last executing test programs: 7.128015044s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006980c70000000001000000940001000000fcffc5"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x84880}, 0xfa0a2aed8a5a7823) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/144, 0x90) 6.123438268s ago: executing program 0 (id=10): socket$inet6(0xa, 0x200000000003, 0x87) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xa639, 0x9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r8, 0x4b70, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1064, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000580)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x4ac, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r12}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r13 = socket(0xa, 0x1, 0x0) ioctl(r13, 0x8916, &(0x7f0000000000)) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000019c0)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1e0101000040000000000000000000fe8000000000000000000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000000146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001800f85dffff"], 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 5.239694154s ago: executing program 3 (id=15): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.206676514s ago: executing program 4 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) 5.176166267s ago: executing program 0 (id=17): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x4b00, &(0x7f0000000500)="05"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) 4.344402887s ago: executing program 2 (id=18): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="2deed08d7f0000010000000003"], 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r2}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfff, @loopback, 0xfffffffc}, 0x1c) syz_emit_ethernet(0xd4, &(0x7f0000000480)={@remote, @link_local, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0xb, 0x66, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}, {0x4e21, 0x4e20, 0xa2, 0x0, @gue={{0x2, 0x1, 0x1, 0x2, 0x100}, "841d591abc49a9cd56060ae2438de8f79514aa71412460992086bdcfaddcf3ad8584ba97fc291a82a804b22ef87f49dcc2d439b6a39ed3d7cede63dd66f2337bcddc2423cfa943c78004e903f201496bbb66fa0a8c23eb5755451b3b9dd072afb6e2a316a9e6fe41c6f3df0a4f268300967c98b20d55a5add5a1e52fc78c2307896d033071e9b473eac6509c477a3fd01f54"}}}}}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$inet_sctp(0x2, 0x5, 0x84) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r11], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={r11, @in6={{0xa, 0x4e20, 0x7ff, @private1}}, 0x1, 0x2, 0x5, 0x3, 0x2a}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xffffffff, 0x6, 0xb, 0x101, 0x101, 0x7, 0x3, {r11, @in6={{0xa, 0x4e24, 0x7, @private1, 0x2}}, 0x9ca, 0x5, 0xfffff988, 0x4, 0x9}}, &(0x7f0000000580)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f0000000080)={{0x1}}) 4.178382393s ago: executing program 4 (id=20): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) 4.175265139s ago: executing program 0 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xf}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x495, 0x200, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) 3.976244623s ago: executing program 4 (id=22): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0xee00, 0xee00) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r3, 0x7, 0x1, "d0"}, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x7, 0x0, 0x2, 0x1000000, 0xd7a5}}) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2ed, 0x0, 0x6, {[@sack_perm={0x4, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) fcntl$lock(r5, 0x5, &(0x7f0000000180)={0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff}) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r10, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x74, r10, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendto$inet6(r4, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 3.899210944s ago: executing program 1 (id=23): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000ffff1801000020206925000000cf362020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x7ffd}}}, 0x118) 3.713782929s ago: executing program 1 (id=24): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.379686482s ago: executing program 3 (id=25): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="9c", 0x1}], 0x1) 3.317007361s ago: executing program 0 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000"], 0x254}}, 0x0) 3.273377825s ago: executing program 3 (id=27): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 3.261599575s ago: executing program 2 (id=28): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="b4ecd005526044894f41f6dea77c4a1bb0fdd51915aa6d43f04cbe6ec52ca2e96698dda327d89f6054e7e709e4b0ac1faea38b893913a0f61031e0e5cc3a3b4af13421972b39e78d93c51cc0d21a2fc7824c17bc37f2e1d7", 0x58}], 0x1) 3.151426717s ago: executing program 0 (id=29): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 3.105609174s ago: executing program 3 (id=30): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x300, 0x0, 0x0, 0x0}) 3.061029432s ago: executing program 2 (id=31): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6044}, 0x6) 3.010414009s ago: executing program 4 (id=32): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000600)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$BTRFS_IOC_SCRUB(r1, 0x80044801, &(0x7f0000000900)={0x0, 0xffffffffffffff45, 0x100}) 2.822259864s ago: executing program 3 (id=33): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x200000003, 0x86) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.633023394s ago: executing program 1 (id=34): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0) 2.434222824s ago: executing program 1 (id=35): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.185680364s ago: executing program 1 (id=36): ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x40095505, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r2, 0x0, {}, 0x1}, 0x18) sendfile(r1, r0, 0x0, 0x1000000000000a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x7c, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x1}, {0xffff}, {0x5, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x37, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x2e, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4e, 0x9, 0x7, 0x0, 0x7, 0xd, 0x9, 0x8, 0x4}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000c00) 2.040604977s ago: executing program 2 (id=37): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) prctl$PR_SVE_SET_VL(0x32, 0x3c209) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000280)=0x6e, 0x180800) connect$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='exofs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000380)="cc7acc821aad8fa41600d5f94f7114e8487bb37e558eb5bd4c7d72708e3afaf4ccd77d7c1df70669876d6de1c0dd0b5395f8c8412e8982fe", 0x38, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) creat(0x0, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) fchdir(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000d4f089e6d8603c58664aea148886000000000010000000486910cb9b9f63cc968a40043a00000000000000009800610049e3ac528da36578763a48a2eab1f6b11042e570b5260c3eb396817e7f243685b7fe43b3b5a98bb0b8ee74ade9b54d5574f6d6cabf24a690bb05d6046b5cf6f501ed266430f3d37eb52541e2e61b00042edd12604608fbefcc0b2ed25d9348dc551e327eb309a4e3d35f214674e9b0fbe8dd6cdb87abbe8324f42192beb573c75886553504ba074da1547c18607afb8a1d4f50b4b630ec46905e"], &(0x7f0000005bc0)=""/255, 0x2f, 0xff, 0x9, 0xffd, 0x0, @void, @value}, 0x28) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0xa) 1.876175481s ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffe01}, 0x18) dup(0xffffffffffffffff) socket$caif_seqpacket(0x25, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.309077386s ago: executing program 2 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000018"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 966.543861ms ago: executing program 3 (id=40): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 873.428821ms ago: executing program 1 (id=41): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.154807ms ago: executing program 2 (id=42): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) fcntl$setstatus(r0, 0x4, 0x0) 0s ago: executing program 4 (id=43): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x5, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x1ff, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x1003, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x7, 0x69a0, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x3}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x3, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 67.379298][ T30] audit: type=1400 audit(1749013760.121:62): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.385519][ T5809] cgroup: Unknown subsys name 'net' [ 67.402049][ T30] audit: type=1400 audit(1749013760.131:63): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.429873][ T30] audit: type=1400 audit(1749013760.151:64): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.603256][ T5809] cgroup: Unknown subsys name 'cpuset' [ 67.611472][ T5809] cgroup: Unknown subsys name 'rlimit' [ 67.799949][ T30] audit: type=1400 audit(1749013760.541:65): avc: denied { setattr } for pid=5809 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.823561][ T30] audit: type=1400 audit(1749013760.551:66): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.859910][ T30] audit: type=1400 audit(1749013760.551:67): avc: denied { write } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.880319][ T30] audit: type=1400 audit(1749013760.551:68): avc: denied { read } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.900624][ T30] audit: type=1400 audit(1749013760.571:69): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.925490][ T30] audit: type=1400 audit(1749013760.571:70): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.927983][ T5811] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.948907][ T30] audit: type=1400 audit(1749013760.601:71): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 68.908056][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.091174][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.097598][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.193459][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.214003][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.221351][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.229426][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.237809][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.245600][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.270982][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.280074][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.288533][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.296324][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.312133][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.329219][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.340382][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.351059][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.358447][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.368616][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.369069][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.384832][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.392486][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.400061][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.408023][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.415816][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.424121][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.438620][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.446759][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.682204][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 71.849109][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.856319][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.863813][ T5823] bridge_slave_0: entered allmulticast mode [ 71.871232][ T5823] bridge_slave_0: entered promiscuous mode [ 71.879528][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.886659][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.893820][ T5823] bridge_slave_1: entered allmulticast mode [ 71.901378][ T5823] bridge_slave_1: entered promiscuous mode [ 71.969733][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.985013][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.031236][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 72.089577][ T5823] team0: Port device team_slave_0 added [ 72.125456][ T5823] team0: Port device team_slave_1 added [ 72.203937][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.210908][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.237043][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.257552][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 72.278261][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.292992][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.300727][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.326798][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.404700][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.412082][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.419172][ T5828] bridge_slave_0: entered allmulticast mode [ 72.426124][ T5828] bridge_slave_0: entered promiscuous mode [ 72.434317][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.441473][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.448551][ T5828] bridge_slave_1: entered allmulticast mode [ 72.455620][ T5828] bridge_slave_1: entered promiscuous mode [ 72.470368][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.563669][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.595493][ T5823] hsr_slave_0: entered promiscuous mode [ 72.602863][ T5823] hsr_slave_1: entered promiscuous mode [ 72.619321][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.656231][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.663518][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.671015][ T5829] bridge_slave_0: entered allmulticast mode [ 72.677705][ T5829] bridge_slave_0: entered promiscuous mode [ 72.694002][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.701211][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.708319][ T5819] bridge_slave_0: entered allmulticast mode [ 72.716401][ T5819] bridge_slave_0: entered promiscuous mode [ 72.736989][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.744284][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.751736][ T5829] bridge_slave_1: entered allmulticast mode [ 72.758429][ T5829] bridge_slave_1: entered promiscuous mode [ 72.778336][ T5828] team0: Port device team_slave_0 added [ 72.784430][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.791522][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.798584][ T5819] bridge_slave_1: entered allmulticast mode [ 72.805668][ T5819] bridge_slave_1: entered promiscuous mode [ 72.845694][ T5828] team0: Port device team_slave_1 added [ 72.875843][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.918010][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.939098][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.948329][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.955771][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.963094][ T5832] bridge_slave_0: entered allmulticast mode [ 72.969842][ T5832] bridge_slave_0: entered promiscuous mode [ 73.003983][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.011137][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.039193][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.052177][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.059117][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.085062][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.097469][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.106762][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.114249][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.121425][ T5832] bridge_slave_1: entered allmulticast mode [ 73.128168][ T5832] bridge_slave_1: entered promiscuous mode [ 73.141493][ T5829] team0: Port device team_slave_0 added [ 73.186568][ T5829] team0: Port device team_slave_1 added [ 73.215746][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.228119][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.253096][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.260338][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.286528][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.299601][ T5819] team0: Port device team_slave_0 added [ 73.310905][ T51] Bluetooth: hci0: command tx timeout [ 73.337788][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.344752][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.370858][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.389273][ T5819] team0: Port device team_slave_1 added [ 73.395079][ T51] Bluetooth: hci1: command tx timeout [ 73.426239][ T5828] hsr_slave_0: entered promiscuous mode [ 73.433263][ T5828] hsr_slave_1: entered promiscuous mode [ 73.439280][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.447238][ T5828] Cannot create hsr debugfs directory [ 73.469930][ T5820] Bluetooth: hci4: command tx timeout [ 73.470014][ T5827] Bluetooth: hci2: command tx timeout [ 73.475589][ T51] Bluetooth: hci3: command tx timeout [ 73.490633][ T5832] team0: Port device team_slave_0 added [ 73.508866][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.516045][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.541980][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.554548][ T5832] team0: Port device team_slave_1 added [ 73.617145][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.624411][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.650573][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.694931][ T5829] hsr_slave_0: entered promiscuous mode [ 73.701611][ T5829] hsr_slave_1: entered promiscuous mode [ 73.707523][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.715213][ T5829] Cannot create hsr debugfs directory [ 73.748960][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.755972][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.782091][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.795364][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.802342][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.828311][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.932787][ T5819] hsr_slave_0: entered promiscuous mode [ 73.938871][ T5819] hsr_slave_1: entered promiscuous mode [ 73.945314][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.954292][ T5819] Cannot create hsr debugfs directory [ 74.012423][ T5832] hsr_slave_0: entered promiscuous mode [ 74.018477][ T5832] hsr_slave_1: entered promiscuous mode [ 74.024544][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.032352][ T5832] Cannot create hsr debugfs directory [ 74.105989][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.145725][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.177072][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.206958][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.301936][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.314579][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.342123][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.373733][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.442554][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.453652][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.464428][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.475190][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.561925][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.580224][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.608942][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.619310][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.714820][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.722674][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.733942][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.747653][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.757880][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.795123][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.822198][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.833411][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.840620][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.851081][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.858150][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.894067][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.932964][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.973278][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.984619][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.991708][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.018180][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.025300][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.064345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.071474][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.084328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.091459][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.115357][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.166662][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 75.166676][ T30] audit: type=1400 audit(1749013767.911:86): avc: denied { sys_module } for pid=5828 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.223455][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.254440][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.261815][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.326223][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.356320][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.378508][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.385678][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.393648][ T51] Bluetooth: hci0: command tx timeout [ 75.457140][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.472034][ T51] Bluetooth: hci1: command tx timeout [ 75.507605][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.535787][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.543000][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.553664][ T51] Bluetooth: hci3: command tx timeout [ 75.559076][ T51] Bluetooth: hci4: command tx timeout [ 75.564914][ T5827] Bluetooth: hci2: command tx timeout [ 75.598711][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.605833][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.758612][ T5828] veth0_vlan: entered promiscuous mode [ 75.799667][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.814603][ T5828] veth1_vlan: entered promiscuous mode [ 75.843411][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.054993][ T5829] veth0_vlan: entered promiscuous mode [ 76.069209][ T5828] veth0_macvtap: entered promiscuous mode [ 76.083247][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.125052][ T5828] veth1_macvtap: entered promiscuous mode [ 76.144592][ T5829] veth1_vlan: entered promiscuous mode [ 76.217649][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.257107][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.284104][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.295894][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.308613][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.324511][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.364083][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.409752][ T5832] veth0_vlan: entered promiscuous mode [ 76.496575][ T5832] veth1_vlan: entered promiscuous mode [ 76.526832][ T5819] veth0_vlan: entered promiscuous mode [ 76.562571][ T5829] veth0_macvtap: entered promiscuous mode [ 76.587257][ T5829] veth1_macvtap: entered promiscuous mode [ 76.637014][ T5819] veth1_vlan: entered promiscuous mode [ 76.649104][ T5823] veth0_vlan: entered promiscuous mode [ 76.682955][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.696325][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.704754][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.715865][ T5832] veth0_macvtap: entered promiscuous mode [ 76.737008][ T5832] veth1_macvtap: entered promiscuous mode [ 76.748550][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.764254][ T5823] veth1_vlan: entered promiscuous mode [ 76.784801][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.793678][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.802804][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.811562][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.846428][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.871053][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.889615][ T5819] veth0_macvtap: entered promiscuous mode [ 76.904184][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.916694][ T30] audit: type=1400 audit(1749013769.661:87): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.sO6QWw/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.916914][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.954973][ T5823] veth0_macvtap: entered promiscuous mode [ 76.959402][ T30] audit: type=1400 audit(1749013769.691:88): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.987953][ T5819] veth1_macvtap: entered promiscuous mode [ 77.010125][ T30] audit: type=1400 audit(1749013769.691:89): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.sO6QWw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.016695][ T5823] veth1_macvtap: entered promiscuous mode [ 77.051635][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.071804][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.080030][ T30] audit: type=1400 audit(1749013769.691:90): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.084526][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.111701][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.120699][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.120763][ T30] audit: type=1400 audit(1749013769.701:91): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.sO6QWw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.156419][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.163886][ T30] audit: type=1400 audit(1749013769.701:92): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.sO6QWw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.177056][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.207975][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.231714][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.247644][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.273717][ T30] audit: type=1400 audit(1749013769.701:93): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.295217][ T30] audit: type=1400 audit(1749013769.751:94): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.296368][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.344549][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.353598][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.366582][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377061][ T30] audit: type=1400 audit(1749013769.751:95): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="gadgetfs" ino=5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.401437][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.407209][ T5873] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.411882][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.442872][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.451264][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.459361][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.459864][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.484053][ T5827] Bluetooth: hci0: command tx timeout [ 77.524659][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.546953][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.560890][ T5827] Bluetooth: hci1: command tx timeout [ 77.630188][ T5827] Bluetooth: hci4: command tx timeout [ 77.630970][ T51] Bluetooth: hci3: command tx timeout [ 77.635592][ T5827] Bluetooth: hci2: command tx timeout [ 77.738459][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.751971][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.859529][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.880808][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.929249][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.952432][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.019287][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.064354][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.184517][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.218351][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.388942][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.399210][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.595432][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 78.655702][ T5926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.680947][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 78.844675][ T5926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.969694][ T5926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.119504][ T5926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.434198][ T5961] sg_write: data in/out 268435417/14 bytes for SCSI command 0x0-- guessing data in; [ 79.434198][ T5961] program syz.3.13 not setting count and/or reply_len properly [ 79.469138][ T5932] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 79.477765][ T5926] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.550437][ T5827] Bluetooth: hci0: command tx timeout [ 79.639715][ T5827] Bluetooth: hci1: command tx timeout [ 79.711082][ T5827] Bluetooth: hci2: command tx timeout [ 79.711099][ T5820] Bluetooth: hci3: command tx timeout [ 79.716812][ T5827] Bluetooth: hci4: command tx timeout [ 79.754313][ T5926] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.201944][ T5971] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14'. [ 80.211101][ T5971] ksmbd: Unknown IPC event: 3, ignore. [ 80.238757][ T5971] Cannot find set identified by id 0 to match [ 80.255767][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 80.255781][ T30] audit: type=1400 audit(1749013773.001:142): avc: denied { read write } for pid=5968 comm="syz.0.17" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.302582][ T30] audit: type=1400 audit(1749013773.001:143): avc: denied { open } for pid=5968 comm="syz.0.17" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.341240][ T30] audit: type=1400 audit(1749013773.081:144): avc: denied { ioctl } for pid=5968 comm="syz.0.17" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.366908][ T5926] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.478678][ T30] audit: type=1326 audit(1749013773.151:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.4.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0cf8e969 code=0x7ffc0000 [ 80.483429][ T5926] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.507903][ T30] audit: type=1326 audit(1749013773.151:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.4.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0cf8e969 code=0x7ffc0000 [ 80.643828][ T30] audit: type=1326 audit(1749013773.171:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.4.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f6f0cf8e969 code=0x7ffc0000 [ 80.774746][ T5986] netlink: 'syz.0.21': attribute type 13 has an invalid length. [ 80.789650][ T30] audit: type=1326 audit(1749013773.171:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.4.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0cf8e969 code=0x7ffc0000 [ 80.957291][ T30] audit: type=1400 audit(1749013773.691:149): avc: denied { getopt } for pid=5993 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.999403][ T5987] Illegal XDP return value 3670206994 on prog (id 12) dev syz_tun, expect packet loss! [ 81.042223][ T30] audit: type=1400 audit(1749013773.791:150): avc: denied { read write } for pid=5996 comm="syz.1.23" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.097153][ T30] audit: type=1400 audit(1749013773.791:151): avc: denied { open } for pid=5996 comm="syz.1.23" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.155064][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.163255][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.180292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.260051][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.276097][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.324711][ T10] cfg80211: failed to load regulatory.db [ 81.355293][ T5986] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.364693][ T5986] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.376472][ T5986] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.385486][ T5986] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.658812][ T6008] netlink: 268 bytes leftover after parsing attributes in process `syz.0.26'. [ 81.902766][ T909] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.933468][ T909] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.425801][ T6032] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 82.432534][ T6032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.519701][ T6032] vhci_hcd vhci_hcd.0: Device attached [ 82.563094][ T6038] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 82.569722][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.639754][ T6032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.679026][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 82.707327][ T5904] vhci_hcd: vhci_device speed not set [ 82.739876][ T6026] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 82.746489][ T6026] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.796233][ T6028] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 82.802773][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.833387][ T5904] usb 39-3: new full-speed USB device number 2 using vhci_hcd [ 82.865282][ T6026] vhci_hcd vhci_hcd.0: Device attached [ 82.891272][ T6028] vhci_hcd vhci_hcd.0: Device attached [ 82.953434][ T6039] vhci_hcd: connection closed [ 82.959468][ T6033] vhci_hcd: connection reset by peer [ 82.980617][ T61] vhci_hcd: stop threads [ 82.989229][ T61] vhci_hcd: release socket [ 83.005853][ T6030] vhci_hcd: connection closed [ 83.019626][ T61] vhci_hcd: disconnect device [ 83.041877][ T6031] vhci_hcd: connection closed [ 83.053276][ T6049] netlink: 84 bytes leftover after parsing attributes in process `syz.1.36'. [ 83.053910][ T6047] hub 1-0:1.0: USB hub found [ 83.072200][ T61] vhci_hcd: stop threads [ 83.076451][ T61] vhci_hcd: release socket [ 83.102903][ T61] vhci_hcd: disconnect device [ 83.206249][ T6047] hub 1-0:1.0: 1 port detected [ 83.235960][ T6049] vcan0: entered promiscuous mode [ 83.270068][ T6049] vcan0: entered allmulticast mode [ 83.300197][ T61] vhci_hcd: stop threads [ 83.320799][ T61] vhci_hcd: release socket [ 83.325306][ T61] vhci_hcd: disconnect device [ 83.333583][ T61] vhci_hcd: stop threads [ 83.337826][ T61] vhci_hcd: release socket [ 83.343869][ T61] vhci_hcd: disconnect device [ 83.967319][ C1] hrtimer: interrupt took 25082836 ns [ 198.929775][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 198.936863][ C0] rcu: (detected by 0, t=10506 jiffies, g=9357, q=1547 ncpus=2) [ 198.944581][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10506 (4294957042-4294946536), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 198.957948][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g9357 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 198.969056][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 198.979021][ C0] rcu: RCU grace-period kthread stack dump: [ 198.984907][ C0] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 198.998436][ C0] Call Trace: [ 199.001713][ C0] [ 199.004649][ C0] __schedule+0x116a/0x5de0 [ 199.009187][ C0] ? __lock_acquire+0x622/0x1c90 [ 199.014150][ C0] ? __pfx___schedule+0x10/0x10 [ 199.019022][ C0] ? find_held_lock+0x2b/0x80 [ 199.023712][ C0] ? schedule+0x2d7/0x3a0 [ 199.028058][ C0] schedule+0xe7/0x3a0 [ 199.032142][ C0] schedule_timeout+0x123/0x290 [ 199.037003][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 199.042387][ C0] ? __pfx_process_timeout+0x10/0x10 [ 199.047688][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.053511][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 199.058992][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 199.063763][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 199.069049][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.074263][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 199.079201][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 199.084061][ C0] rcu_gp_kthread+0x270/0x380 [ 199.088740][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 199.093938][ C0] ? rcu_is_watching+0x12/0xc0 [ 199.098717][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.103931][ C0] ? __kthread_parkme+0x19e/0x250 [ 199.108969][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 199.114169][ C0] kthread+0x3c5/0x780 [ 199.118239][ C0] ? __pfx_kthread+0x10/0x10 [ 199.122834][ C0] ? rcu_is_watching+0x12/0xc0 [ 199.127692][ C0] ? __pfx_kthread+0x10/0x10 [ 199.132285][ C0] ret_from_fork+0x5d4/0x6f0 [ 199.136887][ C0] ? __pfx_kthread+0x10/0x10 [ 199.141478][ C0] ret_from_fork_asm+0x1a/0x30 [ 199.146260][ C0] [ 199.149275][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 199.155616][ C0] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller-11220-gf5164456c604 #0 PREEMPT(full) [ 199.167248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.177302][ C0] Workqueue: events_unbound toggle_allocation_gate [ 199.183823][ C0] RIP: 0010:queued_write_lock_slowpath+0x17e/0x340 [ 199.190343][ C0] Code: 00 00 8b 03 3d 00 01 00 00 74 37 48 b8 00 00 00 00 00 fc ff df 48 89 d9 48 89 da 48 c1 e9 03 83 e2 07 48 01 c1 83 c2 03 f3 90 <0f> b6 01 38 c2 7c 08 84 c0 0f 85 5a 01 00 00 8b 03 3d 00 01 00 00 [ 199.209953][ C0] RSP: 0018:ffffc90000007600 EFLAGS: 00000206 [ 199.216034][ C0] RAX: 00000000000001ff RBX: ffffffff905335a0 RCX: fffffbfff20a66b4 [ 199.224015][ C0] RDX: 0000000000000003 RSI: 0000000000000004 RDI: ffffffff905335a0 [ 199.231989][ C0] RBP: 1ffff92000000ec2 R08: 0000000000000001 R09: fffffbfff20a66b4 [ 199.239962][ C0] R10: ffffffff905335a3 R11: 0000000000000001 R12: ffffffff905335a4 [ 199.247934][ C0] R13: 00000000000000ff R14: fffffbfff20a66b4 R15: ffffc90000007640 [ 199.255908][ C0] FS: 0000000000000000(0000) GS:ffff888124763000(0000) knlGS:0000000000000000 [ 199.264844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.271430][ C0] CR2: 00007f6f0d1b7bac CR3: 000000000e382000 CR4: 00000000003526f0 [ 199.279404][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.287375][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.295345][ C0] Call Trace: [ 199.298624][ C0] [ 199.301469][ C0] ? __pfx_queued_write_lock_slowpath+0x10/0x10 [ 199.307735][ C0] ? lock_acquire+0x179/0x350 [ 199.312443][ C0] do_raw_write_lock+0x1d2/0x3a0 [ 199.317387][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 199.322860][ C0] ___neigh_create+0x9eb/0x28c0 [ 199.327729][ C0] ? lock_acquire+0x179/0x350 [ 199.332424][ C0] ? __pfx____neigh_create+0x10/0x10 [ 199.337722][ C0] ip6_finish_output2+0x1299/0x2020 [ 199.342932][ C0] ? ip6_mtu+0x1a3/0x4a0 [ 199.347185][ C0] ip6_finish_output+0x3f9/0x1360 [ 199.352222][ C0] ip6_output+0x1f9/0x540 [ 199.356564][ C0] ? __pfx_ip6_output+0x10/0x10 [ 199.361419][ C0] ndisc_send_skb+0xa91/0x1e40 [ 199.366203][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 199.371416][ C0] ? __pfx_dst_output+0x10/0x10 [ 199.376286][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 199.381254][ C0] ? __asan_memcpy+0x3c/0x60 [ 199.385877][ C0] ndisc_send_rs+0x129/0x670 [ 199.390493][ C0] addrconf_rs_timer+0x40d/0x840 [ 199.395444][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 199.400921][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 199.406402][ C0] call_timer_fn+0x19a/0x620 [ 199.411018][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 199.416152][ C0] ? mark_held_locks+0x49/0x80 [ 199.420934][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 199.426408][ C0] __run_timers+0x6ef/0x960 [ 199.430937][ C0] ? __pfx___run_timers+0x10/0x10 [ 199.435997][ C0] run_timer_base+0x114/0x190 [ 199.440694][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 199.445931][ C0] run_timer_softirq+0x1a/0x40 [ 199.450725][ C0] handle_softirqs+0x219/0x8e0 [ 199.455511][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 199.460816][ C0] __irq_exit_rcu+0x109/0x170 [ 199.465507][ C0] irq_exit_rcu+0x9/0x30 [ 199.469778][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 199.475442][ C0] [ 199.478377][ C0] [ 199.481308][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.487301][ C0] RIP: 0010:smp_call_function_many_cond+0xd7f/0x1510 [ 199.493993][ C0] Code: 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 b7 1b 0c 00 f3 90 41 0f b6 06 <41> 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff 83 e0 01 89 [ 199.513622][ C0] RSP: 0018:ffffc90000ba78a0 EFLAGS: 00000293 [ 199.519698][ C0] RAX: 0000000000000000 RBX: ffff8880b85417e0 RCX: ffffffff81affbcd [ 199.527669][ C0] RDX: ffff88801fe92440 RSI: ffffffff81affba9 RDI: 0000000000000005 [ 199.535638][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 199.543608][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 199.551581][ C0] R13: 0000000000000003 R14: ffffed10170a82fd R15: ffff8880b843cf40 [ 199.559567][ C0] ? smp_call_function_many_cond+0xd9d/0x1510 [ 199.565648][ C0] ? smp_call_function_many_cond+0xd79/0x1510 [ 199.571737][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 199.576773][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 199.583120][ C0] ? __pfx___text_poke+0x10/0x10 [ 199.588061][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 199.593083][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 199.598205][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 199.604719][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 199.610443][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 199.615469][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 199.621719][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 199.627965][ C0] ? find_held_lock+0x2b/0x80 [ 199.632655][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 199.638641][ C0] jump_label_update+0x376/0x550 [ 199.643588][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 199.649489][ C0] static_key_enable+0x1a/0x20 [ 199.654260][ C0] toggle_allocation_gate+0xfa/0x280 [ 199.659564][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 199.665473][ C0] ? rcu_is_watching+0x12/0xc0 [ 199.670248][ C0] process_one_work+0x9cf/0x1b70 [ 199.675198][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 199.680837][ C0] ? __pfx_process_one_work+0x10/0x10 [ 199.686232][ C0] ? assign_work+0x1a0/0x250 [ 199.690827][ C0] worker_thread+0x6c8/0xf10 [ 199.695435][ C0] ? __pfx_worker_thread+0x10/0x10 [ 199.700553][ C0] kthread+0x3c5/0x780 [ 199.704624][ C0] ? __pfx_kthread+0x10/0x10 [ 199.709235][ C0] ? rcu_is_watching+0x12/0xc0 [ 199.714041][ C0] ? __pfx_kthread+0x10/0x10 [ 199.718637][ C0] ret_from_fork+0x5d4/0x6f0 [ 199.723243][ C0] ? __pfx_kthread+0x10/0x10 [ 199.727843][ C0] ret_from_fork_asm+0x1a/0x30 [ 199.732627][ C0]