last executing test programs: 50.649860604s ago: executing program 1 (id=77): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="000202"], 0x18) 50.428066076s ago: executing program 1 (id=80): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 49.41044933s ago: executing program 1 (id=83): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x2, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) pipe2(&(0x7f0000000040), 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r7, 0x141601) 46.674541637s ago: executing program 1 (id=94): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 45.385575379s ago: executing program 1 (id=100): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="9d4df0f45ca19003c3c662b554a97a8577500100000028c87520dd5e3451c84c38d2c535f28f73a255ff1e1368d92fb3bfa0bb8cbc643bef963a89c6e9879a432a3ccdbee247ac7177d9e6dda89c6c0486c4020cb3cdd0fc8d7d09421cd8edaaf7748442e7a86b25531311333670a4c28b5317bd3b9abc86", @ANYRES64=r0], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000004a00010000000000fcffffff0a0080", @ANYRES32, @ANYBLOB="000000001400010000000000000000000000ff"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x62, "e506ecf425064d480173c327869d6bc4ac2c54d54c0972b6cc348b095ee6a711970fa6c2c2588164cdc6397d23cf69a7ece47d127f325b9541a334b8fa06dac2aa9ed8ca299cef2ec1b3ec959588a0c54ce936f9274fdedced1bc42ea580ec4f9ad4"}, &(0x7f0000000080)=0x6a) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x10500, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x200081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000014000000000000000000000008001200000000000000000000000000060000000009000000000000000000007f00000100000000000000007200000000fc01000000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc0200"/159], 0xa0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 44.385428599s ago: executing program 1 (id=105): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1c9, @time={0x9, 0x3}, 0x0, {}, 0x40}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x80000, 0xf, 0x0, 0x0, 0x5, 0x2]}}) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2040400) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) 28.732425622s ago: executing program 32 (id=105): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1c9, @time={0x9, 0x3}, 0x0, {}, 0x40}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x80000, 0xf, 0x0, 0x0, 0x5, 0x2]}}) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2040400) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) 7.933024065s ago: executing program 4 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.875344788s ago: executing program 0 (id=224): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x30000000}) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.445449898s ago: executing program 0 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf250c00000008000300", @ANYRES32=r1, @ANYBLOB="18005080040006000500020004"], 0x34}, 0x1, 0x0, 0x0, 0x8020}, 0x40) 4.433734072s ago: executing program 4 (id=227): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921c0000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="4009330000003329e6261d434ce3694f2986962e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.080277741s ago: executing program 0 (id=230): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee800000400000000100000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 3.173188687s ago: executing program 0 (id=232): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}]}}}]}, 0x44}}, 0xeb64d656001b2f26) 3.013673699s ago: executing program 2 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.521785844s ago: executing program 2 (id=234): futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r1, 0x0, 0xfce1) 2.074299291s ago: executing program 0 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.987891908s ago: executing program 2 (id=237): unshare(0x22020400) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80086601, 0x1000000000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.783532993s ago: executing program 3 (id=238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f6", 0xb9, 0x805, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.773437507s ago: executing program 0 (id=239): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000000000084112155000000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'hash\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xb, 0x1, 'sha512\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0xd, 0x7, 0x1, 0x3, @local, @mcast1, 0x10, 0x8, 0x0, 0x9}}) 1.696002569s ago: executing program 4 (id=240): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.679231761s ago: executing program 2 (id=241): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee800000400000000100000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 1.515496988s ago: executing program 4 (id=242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f22, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.435681073s ago: executing program 3 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.296804862s ago: executing program 3 (id=244): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008100)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.106380114s ago: executing program 3 (id=245): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 299.496331ms ago: executing program 4 (id=246): futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r1, 0x0, 0xfce1) 247.907442ms ago: executing program 3 (id=247): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x30000000}) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 236.605981ms ago: executing program 2 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 53.216934ms ago: executing program 4 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 50.997884ms ago: executing program 3 (id=250): unshare(0x22020400) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80086601, 0x1000000000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 2 (id=251): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 81.162528][ T5804] cgroup: Unknown subsys name 'net' [ 81.379002][ T5804] cgroup: Unknown subsys name 'cpuset' [ 81.389265][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.009899][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.721273][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.737152][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.746167][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.755468][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.762997][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.771370][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.772763][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.787301][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.789723][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.801559][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.804752][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.816409][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.817479][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.829432][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.833013][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.840217][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.845289][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.859744][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.869559][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.886765][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.894761][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.902530][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.972725][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.995365][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.007095][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.617524][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 86.681703][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.852112][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.954292][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 87.099898][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 87.129537][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.137046][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.144617][ T5814] bridge_slave_0: entered allmulticast mode [ 87.151936][ T5814] bridge_slave_0: entered promiscuous mode [ 87.198802][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.208620][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.216334][ T5814] bridge_slave_1: entered allmulticast mode [ 87.223619][ T5814] bridge_slave_1: entered promiscuous mode [ 87.350432][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.359738][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.367347][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.375474][ T5831] bridge_slave_0: entered allmulticast mode [ 87.382739][ T5831] bridge_slave_0: entered promiscuous mode [ 87.424793][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.447052][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.456584][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.463874][ T5831] bridge_slave_1: entered allmulticast mode [ 87.471151][ T5831] bridge_slave_1: entered promiscuous mode [ 87.511346][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.518570][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.525830][ T5825] bridge_slave_0: entered allmulticast mode [ 87.533024][ T5825] bridge_slave_0: entered promiscuous mode [ 87.541013][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.548213][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.556352][ T5824] bridge_slave_0: entered allmulticast mode [ 87.563539][ T5824] bridge_slave_0: entered promiscuous mode [ 87.605497][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.612669][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.620056][ T5825] bridge_slave_1: entered allmulticast mode [ 87.629245][ T5825] bridge_slave_1: entered promiscuous mode [ 87.636391][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.643558][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.651282][ T5824] bridge_slave_1: entered allmulticast mode [ 87.658804][ T5824] bridge_slave_1: entered promiscuous mode [ 87.669058][ T5814] team0: Port device team_slave_0 added [ 87.678521][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.731592][ T5814] team0: Port device team_slave_1 added [ 87.740177][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.845742][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.853002][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.863141][ T5816] bridge_slave_0: entered allmulticast mode [ 87.871415][ T5816] bridge_slave_0: entered promiscuous mode [ 87.881581][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.894821][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.906910][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.917221][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.924903][ T55] Bluetooth: hci0: command tx timeout [ 87.927287][ T5829] Bluetooth: hci4: command tx timeout [ 87.930705][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.961949][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.977073][ T5831] team0: Port device team_slave_0 added [ 87.983494][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.991596][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.998992][ T5816] bridge_slave_1: entered allmulticast mode [ 88.005092][ T5829] Bluetooth: hci2: command tx timeout [ 88.007193][ T5816] bridge_slave_1: entered promiscuous mode [ 88.032926][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.043216][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.050477][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.079817][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.090696][ T5829] Bluetooth: hci1: command tx timeout [ 88.093973][ T55] Bluetooth: hci3: command tx timeout [ 88.107966][ T5831] team0: Port device team_slave_1 added [ 88.160019][ T5825] team0: Port device team_slave_0 added [ 88.211087][ T5825] team0: Port device team_slave_1 added [ 88.235742][ T5824] team0: Port device team_slave_0 added [ 88.243529][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.250569][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.276554][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.290302][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.345420][ T5824] team0: Port device team_slave_1 added [ 88.351830][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.359383][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.385359][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.405718][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.436275][ T5814] hsr_slave_0: entered promiscuous mode [ 88.442801][ T5814] hsr_slave_1: entered promiscuous mode [ 88.510069][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.517116][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.543644][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.556518][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.563495][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.589885][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.631851][ T5816] team0: Port device team_slave_0 added [ 88.654732][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.661719][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.688128][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.716765][ T5816] team0: Port device team_slave_1 added [ 88.729086][ T5831] hsr_slave_0: entered promiscuous mode [ 88.735787][ T5831] hsr_slave_1: entered promiscuous mode [ 88.741861][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.750331][ T5831] Cannot create hsr debugfs directory [ 88.784611][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.791598][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.818362][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.935483][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.942454][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.969437][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.992320][ T5825] hsr_slave_0: entered promiscuous mode [ 88.998776][ T5825] hsr_slave_1: entered promiscuous mode [ 89.005185][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.012772][ T5825] Cannot create hsr debugfs directory [ 89.038036][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.045172][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.071669][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.148001][ T5824] hsr_slave_0: entered promiscuous mode [ 89.155501][ T5824] hsr_slave_1: entered promiscuous mode [ 89.161890][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.173903][ T5824] Cannot create hsr debugfs directory [ 89.415623][ T5816] hsr_slave_0: entered promiscuous mode [ 89.421998][ T5816] hsr_slave_1: entered promiscuous mode [ 89.428816][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.436488][ T5816] Cannot create hsr debugfs directory [ 89.679750][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.692283][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.704978][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.745168][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.876082][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.892806][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.910227][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.922391][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.005175][ T55] Bluetooth: hci0: command tx timeout [ 90.009239][ T5829] Bluetooth: hci4: command tx timeout [ 90.020972][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.046691][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.060909][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.073433][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.085395][ T5829] Bluetooth: hci2: command tx timeout [ 90.164583][ T5829] Bluetooth: hci1: command tx timeout [ 90.173908][ T5829] Bluetooth: hci3: command tx timeout [ 90.192769][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.235030][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.249470][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.260869][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.288838][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.335801][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.392880][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.400263][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.420860][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.433655][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.464922][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.479937][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.498678][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.505958][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.517731][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.524958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.559310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.566492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.600901][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.608116][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.747546][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.859281][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.873600][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.947733][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.954978][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.970316][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.977540][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.024533][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.084865][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.092049][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.140030][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.147285][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.262367][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.310061][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.376824][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.430226][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.478522][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.486018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.528005][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.535234][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.671190][ T5831] veth0_vlan: entered promiscuous mode [ 91.700504][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.777606][ T5831] veth1_vlan: entered promiscuous mode [ 91.931079][ T10] cfg80211: failed to load regulatory.db [ 91.941466][ T5825] veth0_vlan: entered promiscuous mode [ 91.966420][ T5831] veth0_macvtap: entered promiscuous mode [ 92.016322][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.026382][ T5825] veth1_vlan: entered promiscuous mode [ 92.040166][ T5831] veth1_macvtap: entered promiscuous mode [ 92.090254][ T5829] Bluetooth: hci4: command tx timeout [ 92.091162][ T55] Bluetooth: hci0: command tx timeout [ 92.137040][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.165170][ T55] Bluetooth: hci2: command tx timeout [ 92.211062][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.228485][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.238302][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.248184][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.248850][ T55] Bluetooth: hci3: command tx timeout [ 92.257193][ T5829] Bluetooth: hci1: command tx timeout [ 92.262499][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333512][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.400560][ T5825] veth0_macvtap: entered promiscuous mode [ 92.415053][ T5824] veth0_vlan: entered promiscuous mode [ 92.453387][ T5825] veth1_macvtap: entered promiscuous mode [ 92.498707][ T5824] veth1_vlan: entered promiscuous mode [ 92.521181][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.533664][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.548272][ T5816] veth0_vlan: entered promiscuous mode [ 92.591341][ T5814] veth0_vlan: entered promiscuous mode [ 92.621722][ T5816] veth1_vlan: entered promiscuous mode [ 92.632979][ T5814] veth1_vlan: entered promiscuous mode [ 92.652124][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.660580][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.678038][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.715500][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.736225][ T5824] veth0_macvtap: entered promiscuous mode [ 92.747337][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.762507][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.771547][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.780754][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.807525][ T5816] veth0_macvtap: entered promiscuous mode [ 92.829202][ T5816] veth1_macvtap: entered promiscuous mode [ 92.862553][ T5824] veth1_macvtap: entered promiscuous mode [ 92.865773][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.898685][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.937808][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.991272][ T5814] veth0_macvtap: entered promiscuous mode [ 93.039910][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050167][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059951][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.069082][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.114259][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.160666][ T5814] veth1_macvtap: entered promiscuous mode [ 93.192256][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.196251][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.222090][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.305952][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.332207][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.341993][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.356911][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.531062][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.568933][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.570397][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.636492][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.663427][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.701412][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.710360][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.719308][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.801920][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.810784][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.953298][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.972675][ T5915] Zero length message leads to an empty skb [ 93.979697][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.991947][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.011543][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.126007][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.146835][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.165667][ T5829] Bluetooth: hci4: command tx timeout [ 94.166035][ T55] Bluetooth: hci0: command tx timeout [ 94.214149][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.222149][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.245251][ T55] Bluetooth: hci2: command tx timeout [ 94.327167][ T55] Bluetooth: hci1: command tx timeout [ 94.327842][ T5829] Bluetooth: hci3: command tx timeout [ 94.443607][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.523842][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.726543][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.164395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.065837][ T5938] block nbd0: NBD_DISCONNECT [ 96.174037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.496445][ T5950] usb usb8: usbfs: process 5950 (syz.2.15) did not claim interface 0 before use [ 96.804368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.847955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.031696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 97.045114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.055057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 97.769794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.872217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.935902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.024423][ T5969] vivid-006: kernel_thread() failed [ 100.799832][ T5984] block nbd2: NBD_DISCONNECT [ 103.592902][ T6002] syzkaller0: entered promiscuous mode [ 103.703785][ T6002] syzkaller0: entered allmulticast mode [ 108.535247][ T6072] blkio.reset_stats is deprecated [ 109.642301][ T6084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.59'. [ 109.725743][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 109.850282][ T6084] hsr_slave_1 (unregistering): left promiscuous mode [ 111.519887][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 111.590667][ T6121] syzkaller0: entered promiscuous mode [ 111.599319][ T6121] syzkaller0: entered allmulticast mode [ 112.704628][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.068580][ T30] audit: type=1326 audit(1747494703.501:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6148 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a78e969 code=0x7fc00000 [ 114.481207][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.196563][ T6163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.028975][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.100'. [ 119.196286][ T6229] warning: `syz.3.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.315010][ T6231] dvmrp8: entered allmulticast mode [ 119.332444][ T6231] dvmrp8: left allmulticast mode [ 120.655234][ T6216] infiniband syz0: set active [ 120.677277][ T6216] infiniband syz0: added bond0 [ 120.718942][ T6216] syz0: rxe_create_cq: returned err = -12 [ 120.751702][ T6216] infiniband syz0: Couldn't create ib_mad CQ [ 120.774263][ T6216] infiniband syz0: Couldn't open port 1 [ 121.840004][ T6216] RDS/IB: syz0: added [ 121.885366][ T6216] smc: adding ib device syz0 with port count 1 [ 121.938080][ T6216] smc: ib device syz0 port 1 has pnetid [ 124.525634][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.582977][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.591828][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.612293][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.619518][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.631458][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.644248][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.655922][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.663006][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 124.677504][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 126.114606][ T6304] process 'syz.2.137' launched './file2' with NULL argv: empty string added [ 126.228397][ T6306] Cannot find add_set index 0 as target [ 128.524457][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.142'. [ 128.533802][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 128.542878][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'. [ 129.364953][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 129.651721][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 133.395137][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.401759][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.874282][ T5820] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 135.198299][ T5820] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.856674][ T5820] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.870537][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.893867][ T5820] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 135.906854][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.920916][ T5820] usb 3-1: config 0 descriptor?? [ 136.475987][ T6400] capability: warning: `syz.2.162' uses 32-bit capabilities (legacy support in use) [ 136.888766][ T5820] usbhid 3-1:0.0: can't add hid device: -71 [ 136.906569][ T5820] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.997042][ T5820] usb 3-1: USB disconnect, device number 2 [ 137.354822][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.385694][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.394302][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.429544][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.446150][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.787864][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.187488][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.359496][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.523856][ T55] Bluetooth: hci5: command tx timeout [ 141.603915][ T55] Bluetooth: hci5: command tx timeout [ 142.757335][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.008785][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 144.403407][ T55] Bluetooth: hci5: command tx timeout [ 146.496402][ T5829] Bluetooth: hci5: command tx timeout [ 146.776965][ T53] bridge_slave_1: left allmulticast mode [ 146.837513][ T53] bridge_slave_1: left promiscuous mode [ 146.846378][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.610160][ T53] bridge_slave_0: left allmulticast mode [ 147.663882][ T53] bridge_slave_0: left promiscuous mode [ 147.669735][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.909387][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 151.152144][ T6183] smc: removing ib device syz0 [ 151.159717][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.172964][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.184191][ T53] bond0 (unregistering): Released all slaves [ 151.219158][ T6406] chnl_net:caif_netlink_parms(): no params data found [ 156.066067][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 156.196405][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 156.314036][ T2150] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.431539][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.456788][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.464434][ T6406] bridge_slave_0: entered allmulticast mode [ 156.478681][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.493058][ T6406] bridge_slave_0: entered promiscuous mode [ 156.504115][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.551194][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.558367][ T2150] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 156.558415][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.606137][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.997831][ T6406] bridge_slave_1: entered allmulticast mode [ 157.165159][ T6406] bridge_slave_1: entered promiscuous mode [ 157.183031][ T2150] usb 4-1: config 0 descriptor?? [ 157.511670][ T2150] usbhid 4-1:0.0: can't add hid device: -71 [ 157.541158][ T2150] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.583633][ T2150] usb 4-1: USB disconnect, device number 2 [ 157.943000][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.030546][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.073966][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 158.264191][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.456925][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.490572][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 158.559267][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.620776][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 158.668055][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.796442][ T5868] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.845274][ T6406] team0: Port device team_slave_0 added [ 158.886868][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.968651][ T6406] team0: Port device team_slave_1 added [ 159.129747][ T5868] usb 5-1: config 0 descriptor?? [ 159.422917][ T6613] atomic_op ffff888024702998 conn xmit_atomic 0000000000000000 [ 159.836102][ T5868] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 159.914175][ T5868] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x4 [ 159.923403][ T5868] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 159.982241][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.009565][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.132819][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.194356][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.209982][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.257618][ T5868] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.c0 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 160.284257][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.359673][ T5868] usb 5-1: USB disconnect, device number 2 [ 160.632717][ T6629] fido_id[6629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 160.723136][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 160.792325][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 160.879265][ T6406] hsr_slave_0: entered promiscuous mode [ 160.913966][ T6406] hsr_slave_1: entered promiscuous mode [ 161.734554][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.796226][ T6406] Cannot create hsr debugfs directory [ 161.950699][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 162.105991][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 162.116549][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.160719][ T5820] usb 1-1: config 0 has no interfaces? [ 162.180166][ T5820] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 162.233779][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.282897][ T5820] usb 1-1: config 0 descriptor?? [ 162.499936][ T6667] Oops: general protection fault, probably for non-canonical address 0xdffffc0000002c03: 0000 [#1] SMP KASAN PTI [ 162.511959][ T6667] KASAN: probably user-memory-access in range [0x0000000000016018-0x000000000001601f] [ 162.521517][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.4.249 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 162.533415][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.543472][ T6667] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 162.549493][ T6667] Code: 80 3c 2f 00 74 08 48 89 df e8 6c f3 20 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 41 f3 20 f7 4d 8b 2c 24 49 83 c5 [ 162.569129][ T6667] RSP: 0018:ffffc9000b0aef60 EFLAGS: 00010206 [ 162.575228][ T6667] RAX: 0000000000002c03 RBX: ffff88805d0b8560 RCX: 0000000000080000 [ 162.583210][ T6667] RDX: ffffc9000e21a000 RSI: 0000000000000d64 RDI: 0000000000000d65 [ 162.591193][ T6667] RBP: ffffc9000b0af2d0 R08: ffff88805d0b805f R09: 1ffff1100ba1700b [ 162.599181][ T6667] R10: dffffc0000000000 R11: ffffed100ba1700c R12: 0000000000016018 [ 162.607197][ T6667] R13: dffffc0000000000 R14: ffff88805d0b8000 R15: 1ffff1100ba170ac [ 162.615181][ T6667] FS: 00007f5c8c5df6c0(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 162.624124][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.630719][ T6667] CR2: 000020000000e000 CR3: 0000000032764000 CR4: 00000000003526f0 [ 162.638705][ T6667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.646687][ T6667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.654667][ T6667] Call Trace: [ 162.657965][ T6667] [ 162.660915][ T6667] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 162.666563][ T6667] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 162.672133][ T6667] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 162.677696][ T6667] ? __phys_addr+0xba/0x170 [ 162.682212][ T6667] ? __kasan_kmalloc_large+0x85/0xa0 [ 162.687515][ T6667] ? rcu_is_watching+0x15/0xb0 [ 162.692298][ T6667] ? rcu_is_watching+0x15/0xb0 [ 162.697091][ T6667] ? trace_kmalloc+0x1f/0xd0 [ 162.701702][ T6667] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 162.708330][ T6667] ? __build_skb_around+0x257/0x3e0 [ 162.713547][ T6667] smc_diag_dump+0x27/0xa0 [ 162.717975][ T6667] netlink_dump+0x64e/0xe70 [ 162.722531][ T6667] ? __pfx_netlink_dump+0x10/0x10 [ 162.727577][ T6667] ? netlink_lookup+0x30/0x200 [ 162.732351][ T6667] ? netlink_lookup+0x30/0x200 [ 162.737135][ T6667] ? netlink_lookup+0x30/0x200 [ 162.741910][ T6667] __netlink_dump_start+0x5cb/0x7e0 [ 162.747124][ T6667] smc_diag_handler_dump+0x178/0x210 [ 162.752428][ T6667] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 162.758250][ T6667] ? __pfx_smc_diag_dump+0x10/0x10 [ 162.763375][ T6667] ? sock_diag_lock_handler+0x19/0x290 [ 162.768848][ T6667] ? sock_diag_lock_handler+0x19/0x290 [ 162.774315][ T6667] sock_diag_rcv_msg+0x3d7/0x610 [ 162.779267][ T6667] netlink_rcv_skb+0x219/0x490 [ 162.784044][ T6667] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 162.789518][ T6667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.794847][ T6667] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.800114][ T6667] netlink_unicast+0x75b/0x8d0 [ 162.804900][ T6667] netlink_sendmsg+0x805/0xb30 [ 162.809712][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.815031][ T6667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.820336][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.825634][ T6667] __sock_sendmsg+0x219/0x270 [ 162.830326][ T6667] ____sys_sendmsg+0x505/0x830 [ 162.835106][ T6667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.840414][ T6667] ? import_iovec+0x74/0xa0 [ 162.844939][ T6667] ___sys_sendmsg+0x21f/0x2a0 [ 162.849634][ T6667] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.854866][ T6667] ? __fget_files+0x2a/0x420 [ 162.859463][ T6667] ? __fget_files+0x3a0/0x420 [ 162.864150][ T6667] __x64_sys_sendmsg+0x19b/0x260 [ 162.869102][ T6667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.874587][ T6667] ? do_syscall_64+0xba/0x210 [ 162.879279][ T6667] do_syscall_64+0xf6/0x210 [ 162.883801][ T6667] ? asm_sysvec_call_function_single+0x1a/0x20 [ 162.889999][ T6667] ? clear_bhb_loop+0x60/0xb0 [ 162.894692][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.900597][ T6667] RIP: 0033:0x7f5c8b78e969 [ 162.905034][ T6667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.924659][ T6667] RSP: 002b:00007f5c8c5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.933084][ T6667] RAX: ffffffffffffffda RBX: 00007f5c8b9b6160 RCX: 00007f5c8b78e969 [ 162.941061][ T6667] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 162.949038][ T6667] RBP: 00007f5c8b810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 162.957017][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.965011][ T6667] R13: 0000000000000000 R14: 00007f5c8b9b6160 R15: 00007ffe53852938 [ 162.973000][ T6667] [ 162.976024][ T6667] Modules linked in: [ 162.985526][ T6667] ---[ end trace 0000000000000000 ]--- [ 162.991134][ T6667] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 162.997260][ T6667] Code: 80 3c 2f 00 74 08 48 89 df e8 6c f3 20 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 41 f3 20 f7 4d 8b 2c 24 49 83 c5 [ 163.020334][ T6667] RSP: 0018:ffffc9000b0aef60 EFLAGS: 00010206 [ 163.026631][ T6667] RAX: 0000000000002c03 RBX: ffff88805d0b8560 RCX: 0000000000080000 [ 163.034715][ T6667] RDX: ffffc9000e21a000 RSI: 0000000000000d64 RDI: 0000000000000d65 [ 163.042738][ T6667] RBP: ffffc9000b0af2d0 R08: ffff88805d0b805f R09: 1ffff1100ba1700b [ 163.051258][ T6667] R10: dffffc0000000000 R11: ffffed100ba1700c R12: 0000000000016018 [ 163.059388][ T6667] R13: dffffc0000000000 R14: ffff88805d0b8000 R15: 1ffff1100ba170ac [ 163.067470][ T6667] FS: 00007f5c8c5df6c0(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 163.076560][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.083198][ T6667] CR2: 000020000000e000 CR3: 0000000032764000 CR4: 00000000003526f0 [ 163.091382][ T6667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.099464][ T6667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.110734][ T6667] Kernel panic - not syncing: Fatal exception [ 163.116980][ T6667] Kernel Offset: disabled [ 163.121304][ T6667] Rebooting in 86400 seconds..