last executing test programs: 10.162360935s ago: executing program 3 (id=22): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000002140), 0x0, 0x10000, 0x0) 9.982790336s ago: executing program 3 (id=24): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 8.867382476s ago: executing program 3 (id=29): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZztrO+p+JPbvJ72777yzO8/zbryz73xkJoAz67mIeD0i5iLihYhYLNvTssRBv+Sv+/DuO+t5yZvf/HsSSdkWUVTvuVC+bb7/VKm7t39jrd1u7ZTTzd72rWZ3b//K1vbaZmuzdXNlZfnl1VdWX1q9OpZ+5v169Rt//vEPfv7NV3/z5bf/cO2vl7+XJ/31cv6gX+NTfHrxQfFYzz+Le2oRsTPeYDMzV/anPutEAAA4kXyU+pmI+EIx/l+MuWI0Vxge0s1PPzsAAABgHLLXFuI/SUQGAAAAnFqvRcRCJGmjPBdgIdK00eifw/u5eCxtd7q9L13v7N7cyOdFLEU9vb7Vbl0tz6ldinqSTy8X9Y+mXxyaXomIJyLiR4vni+nGeqe9MeudHwAAAHBGXBja/v/XYn/7HwAAADhllmadAAAAADBxo7b/kynnAQAAAEyO4/8AAABwqn3rjTfykg3uf73x1t7ujc5bVzZa3RuN7d31xnpn51Zjs9PZLK7Zt33UsuoR0e50bn0lYvd2s9fq9prdvf1r253dm71rW+4fCAAAALPyxLPvfZBExMFXzxcldy5/mBvxBucKwKmRPsiL/zS5PIDpG/UzfwLnxpkHMH21WScAzM7BrBMAZu2+S31UDAoOn7xz3z6D304uJwAAYLwufb76+H+tPJ//CPb/wyPu8La8YwFwtnyC4//AI85vPpxd9QcaAdyZYCbArBx3q4+RF++oOv5fuWcwy45dFgAAMFELRXk2bZTHAhciTRuNiMeL/+pfT65vtVtXI+LTEfH7xfqn8unl4p2J2wMCAAAAAAAAAAAAAAAAAAAAAAAAwAllWRIZAAAAcKpFpH9Jyvt/XVq8uDC8f+Bc8u/FKG/p9fZP3/zJ7bVeb2c5b//Hvfbeu2X7i7PYgwEAAABnUe3IuYPt9MF2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM04d331kflGnG/dvXImKpKn4t5ovn+ahHxGP/TKJ26H1JRMyNIf7BnYh4sip+kqcVS2UWw/HTiDg/nfhPZ1lWGf/CGOLDWfZevv55ver7l8ZzxXP1979Wlk/qvvXfuV8dmpPeW//NjVj/PX7CGE+9/8vmyPh3Ip6qVa9/BvGTEfGfr1pgxYfy3e/s73+ssb/wyH4Wcany9ye5L1azt32r2d3bv7K1vbbZ2mzdXFlZfnn1ldWXVq82r2+1W+VjZR9/+PSv/zfU9N+sr+h/jIi/dEz/L+aV+qHGbDhMGez923c/26/WhxZRxL/8fPXf35NHxM//Jr5Y/g7k8y8N6gf9+mHP/OJ3z1QmVsbfGNH/4/79L49a6JAXvv39P57wpQDAFHT39m+stdutnYlX3s2ybFqxTl6J9KQvLoaLU/3EplsZjO4mFmL+YenplCsXH440HqQyjj1bAADAw+ajQf+sMwEAAAAAAAAAAAAAAAAAAICzq7sX6aQvJzYc82A2XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONL/AwAA///zaNkr") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 7.423670542s ago: executing program 3 (id=35): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e4000000000000095000000000000001810", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xb1, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.933599011s ago: executing program 3 (id=38): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 6.053567381s ago: executing program 3 (id=40): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x26020480) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 5.965695425s ago: executing program 2 (id=42): socket$kcm(0xa, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.857003399s ago: executing program 2 (id=43): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZztrO+p+JPbvJ72777yzO8/zbryz73xkJoAz67mIeD0i5iLihYhYLNvTssRBv+Sv+/DuO+t5yZvf/HsSSdkWUVTvuVC+bb7/VKm7t39jrd1u7ZTTzd72rWZ3b//K1vbaZmuzdXNlZfnl1VdWX1q9OpZ+5v169Rt//vEPfv7NV3/z5bf/cO2vl7+XJ/31cv6gX+NTfHrxQfFYzz+Le2oRsTPeYDMzV/anPutEAAA4kXyU+pmI+EIx/l+MuWI0Vxge0s1PPzsAAABgHLLXFuI/SUQGAAAAnFqvRcRCJGmjPBdgIdK00eifw/u5eCxtd7q9L13v7N7cyOdFLEU9vb7Vbl0tz6ldinqSTy8X9Y+mXxyaXomIJyLiR4vni+nGeqe9MeudHwAAAHBGXBja/v/XYn/7HwAAADhllmadAAAAADBxo7b/kynnAQAAAEyO4/8AAABwqn3rjTfykg3uf73x1t7ujc5bVzZa3RuN7d31xnpn51Zjs9PZLK7Zt33UsuoR0e50bn0lYvd2s9fq9prdvf1r253dm71rW+4fCAAAALPyxLPvfZBExMFXzxcldy5/mBvxBucKwKmRPsiL/zS5PIDpG/UzfwLnxpkHMH21WScAzM7BrBMAZu2+S31UDAoOn7xz3z6D304uJwAAYLwufb76+H+tPJ//CPb/wyPu8La8YwFwtnyC4//AI85vPpxd9QcaAdyZYCbArBx3q4+RF++oOv5fuWcwy45dFgAAMFELRXk2bZTHAhciTRuNiMeL/+pfT65vtVtXI+LTEfH7xfqn8unl4p2J2wMCAAAAAAAAAAAAAAAAAAAAAAAAwAllWRIZAAAAcKpFpH9Jyvt/XVq8uDC8f+Bc8u/FKG/p9fZP3/zJ7bVeb2c5b//Hvfbeu2X7i7PYgwEAAABnUe3IuYPt9MF2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM04d331kflGnG/dvXImKpKn4t5ovn+ahHxGP/TKJ26H1JRMyNIf7BnYh4sip+kqcVS2UWw/HTiDg/nfhPZ1lWGf/CGOLDWfZevv55ver7l8ZzxXP1979Wlk/qvvXfuV8dmpPeW//NjVj/PX7CGE+9/8vmyPh3Ip6qVa9/BvGTEfGfr1pgxYfy3e/s73+ssb/wyH4Wcany9ye5L1azt32r2d3bv7K1vbbZ2mzdXFlZfnn1ldWXVq82r2+1W+VjZR9/+PSv/zfU9N+sr+h/jIi/dEz/L+aV+qHGbDhMGez923c/26/WhxZRxL/8fPXf35NHxM//Jr5Y/g7k8y8N6gf9+mHP/OJ3z1QmVsbfGNH/4/79L49a6JAXvv39P57wpQDAFHT39m+stdutnYlX3s2ybFqxTl6J9KQvLoaLU/3EplsZjO4mFmL+YenplCsXH440HqQyjj1bAADAw+ajQf+sMwEAAAAAAAAAAAAAAAAAAICzq7sX6aQvJzYc82A2XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONL/AwAA///zaNkr") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x85, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xfff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) 5.4339439s ago: executing program 0 (id=44): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @empty}, 0x10) listen(r1, 0xda90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r6, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, 0x0, 0x20048010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x32) 4.589680138s ago: executing program 1 (id=48): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e4000000000000095000000000000001810", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xb1, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.382253987s ago: executing program 0 (id=49): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000002140), 0x0, 0x10000, 0x0) 4.301729856s ago: executing program 1 (id=50): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.832020531s ago: executing program 0 (id=51): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 3.546432492s ago: executing program 1 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ieee802154(0x0, r0) 3.423133176s ago: executing program 2 (id=54): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000440)=""/231, 0xe7}], 0x3}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 2.908670201s ago: executing program 0 (id=55): socket$kcm(0xa, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.812039564s ago: executing program 4 (id=56): socket$inet6(0xa, 0x4, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 2.677569269s ago: executing program 0 (id=57): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 2.47910056s ago: executing program 4 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad000000000140000"], 0x7c}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r4, &(0x7f0000000100), 0x9) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7], 0x6f4}}, 0x0) 2.269203335s ago: executing program 1 (id=59): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0xa0}}, 0x0) 2.123493533s ago: executing program 2 (id=60): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @empty}, 0x10) listen(r1, 0xda90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, 0x0, 0x20048010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x32) 2.090696786s ago: executing program 1 (id=61): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf255e00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.477381541s ago: executing program 1 (id=62): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x4, 0x47, 0x3, 0x6}, @end, @ssrr={0x89, 0x17, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @empty]}, @end, @ssrr={0x89, 0x13, 0xf6, [@broadcast, @local, @empty, @local]}, @timestamp_prespec={0x44, 0x4, 0x5c, 0x3, 0x8}]}}}}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000200000004000000000000000000"], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44008) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="680000001200000328bd7000fedbdf25ac1414bb000000000000000000000000000004d602002b0014000d00e000000200000000000000000000000005001900ff00000024000900050000000000000009000000000000000c0000000000000003000000000000009e735d8da47408612e6cd542ea34a1320e19f1f169b7e82502b74327b8bb6c4c2326"], 0x68}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) syz_usbip_server_init(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) 1.476958527s ago: executing program 4 (id=63): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e400000000000009500000000000000181000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xb1, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.325872701s ago: executing program 0 (id=64): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.282438945s ago: executing program 4 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) 660.184426ms ago: executing program 4 (id=66): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x22020600) socket$pptp(0x18, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) pselect6(0x4f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f0000000380)={0x3fe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10001}, 0x0, 0x0) 322.530159ms ago: executing program 2 (id=67): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r5], 0x44}}, 0x8000) 306.494535ms ago: executing program 4 (id=68): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="070000fda5e792a9e7cc9c1d3a00000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 0s ago: executing program 2 (id=69): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 83.867937][ T5819] cgroup: Unknown subsys name 'net' [ 83.983855][ T5819] cgroup: Unknown subsys name 'cpuset' [ 83.993456][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.646214][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.573365][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.582398][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.583122][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.599936][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.607766][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.607919][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.616309][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.623946][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.629131][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.636215][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.646922][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.651325][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.658168][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.664952][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.671074][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.677791][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.694622][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.707463][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.718675][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.727400][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.735328][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.741929][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.750657][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.764823][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.772673][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.430563][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.457340][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.655647][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.677103][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.701741][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.878494][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.885732][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.894213][ T5843] bridge_slave_0: entered allmulticast mode [ 90.901666][ T5843] bridge_slave_0: entered promiscuous mode [ 90.922030][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.929449][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.936673][ T5832] bridge_slave_0: entered allmulticast mode [ 90.944165][ T5832] bridge_slave_0: entered promiscuous mode [ 90.963112][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.970348][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.978568][ T5843] bridge_slave_1: entered allmulticast mode [ 90.985722][ T5843] bridge_slave_1: entered promiscuous mode [ 91.016604][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.023806][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.032576][ T5832] bridge_slave_1: entered allmulticast mode [ 91.040308][ T5832] bridge_slave_1: entered promiscuous mode [ 91.091647][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.148235][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.184853][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.199461][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.208927][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.216043][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.223838][ T5830] bridge_slave_0: entered allmulticast mode [ 91.231872][ T5830] bridge_slave_0: entered promiscuous mode [ 91.265384][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.273000][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.280535][ T5839] bridge_slave_0: entered allmulticast mode [ 91.288246][ T5839] bridge_slave_0: entered promiscuous mode [ 91.298826][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.306082][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.316608][ T5839] bridge_slave_1: entered allmulticast mode [ 91.324328][ T5839] bridge_slave_1: entered promiscuous mode [ 91.359697][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.367150][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.374551][ T5830] bridge_slave_1: entered allmulticast mode [ 91.382448][ T5830] bridge_slave_1: entered promiscuous mode [ 91.404669][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.412282][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.419761][ T5831] bridge_slave_0: entered allmulticast mode [ 91.427083][ T5831] bridge_slave_0: entered promiscuous mode [ 91.463548][ T5832] team0: Port device team_slave_0 added [ 91.472715][ T5832] team0: Port device team_slave_1 added [ 91.492770][ T5843] team0: Port device team_slave_0 added [ 91.502328][ T5843] team0: Port device team_slave_1 added [ 91.508576][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.515739][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.523258][ T5831] bridge_slave_1: entered allmulticast mode [ 91.530586][ T5831] bridge_slave_1: entered promiscuous mode [ 91.540668][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.554102][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.675551][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.682565][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.709033][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.722897][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.730252][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.757449][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.772930][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.783860][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.791075][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.812505][ T5152] Bluetooth: hci2: command tx timeout [ 91.817627][ T5849] Bluetooth: hci1: command tx timeout [ 91.822981][ T5842] Bluetooth: hci4: command tx timeout [ 91.828938][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.847193][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.854161][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.880713][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.891271][ T5842] Bluetooth: hci3: command tx timeout [ 91.892037][ T5842] Bluetooth: hci0: command tx timeout [ 91.904119][ T3080] cfg80211: failed to load regulatory.db [ 91.925500][ T5839] team0: Port device team_slave_0 added [ 91.941081][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.973938][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.985737][ T5839] team0: Port device team_slave_1 added [ 92.020605][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.028305][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.054501][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.081149][ T5830] team0: Port device team_slave_0 added [ 92.104681][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.128971][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.135964][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.162193][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.175694][ T5830] team0: Port device team_slave_1 added [ 92.264884][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.272021][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.299572][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.318815][ T5843] hsr_slave_0: entered promiscuous mode [ 92.325711][ T5843] hsr_slave_1: entered promiscuous mode [ 92.352799][ T5832] hsr_slave_0: entered promiscuous mode [ 92.360067][ T5832] hsr_slave_1: entered promiscuous mode [ 92.366265][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.374152][ T5832] Cannot create hsr debugfs directory [ 92.394430][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.401766][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.427809][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.449940][ T5831] team0: Port device team_slave_0 added [ 92.509025][ T5831] team0: Port device team_slave_1 added [ 92.520770][ T5830] hsr_slave_0: entered promiscuous mode [ 92.528738][ T5830] hsr_slave_1: entered promiscuous mode [ 92.534820][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.542711][ T5830] Cannot create hsr debugfs directory [ 92.577805][ T5839] hsr_slave_0: entered promiscuous mode [ 92.584165][ T5839] hsr_slave_1: entered promiscuous mode [ 92.591161][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.599710][ T5839] Cannot create hsr debugfs directory [ 92.679406][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.686382][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.713217][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.758448][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.765414][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.792103][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.005248][ T5831] hsr_slave_0: entered promiscuous mode [ 93.011880][ T5831] hsr_slave_1: entered promiscuous mode [ 93.018771][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.026341][ T5831] Cannot create hsr debugfs directory [ 93.308454][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.346183][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.365166][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.391099][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.463468][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.495131][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.508515][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.531920][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.582842][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.595701][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.621851][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.658089][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.711522][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.737798][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.782723][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.795156][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.888371][ T5842] Bluetooth: hci1: command tx timeout [ 93.896972][ T5842] Bluetooth: hci4: command tx timeout [ 93.897442][ T5849] Bluetooth: hci2: command tx timeout [ 93.910189][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.922257][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.935234][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.961220][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.968102][ T5842] Bluetooth: hci3: command tx timeout [ 93.972309][ T5849] Bluetooth: hci0: command tx timeout [ 93.996697][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.038905][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.061243][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.111277][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.154200][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.161566][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.173590][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.180759][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.196045][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.230172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.237426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.248646][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.255772][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.411691][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.453381][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.460573][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.534318][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.564674][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.571901][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.670407][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.692562][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.741815][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.749003][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.815750][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.822927][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.865960][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.912125][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.919785][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.965489][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.972670][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.000166][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.051963][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.258329][ T5832] veth0_vlan: entered promiscuous mode [ 95.304468][ T5832] veth1_vlan: entered promiscuous mode [ 95.316098][ T5830] veth0_vlan: entered promiscuous mode [ 95.362916][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.384980][ T5830] veth1_vlan: entered promiscuous mode [ 95.462264][ T5832] veth0_macvtap: entered promiscuous mode [ 95.478576][ T5832] veth1_macvtap: entered promiscuous mode [ 95.549742][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.611645][ T5843] veth0_vlan: entered promiscuous mode [ 95.621628][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.661414][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.671675][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.684456][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.693294][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.718455][ T5830] veth0_macvtap: entered promiscuous mode [ 95.729804][ T5843] veth1_vlan: entered promiscuous mode [ 95.751217][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.772348][ T5830] veth1_macvtap: entered promiscuous mode [ 95.823994][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.860548][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.905252][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.941405][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.952358][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.961436][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.970719][ T5849] Bluetooth: hci4: command tx timeout [ 95.976175][ T5849] Bluetooth: hci1: command tx timeout [ 95.982068][ T5152] Bluetooth: hci2: command tx timeout [ 95.982196][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.001125][ T5843] veth0_macvtap: entered promiscuous mode [ 96.058220][ T5152] Bluetooth: hci0: command tx timeout [ 96.063693][ T5152] Bluetooth: hci3: command tx timeout [ 96.104514][ T5843] veth1_macvtap: entered promiscuous mode [ 96.174477][ T5831] veth0_vlan: entered promiscuous mode [ 96.221433][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.236190][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.251668][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.294868][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.311445][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.320726][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.329749][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.339118][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.375824][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.384554][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.394059][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.404910][ T5831] veth1_vlan: entered promiscuous mode [ 96.409846][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.500332][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.552794][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.564679][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.620966][ T5831] veth0_macvtap: entered promiscuous mode [ 96.683286][ T5831] veth1_macvtap: entered promiscuous mode [ 96.709625][ T5839] veth0_vlan: entered promiscuous mode [ 97.209296][ T5839] veth1_vlan: entered promiscuous mode [ 97.210590][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.308859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.314422][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.385381][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.444565][ T5839] veth0_macvtap: entered promiscuous mode [ 97.464260][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.479154][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.492496][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.501214][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.511638][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.520680][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.535033][ T5951] sctp: failed to load transform for md5: -2 [ 97.554653][ T5959] loop0: detected capacity change from 0 to 512 [ 97.562791][ T5959] ======================================================= [ 97.562791][ T5959] WARNING: The mand mount option has been deprecated and [ 97.562791][ T5959] and is ignored by this kernel. Remove the mand [ 97.562791][ T5959] option from the mount to silence this warning. [ 97.562791][ T5959] ======================================================= [ 97.626966][ T5959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.641892][ T5959] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.658236][ T5959] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2: bg 0: block 248: padding at end of block bitmap is not set [ 97.676717][ T5959] Quota error (device loop0): write_blk: dquota write failed [ 97.684501][ T5959] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 97.694551][ T5959] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2: Failed to acquire dquot type 1 [ 97.712445][ T5959] EXT4-fs (loop0): 1 truncate cleaned up [ 97.732816][ T5959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.763218][ T5839] veth1_macvtap: entered promiscuous mode [ 97.875267][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.952966][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.021707][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.051401][ T5849] Bluetooth: hci4: command tx timeout [ 98.057340][ T5842] Bluetooth: hci2: command tx timeout [ 98.063264][ T5152] Bluetooth: hci1: command tx timeout [ 98.082639][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.107688][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.116489][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.128622][ T5152] Bluetooth: hci3: command tx timeout [ 98.134524][ T5849] Bluetooth: hci0: command tx timeout [ 98.442938][ T5959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.495122][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.523886][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.705869][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.737536][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.853205][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.877496][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.039691][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.056809][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.104243][ T5983] Zero length message leads to an empty skb [ 99.240721][ T5983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.379257][ T5983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.575765][ T5983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.711227][ T5983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.106329][ T5998] loop1: detected capacity change from 0 to 512 [ 100.237714][ T5998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.276590][ T5998] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.371452][ T5998] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11: bg 0: block 248: padding at end of block bitmap is not set [ 100.469125][ T5998] Quota error (device loop1): write_blk: dquota write failed [ 100.512528][ T5998] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.570925][ T5998] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.11: Failed to acquire dquot type 1 [ 100.644665][ T5998] EXT4-fs (loop1): 1 truncate cleaned up [ 100.673165][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.948522][ T6012] loop4: detected capacity change from 0 to 512 [ 100.965183][ T6012] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.994503][ T6012] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 101.021808][ T5998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.042347][ T6012] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 101.079991][ T6012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 101.136971][ T6012] System zones: 0-2, 18-18, 34-34 [ 101.166449][ T6012] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.14: iget: bad i_size value: 360287970189639680 [ 101.248823][ T6012] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.14: couldn't read orphan inode 15 (err -117) [ 101.313469][ T6012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.640036][ T6015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14'. [ 101.649738][ T6015] unsupported nlmsg_type 40 [ 101.874084][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.251234][ T6019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.313726][ T6021] loop4: detected capacity change from 0 to 512 [ 102.381289][ T6021] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.410335][ T6021] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 102.440802][ T6021] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 102.472650][ T6021] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 102.499158][ T6021] System zones: 0-2, 18-18, 34-34 [ 102.520362][ T6021] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.17: iget: bad i_size value: 360287970189639680 [ 102.534951][ T6021] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.17: couldn't read orphan inode 15 (err -117) [ 102.554966][ T6021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.862210][ T6019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.939791][ T6025] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17'. [ 103.231724][ T6019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.518890][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.623121][ T6019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.835002][ T6019] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.872573][ T6019] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.902264][ T6019] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.960786][ T6019] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.283284][ T5983] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.370871][ T5983] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.639878][ T5983] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.696879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 104.902391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.008738][ T5983] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.309704][ T6050] loop0: detected capacity change from 0 to 512 [ 105.346471][ T6050] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.366115][ T6050] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 105.417157][ T6050] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 105.476193][ T6050] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 105.492785][ T6050] System zones: 0-2, 18-18, 34-34 [ 105.522983][ T6050] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.26: iget: bad i_size value: 360287970189639680 [ 105.578237][ T6058] loop3: detected capacity change from 0 to 512 [ 105.611171][ T6050] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.26: couldn't read orphan inode 15 (err -117) [ 105.627629][ T6058] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.666127][ T6058] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 105.677641][ T6050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.712592][ T6058] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 105.733826][ T6058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 105.752364][ T6058] System zones: 0-2, 18-18, 34-34 [ 105.781635][ T6058] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.29: iget: bad i_size value: 360287970189639680 [ 105.844037][ T6058] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.29: couldn't read orphan inode 15 (err -117) [ 105.871741][ T6058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.998838][ T6061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26'. [ 106.234916][ T6063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29'. [ 106.514999][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.820732][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.103899][ T6070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.433318][ T6070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.707081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.769476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.769544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.786599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.063029][ T6070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.364151][ T6070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.503144][ T6105] loop3: detected capacity change from 0 to 512 [ 108.543113][ T6106] loop2: detected capacity change from 0 to 512 [ 108.580266][ T6105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.630079][ T6106] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.672185][ T6105] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.685949][ T6106] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 108.724896][ T6106] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 108.771328][ T6105] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.40: bg 0: block 248: padding at end of block bitmap is not set [ 108.804983][ T6070] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.823672][ T6106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 108.852637][ T6106] System zones: 0-2, 18-18, 34-34 [ 108.883133][ T6105] Quota error (device loop3): write_blk: dquota write failed [ 108.901717][ T6070] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.910826][ T6106] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.43: iget: bad i_size value: 360287970189639680 [ 108.935563][ T6105] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 108.969702][ T6070] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.986967][ T6106] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.43: couldn't read orphan inode 15 (err -117) [ 109.000550][ T6105] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.40: Failed to acquire dquot type 1 [ 109.069690][ T6070] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.074831][ T6106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.111278][ T6105] EXT4-fs (loop3): 1 truncate cleaned up [ 109.268656][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.477264][ T6124] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.47'. [ 109.493737][ T6126] loop4: detected capacity change from 0 to 512 [ 109.516703][ T6126] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.526511][ T6126] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 109.549179][ T6126] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 109.562775][ T6126] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 109.573348][ T6126] System zones: 0-2, 18-18, 34-34 [ 109.582751][ T6126] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.46: iget: bad i_size value: 360287970189639680 [ 109.604855][ T6126] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.46: couldn't read orphan inode 15 (err -117) [ 109.707103][ T6126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.720831][ T6105] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.792397][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'. [ 110.173596][ T6137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.46'. [ 110.811244][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.830250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.843436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.856378][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.880990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.927272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.689291][ T6160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.830503][ T6160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.948614][ T6163] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.58'. [ 112.011551][ T6160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.184677][ T6160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.441050][ T6160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.605452][ T6160] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.661568][ T6160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.761234][ T6160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.099323][ T6184] loop0: detected capacity change from 0 to 512 [ 113.143315][ T6184] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.177331][ T6184] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 113.177471][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.263450][ T6184] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 113.282605][ T6184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 113.291213][ T6184] System zones: 0-2, 18-18, 34-34 [ 113.302146][ T6184] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.64: iget: bad i_size value: 360287970189639680 [ 113.319968][ T6184] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.64: couldn't read orphan inode 15 (err -117) [ 113.337436][ T6184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.727332][ T5990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.762441][ T6191] netlink: 60 bytes leftover after parsing attributes in process `syz.0.64'. [ 113.995719][ T6193] futex_wake_op: syz.1.62 tries to shift op by -33; fix this program [ 114.058538][ T6196] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 114.123131][ T6193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.140548][ T6198] netdevsim netdevsim1: Direct firmware load for . [ 114.140548][ T6198] failed with error -2 [ 114.167636][ T6198] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 114.167636][ T6198] [ 114.215901][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.811536][ T6202] lo speed is unknown, defaulting to 1000 [ 114.829458][ T6202] lo speed is unknown, defaulting to 1000 [ 114.846044][ T6202] lo speed is unknown, defaulting to 1000 [ 114.938165][ C1] ------------[ cut here ]------------ [ 114.943896][ C1] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#1: syz.2.69/6200 [ 114.954411][ C1] Modules linked in: [ 114.958489][ C1] CPU: 1 UID: 0 PID: 6200 Comm: syz.2.69 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 114.969836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.979970][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 114.986368][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 115.006054][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 115.012183][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff88802f55da00 [ 115.020221][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.028270][ C1] RBP: 0000000000000000 R08: ffff88802f55da00 R09: 0000000000000003 [ 115.036277][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888057aee500 [ 115.044316][ C1] R13: dffffc0000000000 R14: ffff888057aee9d0 R15: ffff888056f8d024 [ 115.052370][ C1] FS: 00007f6404be06c0(0000) GS:ffff888125d40000(0000) knlGS:0000000000000000 [ 115.061382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.068024][ C1] CR2: 00007f6404b7dd58 CR3: 00000000797c2000 CR4: 00000000003526f0 [ 115.076028][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.084053][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.092078][ C1] Call Trace: [ 115.095402][ C1] [ 115.098308][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 115.103914][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 115.109495][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 115.115630][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 115.121261][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.128540][ C1] __iterate_interfaces+0x2a8/0x590 [ 115.133779][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.139998][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.147269][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.153381][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 115.160486][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 115.165735][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 115.171604][ C1] __hrtimer_run_queues+0x529/0xc60 [ 115.176863][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 115.182594][ C1] ? read_tsc+0x9/0x20 [ 115.186675][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 115.191846][ C1] handle_softirqs+0x283/0x870 [ 115.196626][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 115.201433][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 115.206817][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 115.212026][ C1] __irq_exit_rcu+0xca/0x1f0 [ 115.216628][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 115.221917][ C1] irq_exit_rcu+0x9/0x30 [ 115.226216][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 115.231921][ C1] [ 115.234856][ C1] [ 115.237846][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.243843][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 115.249692][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 3f 4c da 09 e8 7a 0e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 115.269374][ C1] RSP: 0018:ffffc9000b247238 EFLAGS: 00000282 [ 115.275456][ C1] RAX: 28518244a541e200 RBX: 0000000000000000 RCX: 28518244a541e200 [ 115.283486][ C1] RDX: 0000000000000000 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 115.291510][ C1] RBP: ffffc9000b247290 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 115.299545][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: ffff88802f55da00 [ 115.307587][ C1] R13: dffffc0000000000 R14: ffff888027475a00 R15: ffff8880b873c4d8 [ 115.315608][ C1] ? finish_task_switch+0x266/0x950 [ 115.320855][ C1] __schedule+0x16fd/0x4d00 [ 115.325398][ C1] ? schedule+0x165/0x360 [ 115.329778][ C1] ? __pfx___schedule+0x10/0x10 [ 115.334655][ C1] ? schedule+0x91/0x360 [ 115.338940][ C1] schedule+0x165/0x360 [ 115.343113][ C1] schedule_timeout+0x9a/0x270 [ 115.347921][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 115.353351][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 115.358593][ C1] unix_wait_for_peer+0x1e9/0x2e0 [ 115.363636][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 115.369212][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 115.375286][ C1] ? apparmor_unix_may_send+0x322/0x380 [ 115.380870][ C1] unix_dgram_sendmsg+0xb1f/0x1870 [ 115.385992][ C1] ? finish_task_switch+0x266/0x950 [ 115.391240][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 115.396838][ C1] ? aa_sock_msg_perm+0xda/0x1d0 [ 115.401795][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.407113][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 115.412665][ C1] __sock_sendmsg+0x219/0x270 [ 115.417388][ C1] ____sys_sendmsg+0x52d/0x830 [ 115.422163][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.427494][ C1] ? import_iovec+0x74/0xa0 [ 115.432006][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 115.436696][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.441963][ C1] ? __might_fault+0xb0/0x130 [ 115.446646][ C1] __sys_sendmmsg+0x227/0x430 [ 115.451383][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.456615][ C1] ? do_futex+0x333/0x420 [ 115.460983][ C1] ? __sys_connect+0x38d/0x440 [ 115.465759][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 115.470987][ C1] ? rcu_is_watching+0x15/0xb0 [ 115.475778][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 115.480679][ C1] do_syscall_64+0xfa/0x3b0 [ 115.485212][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.490462][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.496536][ C1] ? clear_bhb_loop+0x60/0xb0 [ 115.501249][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.507180][ C1] RIP: 0033:0x7f6403d8e929 [ 115.511610][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.531267][ C1] RSP: 002b:00007f6404be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.539737][ C1] RAX: ffffffffffffffda RBX: 00007f6403fb5fa0 RCX: 00007f6403d8e929 [ 115.547752][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005 [ 115.555732][ C1] RBP: 00007f6403e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.563741][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.571773][ C1] R13: 0000000000000000 R14: 00007f6403fb5fa0 R15: 00007fff560ccca8 [ 115.579810][ C1] [ 115.582837][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.590158][ C1] CPU: 1 UID: 0 PID: 6200 Comm: syz.2.69 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 115.601438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.611509][ C1] Call Trace: [ 115.614796][ C1] [ 115.617648][ C1] dump_stack_lvl+0x99/0x250 [ 115.622251][ C1] ? __asan_memcpy+0x40/0x70 [ 115.626849][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.632061][ C1] ? __pfx__printk+0x10/0x10 [ 115.636672][ C1] panic+0x2db/0x790 [ 115.640587][ C1] ? __pfx_panic+0x10/0x10 [ 115.645032][ C1] __warn+0x334/0x4c0 [ 115.649029][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.654783][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.660528][ C1] report_bug+0x2be/0x4f0 [ 115.664869][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.670604][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 115.676335][ C1] ? __ieee80211_beacon_get+0x125f/0x1630 [ 115.682090][ C1] handle_bug+0x84/0x160 [ 115.686347][ C1] exc_invalid_op+0x1a/0x50 [ 115.690865][ C1] asm_exc_invalid_op+0x1a/0x20 [ 115.695731][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 115.702081][ C1] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 115.721693][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 115.727775][ C1] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff88802f55da00 [ 115.735747][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.743721][ C1] RBP: 0000000000000000 R08: ffff88802f55da00 R09: 0000000000000003 [ 115.751696][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888057aee500 [ 115.759672][ C1] R13: dffffc0000000000 R14: ffff888057aee9d0 R15: ffff888056f8d024 [ 115.767674][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 115.773243][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 115.778971][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 115.784693][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 115.790251][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 115.795718][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 115.801802][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 115.807356][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.814573][ C1] __iterate_interfaces+0x2a8/0x590 [ 115.819773][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.825840][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 115.833036][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 115.839115][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 115.846142][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 115.851351][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 115.857169][ C1] __hrtimer_run_queues+0x529/0xc60 [ 115.862408][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 115.868145][ C1] ? read_tsc+0x9/0x20 [ 115.872227][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 115.877342][ C1] handle_softirqs+0x283/0x870 [ 115.882117][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 115.886904][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 115.892227][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 115.897436][ C1] __irq_exit_rcu+0xca/0x1f0 [ 115.902040][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 115.907253][ C1] irq_exit_rcu+0x9/0x30 [ 115.911502][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 115.917141][ C1] [ 115.920068][ C1] [ 115.923083][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.929064][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 115.934874][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 3f 4c da 09 e8 7a 0e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 115.954480][ C1] RSP: 0018:ffffc9000b247238 EFLAGS: 00000282 [ 115.960554][ C1] RAX: 28518244a541e200 RBX: 0000000000000000 RCX: 28518244a541e200 [ 115.968568][ C1] RDX: 0000000000000000 RSI: ffffffff8d98bd8e RDI: ffffffff8be2ec60 [ 115.976541][ C1] RBP: ffffc9000b247290 R08: ffffffff8fa14ff7 R09: 1ffffffff1f429fe [ 115.984532][ C1] R10: dffffc0000000000 R11: fffffbfff1f429ff R12: ffff88802f55da00 [ 115.992504][ C1] R13: dffffc0000000000 R14: ffff888027475a00 R15: ffff8880b873c4d8 [ 116.000492][ C1] ? finish_task_switch+0x266/0x950 [ 116.005700][ C1] __schedule+0x16fd/0x4d00 [ 116.010216][ C1] ? schedule+0x165/0x360 [ 116.014586][ C1] ? __pfx___schedule+0x10/0x10 [ 116.019465][ C1] ? schedule+0x91/0x360 [ 116.023720][ C1] schedule+0x165/0x360 [ 116.027898][ C1] schedule_timeout+0x9a/0x270 [ 116.032677][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 116.038067][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 116.043270][ C1] unix_wait_for_peer+0x1e9/0x2e0 [ 116.048298][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 116.053845][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 116.059912][ C1] ? apparmor_unix_may_send+0x322/0x380 [ 116.065479][ C1] unix_dgram_sendmsg+0xb1f/0x1870 [ 116.070611][ C1] ? finish_task_switch+0x266/0x950 [ 116.075834][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 116.081395][ C1] ? aa_sock_msg_perm+0xda/0x1d0 [ 116.086342][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.091640][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 116.097198][ C1] __sock_sendmsg+0x219/0x270 [ 116.101888][ C1] ____sys_sendmsg+0x52d/0x830 [ 116.106654][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.111948][ C1] ? import_iovec+0x74/0xa0 [ 116.116477][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 116.121246][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.126497][ C1] ? __might_fault+0xb0/0x130 [ 116.131225][ C1] __sys_sendmmsg+0x227/0x430 [ 116.135911][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.141108][ C1] ? do_futex+0x333/0x420 [ 116.145451][ C1] ? __sys_connect+0x38d/0x440 [ 116.150221][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 116.155421][ C1] ? rcu_is_watching+0x15/0xb0 [ 116.160198][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 116.165051][ C1] do_syscall_64+0xfa/0x3b0 [ 116.169568][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.174770][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.180833][ C1] ? clear_bhb_loop+0x60/0xb0 [ 116.185533][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.191438][ C1] RIP: 0033:0x7f6403d8e929 [ 116.195868][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.215479][ C1] RSP: 002b:00007f6404be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.223906][ C1] RAX: ffffffffffffffda RBX: 00007f6403fb5fa0 RCX: 00007f6403d8e929 [ 116.231886][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005 [ 116.239862][ C1] RBP: 00007f6403e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.247841][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.255819][ C1] R13: 0000000000000000 R14: 00007f6403fb5fa0 R15: 00007fff560ccca8 [ 116.263808][ C1] [ 116.266988][ C1] Kernel Offset: disabled [ 116.271320][ C1] Rebooting in 86400 seconds..