa1ef302c5e000000000000000a0000000400000014000100ff01000000000000000000000000000115000280bf74a7dffdd8f8331ba40dfabcc81c750e000000"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x30, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {0x4, 0xf}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x800) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) r10 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000020000009b2d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004001d3c00"/28], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 5.192012615s ago: executing program 4 (id=26): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 5.128926348s ago: executing program 0 (id=27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000003640)}}], 0x1, 0x4040001) r2 = dup(r0) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r2) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) 4.929094717s ago: executing program 2 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.887309833s ago: executing program 1 (id=29): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x6, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.837986677s ago: executing program 4 (id=30): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@gettaction={0x94, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r5, r7, 0x9, 0x7, 0x1}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x3], 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x9], &(0x7f0000000400)}) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 4.712971226s ago: executing program 0 (id=31): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@gettaction={0xd0, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r5, r7, 0x9, 0x7, 0x1}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x3], 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x9], &(0x7f0000000400)}) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 3.80688862s ago: executing program 3 (id=32): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 3.8041103s ago: executing program 2 (id=42): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000040), 0x55, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004080) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x14) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x859, &(0x7f0000001280)={0x0, 0xfad3, 0x800, 0xfffffffc, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) 3.13438561s ago: executing program 1 (id=33): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x124, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2b, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf7750101284"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.851084304s ago: executing program 0 (id=34): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1ac, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x150, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xe4, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0xb2, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca0407429934982873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2b45bd165ebd7929c21abcdf0b8d47ff6a950009bf4b1ef96863b19aaa1c52a12b02f39c0816b2c6136341ed251c3b6f6af9385e3d242e39802d1054758f1fecd4810c086a3ef4c0b3354522333a981"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.696749836s ago: executing program 1 (id=35): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c1a9ecbf09d6dd7be5a06dfd645630500c1a30343b1da111b5a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112c50cc", 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="0201000202ffff948ebd700000000000"], 0x10}, 0x19}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.589999897s ago: executing program 4 (id=36): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 2.418879195s ago: executing program 0 (id=37): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x1, 0xf06, 0x3, 0x6d, 0x7f, 0x9}, 0x9c) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000002040)={0x14}, 0x14) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r3, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r8 = socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0) 1.488860187s ago: executing program 1 (id=38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x48}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="050053"], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x10) write$cgroup_int(r5, &(0x7f0000000000)=0x2b00, 0x12) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x6, 0x0, 0x2, "f9090800"}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x8000000) r8 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r8, 0x1, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) 1.22788639s ago: executing program 0 (id=39): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) socket(0x1d, 0x2, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140)=0xff, r1, &(0x7f00000001c0)=0x4, 0x4, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x4000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, 0x0) socket$inet6(0xa, 0x0, 0x7f1) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) fsopen(&(0x7f0000000200)='vxfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001840)='environ\x00') 139.612264ms ago: executing program 2 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x90003, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000e00)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="443e229aa1ef302c5e000000000000000a0000000400000014000100ff01000000000000000000000000000115000280bf74a7dffdd8f8331ba40dfabcc81c750e000000"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x30, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {0x4, 0xf}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x800) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) r10 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000020000009b2d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004001d3c00"/28], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 138.531909ms ago: executing program 1 (id=51): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) io_uring_setup(0x5ea4, &(0x7f0000019080)={0x0, 0xdf4, 0x400, 0x0, 0x4032a}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 0s ago: executing program 3 (id=41): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 82.029520][ T5851] cgroup: Unknown subsys name 'net' [ 82.160906][ T5851] cgroup: Unknown subsys name 'cpuset' [ 82.170717][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.854934][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.510800][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.520341][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.528696][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.542914][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.550846][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.559511][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.568166][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.576905][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.585617][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.616436][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.628747][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.636561][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.650218][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.656682][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.658067][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.671360][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.673582][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.679422][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.687049][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.700690][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.707228][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.715908][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.731192][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.741042][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.758754][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.543941][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 87.653889][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 87.701543][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 87.810150][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 87.897787][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.905709][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.917140][ T5877] bridge_slave_0: entered allmulticast mode [ 87.924928][ T5877] bridge_slave_0: entered promiscuous mode [ 87.978936][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.988725][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.995945][ T5877] bridge_slave_1: entered allmulticast mode [ 88.003409][ T5877] bridge_slave_1: entered promiscuous mode [ 88.088035][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 88.118188][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.125463][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.132923][ T5879] bridge_slave_0: entered allmulticast mode [ 88.141102][ T5879] bridge_slave_0: entered promiscuous mode [ 88.157433][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.188098][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.195327][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.202725][ T5879] bridge_slave_1: entered allmulticast mode [ 88.210790][ T5879] bridge_slave_1: entered promiscuous mode [ 88.235889][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.332200][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.339733][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.347245][ T5884] bridge_slave_0: entered allmulticast mode [ 88.354904][ T5884] bridge_slave_0: entered promiscuous mode [ 88.398376][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.405568][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.413015][ T5882] bridge_slave_0: entered allmulticast mode [ 88.421724][ T5882] bridge_slave_0: entered promiscuous mode [ 88.431269][ T5877] team0: Port device team_slave_0 added [ 88.440347][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.448143][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.455350][ T5884] bridge_slave_1: entered allmulticast mode [ 88.462942][ T5884] bridge_slave_1: entered promiscuous mode [ 88.478158][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.487787][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.494890][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.502486][ T5882] bridge_slave_1: entered allmulticast mode [ 88.510047][ T5882] bridge_slave_1: entered promiscuous mode [ 88.535232][ T5877] team0: Port device team_slave_1 added [ 88.576939][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.648179][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.690790][ T5879] team0: Port device team_slave_0 added [ 88.699684][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.710565][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.717872][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.744348][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.755551][ T5864] Bluetooth: hci0: command tx timeout [ 88.756213][ T5864] Bluetooth: hci4: command tx timeout [ 88.766207][ T5867] Bluetooth: hci1: command tx timeout [ 88.778721][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.826245][ T5868] Bluetooth: hci3: command tx timeout [ 88.826252][ T5864] Bluetooth: hci2: command tx timeout [ 88.828293][ T5879] team0: Port device team_slave_1 added [ 88.861308][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.871463][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.878611][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.904818][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.929867][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.939794][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.947160][ T5883] bridge_slave_0: entered allmulticast mode [ 88.954416][ T5883] bridge_slave_0: entered promiscuous mode [ 89.013152][ T5884] team0: Port device team_slave_0 added [ 89.022197][ T5884] team0: Port device team_slave_1 added [ 89.028981][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.036279][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.043546][ T5883] bridge_slave_1: entered allmulticast mode [ 89.050906][ T5883] bridge_slave_1: entered promiscuous mode [ 89.074714][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.081763][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.107859][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.120908][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.127991][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.155102][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.168181][ T5882] team0: Port device team_slave_0 added [ 89.177887][ T5882] team0: Port device team_slave_1 added [ 89.264719][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.278374][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.303731][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.310928][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.337063][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.349119][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.356539][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.383163][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.455419][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.462958][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.489986][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.502018][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.509718][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.536359][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.549290][ T5883] team0: Port device team_slave_0 added [ 89.575586][ T5877] hsr_slave_0: entered promiscuous mode [ 89.582298][ T5877] hsr_slave_1: entered promiscuous mode [ 89.614334][ T5883] team0: Port device team_slave_1 added [ 89.639531][ T5879] hsr_slave_0: entered promiscuous mode [ 89.646298][ T5879] hsr_slave_1: entered promiscuous mode [ 89.653133][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 89.659113][ T5879] Cannot create hsr debugfs directory [ 89.755603][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.763073][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.790156][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.803153][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.810431][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.836572][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.962343][ T5882] hsr_slave_0: entered promiscuous mode [ 89.975682][ T5882] hsr_slave_1: entered promiscuous mode [ 89.985551][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 89.991635][ T5882] Cannot create hsr debugfs directory [ 90.009783][ T5884] hsr_slave_0: entered promiscuous mode [ 90.016436][ T5884] hsr_slave_1: entered promiscuous mode [ 90.022602][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 90.028595][ T5884] Cannot create hsr debugfs directory [ 90.151080][ T5883] hsr_slave_0: entered promiscuous mode [ 90.158780][ T5883] hsr_slave_1: entered promiscuous mode [ 90.165151][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 90.171579][ T5883] Cannot create hsr debugfs directory [ 90.655410][ T5879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.695909][ T5879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.709336][ T5879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.725539][ T5879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.803266][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.815741][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.826663][ T5868] Bluetooth: hci1: command tx timeout [ 90.826686][ T5864] Bluetooth: hci0: command tx timeout [ 90.832392][ T5867] Bluetooth: hci4: command tx timeout [ 90.849899][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.867388][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.906378][ T5868] Bluetooth: hci3: command tx timeout [ 90.911945][ T5867] Bluetooth: hci2: command tx timeout [ 90.975790][ T5882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.997979][ T5882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.015455][ T5882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.043749][ T5882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.138115][ T5884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.153380][ T5884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.193243][ T5884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.205088][ T5884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.311526][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.324684][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.350967][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.367784][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.388129][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.492518][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.504358][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.530503][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.537941][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.570559][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.577795][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.599280][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.640781][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.698610][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.705804][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.727358][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.751718][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.775730][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.782937][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.795655][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.802838][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.813764][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.820949][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.884619][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.922586][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.929792][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.983830][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.991052][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.049525][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.079469][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.183679][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.208184][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.215449][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.245276][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.260679][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.268206][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.288049][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.395383][ T5879] veth0_vlan: entered promiscuous mode [ 92.421900][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.435313][ T5879] veth1_vlan: entered promiscuous mode [ 92.521078][ T5882] veth0_vlan: entered promiscuous mode [ 92.550506][ T5877] veth0_vlan: entered promiscuous mode [ 92.579764][ T5877] veth1_vlan: entered promiscuous mode [ 92.604369][ T5882] veth1_vlan: entered promiscuous mode [ 92.634487][ T5879] veth0_macvtap: entered promiscuous mode [ 92.660886][ T5884] veth0_vlan: entered promiscuous mode [ 92.679522][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.687863][ T5879] veth1_macvtap: entered promiscuous mode [ 92.707163][ T5884] veth1_vlan: entered promiscuous mode [ 92.747482][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.781589][ T5882] veth0_macvtap: entered promiscuous mode [ 92.793585][ T5877] veth0_macvtap: entered promiscuous mode [ 92.802698][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.822899][ T5882] veth1_macvtap: entered promiscuous mode [ 92.861489][ T3076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.881193][ T5877] veth1_macvtap: entered promiscuous mode [ 92.893513][ T3076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.903103][ T3076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.907085][ T5868] Bluetooth: hci0: command tx timeout [ 92.916262][ T5867] Bluetooth: hci1: command tx timeout [ 92.917593][ T5864] Bluetooth: hci4: command tx timeout [ 92.943397][ T3076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.970470][ T5884] veth0_macvtap: entered promiscuous mode [ 92.981782][ T5883] veth0_vlan: entered promiscuous mode [ 92.987560][ T5864] Bluetooth: hci3: command tx timeout [ 92.993016][ T5864] Bluetooth: hci2: command tx timeout [ 93.001927][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.015668][ T5884] veth1_macvtap: entered promiscuous mode [ 93.035467][ T5883] veth1_vlan: entered promiscuous mode [ 93.054223][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.065647][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.082603][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.128918][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.138829][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.161444][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.171222][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.196040][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.223452][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.234606][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.290059][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.299868][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.314941][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.338269][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.355845][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.368294][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.401967][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.411365][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.442246][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.456799][ T5883] veth0_macvtap: entered promiscuous mode [ 93.482567][ T5883] veth1_macvtap: entered promiscuous mode [ 93.509917][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.530080][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.545435][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.614721][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.617815][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.636250][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.646036][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.691159][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.710033][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.769272][ T1315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.798287][ T1315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.821145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.843347][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.854769][ T1315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.870152][ T1315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.965809][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.990836][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.051549][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.080862][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.152585][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.192361][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.330807][ T5964] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 94.403257][ T5964] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 94.513918][ T5970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.522370][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.531640][ T5967] tipc: Enabling of bearer rejected, failed to enable media [ 94.548220][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.642296][ T5964] bond_slave_0: entered promiscuous mode [ 94.648493][ T5964] bond_slave_1: entered promiscuous mode [ 94.654315][ T5964] syz_tun: entered promiscuous mode [ 94.711951][ T5976] loop2: detected capacity change from 0 to 7 [ 94.747482][ T5976] Dev loop2: unable to read RDB block 7 [ 94.756452][ T5976] loop2: AHDI p3 [ 94.760177][ T5976] loop2: partition table partially beyond EOD, truncated [ 94.783844][ T5964] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.996496][ T5864] Bluetooth: hci1: command tx timeout [ 95.001981][ T5864] Bluetooth: hci4: command tx timeout [ 95.007531][ T5868] Bluetooth: hci0: command tx timeout [ 95.062423][ T5964] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 95.074145][ T5867] Bluetooth: hci2: command tx timeout [ 95.074635][ T5864] Bluetooth: hci3: command tx timeout [ 95.098212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.107156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.117078][ T5964] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 95.131232][ T5964] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 95.140956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.202801][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.310983][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.749002][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.963664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.257888][ T5987] : renamed from bridge_slave_0 (while UP) [ 96.366279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.375442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.687662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.982137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.083884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.093124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.289768][ T44] cfg80211: failed to load regulatory.db [ 97.362256][ T5998] : renamed from bridge_slave_0 (while UP) [ 98.084168][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.093407][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.102246][ T6006] netlink: 'syz.0.10': attribute type 14 has an invalid length. [ 98.111396][ T6006] netlink: 'syz.0.10': attribute type 11 has an invalid length. [ 98.188254][ T6006] Zero length message leads to an empty skb [ 99.147317][ T6016] loop2: detected capacity change from 0 to 7 [ 99.725580][ T6016] Dev loop2: unable to read RDB block 7 [ 99.883040][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.926214][ T6016] loop2: AHDI p3 [ 99.930191][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.947610][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.957448][ T6011] : renamed from bridge_slave_0 (while UP) [ 99.970909][ T6016] loop2: partition table partially beyond EOD, truncated [ 99.981070][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.082845][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.123592][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.415175][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.451822][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.493549][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.534239][ T5958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.643622][ T5958] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 101.500773][ T6028] fido_id[6028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.568436][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 101.577509][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 101.791847][ T6040] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 101.959042][ T6038] netlink: 'syz.1.15': attribute type 14 has an invalid length. [ 101.967781][ T6038] netlink: 'syz.1.15': attribute type 11 has an invalid length. [ 102.199221][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.461297][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 102.475977][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 102.488268][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 103.832759][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 105.271267][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 105.472455][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 105.482726][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 105.492733][ T6073] netlink: 'syz.0.24': attribute type 14 has an invalid length. [ 105.586206][ T6073] netlink: 'syz.0.24': attribute type 11 has an invalid length. [ 106.668303][ T6083] tipc: Enabling of bearer rejected, failed to enable media [ 107.421826][ T6096] : renamed from bridge_slave_0 (while UP) [ 111.585952][ T6135] ------------[ cut here ]------------ [ 111.591992][ T6135] WARNING: CPU: 1 PID: 6135 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 111.602060][ T6135] Modules linked in: [ 111.606250][ T6135] CPU: 1 UID: 0 PID: 6135 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 111.615577][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.626729][ T6135] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 111.633050][ T6135] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 a7 8c 00 cc e8 c2 18 cf f6 90 0f 0b 90 eb e1 e8 b7 18 cf f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 111.652816][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.659598][ T6135] RSP: 0018:ffffc9000affef70 EFLAGS: 00010287 [ 111.665695][ T6135] RAX: ffffffff8af094d9 RBX: ffff8880334ec000 RCX: 0000000000080000 [ 111.673910][ T6135] RDX: ffffc9000beba000 RSI: 000000000000039e RDI: 000000000000039f [ 111.682049][ T6135] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af08ff3 [ 111.690154][ T6135] R10: dffffc0000000000 R11: ffffed100669d831 R12: 1ffff1100669d80a [ 111.698219][ T6135] R13: ffff888020ed0e40 R14: 0000000000000001 R15: ffffffff8af08ff3 [ 111.706494][ T6135] FS: 0000000000000000(0000) GS:ffff888125d12000(0063) knlGS:00000000f54beb40 [ 111.715462][ T6135] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 111.722504][ T6135] CR2: 0000000080001080 CR3: 0000000030616000 CR4: 00000000003526f0 [ 111.731842][ T6135] Call Trace: [ 111.736191][ T6135] [ 111.739200][ T6135] rate_control_rate_init_all_links+0x109/0x1a0 [ 111.745601][ T6135] sta_apply_auth_flags+0x1c2/0x400 [ 111.751302][ T6135] sta_apply_parameters+0xe4b/0x15b0 [ 111.757131][ T6135] ieee80211_add_station+0x424/0x6a0 [ 111.762493][ T6135] rdev_add_station+0x108/0x290 [ 111.768011][ T6135] nl80211_new_station+0x1755/0x1b70 [ 111.773420][ T6135] ? __pfx_nl80211_new_station+0x10/0x10 [ 111.779577][ T6135] ? netdev_run_todo+0xe1d/0xea0 [ 111.784988][ T6135] ? nl80211_pre_doit+0x4f1/0x930 [ 111.790614][ T6135] genl_family_rcv_msg_doit+0x215/0x300 [ 111.796757][ T6135] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.803446][ T6135] ? bpf_lsm_capable+0x9/0x20 [ 111.808340][ T6135] ? security_capable+0x7e/0x2e0 [ 111.813544][ T6135] genl_rcv_msg+0x60e/0x790 [ 111.818227][ T6135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.823448][ T6135] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 111.829828][ T6135] ? __pfx_nl80211_new_station+0x10/0x10 [ 111.836011][ T6135] ? __pfx_nl80211_post_doit+0x10/0x10 [ 111.841616][ T6135] ? __asan_memcpy+0x40/0x70 [ 111.846408][ T6135] ? __pfx_ref_tracker_free+0x10/0x10 [ 111.852305][ T6135] netlink_rcv_skb+0x205/0x470 [ 111.857188][ T6135] ? __lock_acquire+0xab9/0xd20 [ 111.862085][ T6135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.867511][ T6135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.872920][ T6135] ? down_read+0x1ad/0x2e0 [ 111.877526][ T6135] genl_rcv+0x28/0x40 [ 111.881567][ T6135] netlink_unicast+0x82c/0x9e0 [ 111.886487][ T6135] ? __pfx_netlink_unicast+0x10/0x10 [ 111.891937][ T6135] ? netlink_sendmsg+0x642/0xb30 [ 111.896970][ T6135] ? skb_put+0x11b/0x210 [ 111.901301][ T6135] netlink_sendmsg+0x805/0xb30 [ 111.906210][ T6135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.911526][ T6135] ? __import_iovec+0x5d4/0x7f0 [ 111.916475][ T6135] ? aa_sock_msg_perm+0xf1/0x1d0 [ 111.921465][ T6135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.926866][ T6135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.932960][ T6135] __sock_sendmsg+0x21c/0x270 [ 111.938168][ T6135] ____sys_sendmsg+0x505/0x830 [ 111.942988][ T6135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.950818][ T6135] ___sys_sendmsg+0x21f/0x2a0 [ 111.957543][ T6135] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.962817][ T6135] ? futex_private_hash_put+0x4b/0x280 [ 111.968542][ T6135] ? futex_private_hash_put+0x245/0x280 [ 111.974144][ T6135] ? __fget_files+0x2a/0x420 [ 111.978966][ T6135] ? __fget_files+0x3a0/0x420 [ 111.983791][ T6135] __sys_sendmsg+0x164/0x220 [ 111.988470][ T6135] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.993661][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.998941][ T6135] __do_fast_syscall_32+0xb6/0x2b0 [ 112.004099][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.009418][ T6135] do_fast_syscall_32+0x34/0x80 [ 112.014298][ T6135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.020712][ T6135] RIP: 0023:0xf70ce539 [ 112.024809][ T6135] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 112.045345][ T6135] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 112.054348][ T6135] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001080 [ 112.062487][ T6135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.070536][ T6135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.078599][ T6135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.086785][ T6135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.094821][ T6135] [ 112.097900][ T6135] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.105281][ T6135] CPU: 1 UID: 0 PID: 6135 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 112.114398][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.124469][ T6135] Call Trace: [ 112.127767][ T6135] [ 112.130719][ T6135] dump_stack_lvl+0x99/0x250 [ 112.135346][ T6135] ? __asan_memcpy+0x40/0x70 [ 112.139953][ T6135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.145169][ T6135] ? __pfx__printk+0x10/0x10 [ 112.149783][ T6135] vpanic+0x281/0x750 [ 112.153876][ T6135] ? __pfx__printk+0x10/0x10 [ 112.158676][ T6135] ? __pfx_vpanic+0x10/0x10 [ 112.163198][ T6135] ? is_bpf_text_address+0x292/0x2b0 [ 112.168520][ T6135] panic+0xb9/0xc0 [ 112.172781][ T6135] ? __pfx_panic+0x10/0x10 [ 112.177221][ T6135] __warn+0x31b/0x4b0 [ 112.181215][ T6135] ? rate_control_rate_init+0x64a/0x6e0 [ 112.186795][ T6135] ? rate_control_rate_init+0x64a/0x6e0 [ 112.192359][ T6135] report_bug+0x2be/0x4f0 [ 112.196706][ T6135] ? rate_control_rate_init+0x64a/0x6e0 [ 112.202371][ T6135] ? rate_control_rate_init+0x64a/0x6e0 [ 112.207936][ T6135] ? rate_control_rate_init+0x64c/0x6e0 [ 112.213496][ T6135] handle_bug+0x84/0x160 [ 112.217756][ T6135] exc_invalid_op+0x1a/0x50 [ 112.222272][ T6135] asm_exc_invalid_op+0x1a/0x20 [ 112.227165][ T6135] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 112.233345][ T6135] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 a7 8c 00 cc e8 c2 18 cf f6 90 0f 0b 90 eb e1 e8 b7 18 cf f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 112.252974][ T6135] RSP: 0018:ffffc9000affef70 EFLAGS: 00010287 [ 112.259071][ T6135] RAX: ffffffff8af094d9 RBX: ffff8880334ec000 RCX: 0000000000080000 [ 112.267060][ T6135] RDX: ffffc9000beba000 RSI: 000000000000039e RDI: 000000000000039f [ 112.275059][ T6135] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af08ff3 [ 112.283051][ T6135] R10: dffffc0000000000 R11: ffffed100669d831 R12: 1ffff1100669d80a [ 112.291145][ T6135] R13: ffff888020ed0e40 R14: 0000000000000001 R15: ffffffff8af08ff3 [ 112.299568][ T6135] ? rate_control_rate_init+0x163/0x6e0 [ 112.305136][ T6135] ? rate_control_rate_init+0x163/0x6e0 [ 112.310694][ T6135] ? rate_control_rate_init+0x649/0x6e0 [ 112.316263][ T6135] rate_control_rate_init_all_links+0x109/0x1a0 [ 112.322693][ T6135] sta_apply_auth_flags+0x1c2/0x400 [ 112.327912][ T6135] sta_apply_parameters+0xe4b/0x15b0 [ 112.333244][ T6135] ieee80211_add_station+0x424/0x6a0 [ 112.338550][ T6135] rdev_add_station+0x108/0x290 [ 112.343420][ T6135] nl80211_new_station+0x1755/0x1b70 [ 112.348827][ T6135] ? __pfx_nl80211_new_station+0x10/0x10 [ 112.354850][ T6135] ? netdev_run_todo+0xe1d/0xea0 [ 112.359847][ T6135] ? nl80211_pre_doit+0x4f1/0x930 [ 112.364892][ T6135] genl_family_rcv_msg_doit+0x215/0x300 [ 112.370478][ T6135] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 112.376722][ T6135] ? bpf_lsm_capable+0x9/0x20 [ 112.381443][ T6135] ? security_capable+0x7e/0x2e0 [ 112.386414][ T6135] genl_rcv_msg+0x60e/0x790 [ 112.390939][ T6135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.395977][ T6135] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 112.401405][ T6135] ? __pfx_nl80211_new_station+0x10/0x10 [ 112.407094][ T6135] ? __pfx_nl80211_post_doit+0x10/0x10 [ 112.412570][ T6135] ? __asan_memcpy+0x40/0x70 [ 112.417166][ T6135] ? __pfx_ref_tracker_free+0x10/0x10 [ 112.422552][ T6135] netlink_rcv_skb+0x205/0x470 [ 112.427323][ T6135] ? __lock_acquire+0xab9/0xd20 [ 112.432188][ T6135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.437236][ T6135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.442546][ T6135] ? down_read+0x1ad/0x2e0 [ 112.446980][ T6135] genl_rcv+0x28/0x40 [ 112.451066][ T6135] netlink_unicast+0x82c/0x9e0 [ 112.455852][ T6135] ? __pfx_netlink_unicast+0x10/0x10 [ 112.461151][ T6135] ? netlink_sendmsg+0x642/0xb30 [ 112.466098][ T6135] ? skb_put+0x11b/0x210 [ 112.470368][ T6135] netlink_sendmsg+0x805/0xb30 [ 112.475146][ T6135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.480458][ T6135] ? __import_iovec+0x5d4/0x7f0 [ 112.485315][ T6135] ? aa_sock_msg_perm+0xf1/0x1d0 [ 112.490257][ T6135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.495639][ T6135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.500966][ T6135] __sock_sendmsg+0x21c/0x270 [ 112.505673][ T6135] ____sys_sendmsg+0x505/0x830 [ 112.510469][ T6135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.515781][ T6135] ___sys_sendmsg+0x21f/0x2a0 [ 112.520471][ T6135] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.525682][ T6135] ? futex_private_hash_put+0x4b/0x280 [ 112.531157][ T6135] ? futex_private_hash_put+0x245/0x280 [ 112.536747][ T6135] ? __fget_files+0x2a/0x420 [ 112.541342][ T6135] ? __fget_files+0x3a0/0x420 [ 112.546042][ T6135] __sys_sendmsg+0x164/0x220 [ 112.550672][ T6135] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.555810][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.561018][ T6135] __do_fast_syscall_32+0xb6/0x2b0 [ 112.566145][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.571395][ T6135] do_fast_syscall_32+0x34/0x80 [ 112.576292][ T6135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.582811][ T6135] RIP: 0023:0xf70ce539 [ 112.586911][ T6135] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 112.607091][ T6135] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 112.615537][ T6135] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001080 [ 112.623539][ T6135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.631551][ T6135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.639535][ T6135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.647543][ T6135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.655653][ T6135] [ 112.659050][ T6135] Kernel Offset: disabled [ 112.663517][ T6135] Rebooting in 86400 seconds..