last executing test programs: 3.554203966s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 3.411223407s ago: executing program 2 (id=8): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.387080346s ago: executing program 2 (id=9): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x0, {0x2, 0xf0, 0x4}, {0x0, 0x1, 0x6}, 0x2}, {0x3, 0x0, {0x0, 0x0, 0x3}, {0x1, 0x1, 0x2}, 0xfe, 0xfe}, {0x3, 0x0, {0x0, 0xd}, {0x0, 0xf0, 0x3}, 0x2, 0x2}], 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0xfffe) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 3.001901454s ago: executing program 3 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x3, 0x7, 0x2, 0x2}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279fdbd0c7"}}}}, 0x3e) 2.133890253s ago: executing program 1 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="ba0008dd", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) 2.025535873s ago: executing program 2 (id=18): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x7, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x6, 0x5, 0x1, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.716410134s ago: executing program 3 (id=19): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x10) readv(r1, &(0x7f00000002c0), 0x44) 1.550157183s ago: executing program 3 (id=20): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x38, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000040)="89eb", 0x2, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.549790329s ago: executing program 3 (id=21): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.4902827s ago: executing program 3 (id=22): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)="14", 0x828f}, {&(0x7f0000000640)="96e7523171c123bd344b3c2e43c61027f46e41f17217221e25674e54ffe931da40c95b9842ce9093ab905f5cc37f14a2a3d4ef14b065e5f2acdc9e14121ac986a3fbec41efe84a2a9c40fca5ae0842c21d0173cf147bf4473bf5ef55961690c950c3a91ed0eb43504e8d255b1ec9455a1c79a2e2440cc7368ac67f22f62b990da73b8e944ac0dcf4cdb8c4c8bd80f4293c57e89f3f8259ca45021c0dc6c04b6d228bc9ccab452aa794da172a7c669ed2b254d39a7fd026ab0eb27f65e56c01bf78e196fdd730ef3c8b39343227f6ca0fcc86ed0f30f17374ed1f6ead2b2be0e0da36", 0xe2}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003580)='j', 0x1}, {&(0x7f0000000780)="cede9b13ba4545541f9f8765467320a0f12ebf4cd78f72938f655c607a0e35b51ae9119c5cb4", 0x26}], 0x2}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e40)="cfb0", 0xfecf}], 0x1}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001100)="bc", 0x1}], 0x1}}], 0x4, 0x84) 1.488785944s ago: executing program 3 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xa797, 0xb, 0x20000000, 0x5}, 0x4f, 0x5, [{0x3e, 0x40, 0x400, 0xc46cc644, 0x551, 0x5}]}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x1, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8001, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x0, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24cd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x9, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x6, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x7596, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x40005) 771.225826ms ago: executing program 1 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x2, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x567}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c480) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 560.537744ms ago: executing program 1 (id=25): socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 365.783606ms ago: executing program 2 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10800, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0xffd}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 355.855097ms ago: executing program 1 (id=27): r0 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x2000) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00b700", 0x28, 0x6, 0x0, @empty, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f4c466ec35e61e92e583dc9b00010100"}]}}}}}}}}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000180)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0xfffffffffffffffd, 0x0, 0x1, 0x16, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948000000008000000020a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x4]}}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000002400)={0x80000001, 0x0, &(0x7f0000002380)=[{&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/108, 0x6c}], &(0x7f00000023c0)=[0xff], 0x4}, 0x20) r6 = socket(0x10, 0x3, 0x0) mlockall(0x7) mlockall(0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffc0000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mprotect(&(0x7f00009e2000/0x4000)=nil, 0x4000, 0x8) preadv(r7, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x4000010) 270.872815ms ago: executing program 2 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x65, '\x00', 0x7, 0x4, 0x5, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc011}, 0x4000010) 269.596149ms ago: executing program 2 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) 156.494892ms ago: executing program 0 (id=32): r0 = socket(0x2, 0x2, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) 156.272362ms ago: executing program 0 (id=33): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket(0x1e, 0x5, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0xb, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 64.713462ms ago: executing program 0 (id=34): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lsm_set_self_attr(0x5a0535ba9f17c80, 0x0, 0x1001, 0x0) 196.763µs ago: executing program 0 (id=35): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd", 0x4}, {&(0x7f00000002c0)="c5feaad002b474cb445c105793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f9445b9c1fa27e63ac28ca38cff1af01aebe7cf1be1a6562ac1a1c75a048f65507f96e9cf2c22656b4a0508520062433fac", 0xbe}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="7350aa0f0648e34ae75b1ef5919f578796792e8ec84b396ec9d00237af3097d2f3838ea7", 0x24}, {&(0x7f00000003c0)="61681f7d04b54ad4180938c4d794e7561783440d3df171fa73e095296852010ca15871bad7324adabb057bcd140eaa45d934d94e9cb60bea7046a63427d58daacfdf23d21a7f0c48e49c638cebb25b45111f3aac186e6d8133b17f5aba5ee62393949340dc49923f7281e30d08bd0474b2e44c0adcc003255391b425345779764cd47fdc6e9d79074d895a19be86724bf70d582cd8108deb988aaa48c1f5ade5a88564a6066019acc618be3e60c6ee9c2718a4fba664", 0xb6}], 0x2}}], 0x2, 0x4000810) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d2058ea5dcec77b644cb4927e43838cb632b09b823885e5729f163bdc6ab9725aa575d034c67d1985e0d1ac60f597a2747c3d6d6a366b9ab1f791d0ef4196371671865ad407d3d21586847479d116ebcd97848f0d846b4995eeb5aeed68a3b391c9b3005d6ab1ba83b799a7b1fc0cfbd5f17b87636f1fb152d26fd6e587c346ec7328af785abb3c79900f200031c65c088747256aa4e7375159471d2a1acc15dd6b1ea1ffd7360414542b7a9756ecdfd603447c657c792953f5870ae3459d19713abdb0d87c65c3aadd315f937cdbfdeb424745b4e856fbc6a5d8796cf0fc9ee7825d8fbddf5f781a87a3013e4d6b6d0706b633f96772f094fac96ab13446b4332916986d918ad6b97e87b016aab1e4176aa5fb26f22aa8e6b1c1213b68854ed35873bd8ff7b8dfe29850b8ef803af5ba20b31f8156a1be352c65c5e4f94690fe2042958847db79a25b7ae2c6cda84e07aeb33e332f39a7c43122261e9eec6eb5e9edce83ea6a570bade1332e4e68d7bc60551a2af820b9c3c74fe8996930fb274900aeecdde3d6810be875db884df835b83c5aa9cfb1560910953df8311e0bcfa8376807", 0x28f}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 53.091µs ago: executing program 0 (id=36): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) clock_getres(0x0, 0x0) 0s ago: executing program 0 (id=37): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) kernel console output (not intermixed with test programs): [ 37.952015][ T42] audit: type=1400 audit(1782123371.985:115): avc: denied { siginh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.622109][ T42] audit: type=1400 audit(1782123372.685:116): avc: denied { write } for pid=5639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.652085][ T42] audit: type=1400 audit(1782123372.715:117): avc: denied { write } for pid=5642 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.703857][ T42] audit: type=1400 audit(1782123372.765:118): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.746590][ T42] audit: type=1400 audit(1782123372.815:119): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.887790][ T42] audit: type=1400 audit(1782123372.955:120): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:47136' (ED25519) to the list of known hosts. [ 41.366170][ T5661] cgroup: Unknown subsys name 'net' [ 41.506847][ T5661] cgroup: Unknown subsys name 'cpuset' [ 41.511336][ T5661] cgroup: Unknown subsys name 'rlimit' [ 41.728750][ T5715] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.205402][ T5661] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.996949][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 44.996960][ T42] audit: type=1400 audit(1782123379.065:158): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.143238][ T42] audit: type=1400 audit(1782123379.205:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.151956][ T42] audit: type=1400 audit(1782123379.205:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.160272][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.161778][ T42] audit: type=1400 audit(1782123379.205:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.166090][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.172253][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.173048][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.173155][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.173437][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.173494][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.173984][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.174107][ T42] audit: type=1400 audit(1782123379.215:162): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[4065]" dev="sockfs" ino=4065 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.174268][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.175113][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.175726][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.176002][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.177031][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.180031][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.182088][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.185987][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.186860][ T42] audit: type=1400 audit(1782123379.255:163): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.186891][ T42] audit: type=1400 audit(1782123379.255:164): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.186942][ T42] audit: type=1400 audit(1782123379.255:165): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.187488][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.189742][ T42] audit: type=1400 audit(1782123379.255:166): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.192972][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.200102][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.203015][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.203837][ T42] audit: type=1400 audit(1782123379.265:167): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.552560][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.554940][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.557181][ T5728] bridge_slave_0: entered allmulticast mode [ 45.560009][ T5728] bridge_slave_0: entered promiscuous mode [ 45.563940][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.566928][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.569879][ T5728] bridge_slave_1: entered allmulticast mode [ 45.573022][ T5728] bridge_slave_1: entered promiscuous mode [ 45.582992][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.585322][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.587558][ T5733] bridge_slave_0: entered allmulticast mode [ 45.589918][ T5733] bridge_slave_0: entered promiscuous mode [ 45.592521][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.595881][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.599061][ T5730] bridge_slave_0: entered allmulticast mode [ 45.602248][ T5730] bridge_slave_0: entered promiscuous mode [ 45.621860][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.625166][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.628298][ T5733] bridge_slave_1: entered allmulticast mode [ 45.631654][ T5733] bridge_slave_1: entered promiscuous mode [ 45.634980][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.638208][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.641347][ T5730] bridge_slave_1: entered allmulticast mode [ 45.645007][ T5730] bridge_slave_1: entered promiscuous mode [ 45.650842][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.670465][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.686509][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.706105][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.717741][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.723100][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.730729][ T5728] team0: Port device team_slave_0 added [ 45.734583][ T5728] team0: Port device team_slave_1 added [ 45.761123][ T5733] team0: Port device team_slave_0 added [ 45.765324][ T5733] team0: Port device team_slave_1 added [ 45.768677][ T5730] team0: Port device team_slave_0 added [ 45.781802][ T5730] team0: Port device team_slave_1 added [ 45.789189][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.792022][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.801226][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.805148][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.807353][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.816462][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.831154][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.833705][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.841670][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.845748][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.847955][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.856033][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.859959][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.862143][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.870152][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.876173][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.879015][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.889462][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.920104][ T5728] hsr_slave_0: entered promiscuous mode [ 45.922978][ T5728] hsr_slave_1: entered promiscuous mode [ 45.958292][ T5733] hsr_slave_0: entered promiscuous mode [ 45.961087][ T5733] hsr_slave_1: entered promiscuous mode [ 45.963761][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 45.966203][ T5733] Cannot create hsr debugfs directory [ 45.990814][ T5730] hsr_slave_0: entered promiscuous mode [ 45.993578][ T5730] hsr_slave_1: entered promiscuous mode [ 45.996412][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 45.998827][ T5730] Cannot create hsr debugfs directory [ 46.017641][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.020675][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.023637][ T5732] bridge_slave_0: entered allmulticast mode [ 46.027039][ T5732] bridge_slave_0: entered promiscuous mode [ 46.031063][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.033973][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.037287][ T5732] bridge_slave_1: entered allmulticast mode [ 46.040448][ T5732] bridge_slave_1: entered promiscuous mode [ 46.083769][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.092854][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.129704][ T5732] team0: Port device team_slave_0 added [ 46.151084][ T5732] team0: Port device team_slave_1 added [ 46.205195][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.207701][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.216131][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.222861][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.225062][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.234153][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.271050][ T5732] hsr_slave_0: entered promiscuous mode [ 46.273956][ T5732] hsr_slave_1: entered promiscuous mode [ 46.276837][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 46.279273][ T5732] Cannot create hsr debugfs directory [ 46.298547][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.301821][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.307577][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.311306][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.314081][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.318383][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.324273][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.328630][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.375647][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.380488][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.387798][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.392180][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.400609][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.405106][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.411175][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.414163][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.417325][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.420278][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.425183][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.429313][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.437646][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.441497][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.465958][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.471781][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.479684][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.484073][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.487696][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.492088][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.495217][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.499118][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.534963][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.539497][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.542761][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.547031][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.550222][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.555352][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.558577][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.562555][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.592843][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.607229][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.613796][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.628649][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.630942][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.636265][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.644615][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.647567][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.650379][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.653937][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.656286][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.665668][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.668069][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.687889][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.697240][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.701787][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.704036][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.715894][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.718230][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.726734][ T5728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.738518][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.748977][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.751236][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.757331][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.760323][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.888664][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.907469][ T5733] veth0_vlan: entered promiscuous mode [ 46.913515][ T5733] veth1_vlan: entered promiscuous mode [ 46.923584][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.936379][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.943664][ T5733] veth0_macvtap: entered promiscuous mode [ 46.949753][ T5733] veth1_macvtap: entered promiscuous mode [ 46.963515][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.976217][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.983094][ T5732] veth0_vlan: entered promiscuous mode [ 46.989954][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.992555][ T5728] veth0_vlan: entered promiscuous mode [ 46.998441][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.003256][ T5728] veth1_vlan: entered promiscuous mode [ 47.007063][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.010499][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.017511][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.021222][ T5732] veth1_vlan: entered promiscuous mode [ 47.050929][ T5728] veth0_macvtap: entered promiscuous mode [ 47.057451][ T5730] veth0_vlan: entered promiscuous mode [ 47.065920][ T5732] veth0_macvtap: entered promiscuous mode [ 47.070947][ T5732] veth1_macvtap: entered promiscuous mode [ 47.076488][ T5728] veth1_macvtap: entered promiscuous mode [ 47.081847][ T5730] veth1_vlan: entered promiscuous mode [ 47.087911][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.091211][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.105906][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.110207][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.110615][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.113486][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.117267][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.125521][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.133757][ T5802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.137515][ T5802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.143865][ T5802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.146947][ T5802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.151524][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.160943][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.164570][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.171018][ T5802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.175209][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.189962][ T5730] veth0_macvtap: entered promiscuous mode [ 47.197577][ T5730] veth1_macvtap: entered promiscuous mode [ 47.208742][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.213310][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.214545][ T5745] Bluetooth: hci1: command tx timeout [ 47.216713][ T5736] Bluetooth: hci0: command tx timeout [ 47.217823][ T5738] Bluetooth: hci3: command tx timeout [ 47.228262][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.236058][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.239167][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.242992][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.252701][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.256833][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.265640][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.268741][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.274710][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.278637][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.285213][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.288132][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.294641][ T5736] Bluetooth: hci2: command tx timeout [ 47.317137][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.320824][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.334078][ T5885] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 47.348285][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.351878][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.382697][ T5887] syzkaller0: entered promiscuous mode [ 47.384779][ T5887] syzkaller0: entered allmulticast mode [ 47.496407][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 47.654752][ T5912] bridge_slave_0: left allmulticast mode [ 47.656937][ T5912] bridge_slave_0: left promiscuous mode [ 47.658829][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.662144][ T5912] bridge_slave_1: left allmulticast mode [ 47.663942][ T5912] bridge_slave_1: left promiscuous mode [ 47.666422][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.670229][ T5912] bond0: (slave bond_slave_0): Releasing backup interface [ 47.673768][ T5912] bond0: (slave bond_slave_1): Releasing backup interface [ 47.678158][ T5912] team0: Port device team_slave_0 removed [ 47.681314][ T5912] team0: Port device team_slave_1 removed [ 47.683475][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.686501][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.689387][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.691658][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.694504][ T5912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.734824][ T5878] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 47.853114][ T5916] syzkaller1: entered promiscuous mode [ 47.855130][ T5916] syzkaller1: entered allmulticast mode [ 47.864607][ T5878] usb 5-1: device descriptor read/64, error -71 [ 48.114569][ T5878] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 48.265071][ T5878] usb 5-1: device descriptor read/64, error -71 [ 48.384864][ T5878] usb usb5-port1: attempt power cycle [ 48.746038][ T5878] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 48.764068][ T5918] syzkaller0: entered promiscuous mode [ 48.766303][ T5918] syzkaller0: entered allmulticast mode [ 48.768376][ T5878] usb 5-1: device descriptor read/8, error -71 [ 48.865301][ T5920] syzkaller0: entered promiscuous mode [ 48.867648][ T5920] syzkaller0: entered allmulticast mode [ 49.004541][ T5878] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 49.024938][ T5878] usb 5-1: device descriptor read/8, error -71 [ 49.147285][ T5878] usb usb5-port1: unable to enumerate USB device [ 49.294526][ T5736] Bluetooth: hci1: command tx timeout [ 49.294785][ T5745] Bluetooth: hci3: command tx timeout [ 49.304566][ T5745] Bluetooth: hci0: command tx timeout [ 49.374495][ T5745] Bluetooth: hci2: command tx timeout [ 49.389820][ T5930] syzkaller0: entered promiscuous mode [ 49.392348][ T5930] syzkaller0: entered allmulticast mode [ 49.400715][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.403597][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.406479][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.409316][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.412141][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.414984][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.417768][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.420564][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.423340][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.426189][ T5930] tc action pedit 'at' offset -999504316 out of bounds [ 49.428993][ T5930] 0: reclassify loop, rule prio 0, protocol 800 [ 50.113057][ T5932] tipc: Started in network mode [ 50.114803][ T5932] tipc: Node identity 129fc11d1517, cluster identity 4711 [ 50.117089][ T5932] tipc: Enabled bearer , priority 0 [ 50.120276][ T5932] syzkaller0: entered promiscuous mode [ 50.122205][ T5932] syzkaller0: entered allmulticast mode [ 50.129671][ T5932] tipc: Resetting bearer [ 50.133792][ T5931] tipc: Resetting bearer [ 50.137251][ T5931] tipc: Disabling bearer [ 50.403233][ T5934] syzkaller0: entered promiscuous mode [ 50.405027][ T5934] syzkaller0: entered allmulticast mode [ 50.526101][ T42] kauditd_printk_skb: 57 callbacks suppressed [ 50.526116][ T42] audit: type=1400 audit(1782123384.595:225): avc: denied { nlmsg_read } for pid=5936 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.527807][ T5937] support for the xor transformation has been removed. [ 50.528898][ T5938] netlink: 104 bytes leftover after parsing attributes in process `syz.2.26'. [ 50.597896][ T5802] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 50.628474][ T42] audit: type=1400 audit(1782123384.695:226): avc: denied { map_create } for pid=5950 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.635174][ T42] audit: type=1400 audit(1782123384.695:227): avc: denied { map_read map_write } for pid=5950 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.684061][ T42] audit: type=1400 audit(1782123384.745:228): avc: denied { create } for pid=5953 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.690545][ T42] audit: type=1400 audit(1782123384.745:229): avc: denied { write } for pid=5953 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.711557][ T42] audit: type=1400 audit(1782123384.775:230): avc: denied { create } for pid=5955 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.719104][ T5956] syzkaller0: entered promiscuous mode [ 50.721871][ T5956] syzkaller0: entered allmulticast mode [ 50.723334][ T42] audit: type=1400 audit(1782123384.775:231): avc: denied { ioctl } for pid=5955 comm="syz.0.33" path="socket:[6959]" dev="sockfs" ino=6959 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.819324][ T42] audit: type=1326 audit(1782123384.885:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.34" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e99ce59 code=0x7ffc0000 [ 50.826640][ T42] audit: type=1326 audit(1782123384.885:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.34" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e99ce59 code=0x7ffc0000 [ 50.840625][ T42] audit: type=1326 audit(1782123384.885:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.34" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e99ce59 code=0x7ffc0000 [ 50.886219][ T5965] ------------[ cut here ]------------ [ 50.888704][ T5965] !(flags & __GFP_NOWARN) [ 50.888715][ T5965] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x6f7/0xa60, CPU#3: syz.0.37/5965 [ 50.894849][ T5965] Modules linked in: [ 50.896689][ T5965] CPU: 3 UID: 0 PID: 5965 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 50.900697][ T5965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.905246][ T5965] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 [ 50.907890][ T5965] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 5e 81 f2 8d e8 10 [ 50.916200][ T5965] RSP: 0018:ffffc900030d7a88 EFLAGS: 00010246 [ 50.918201][ T5965] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 50.921303][ T5965] RDX: 0000000000000000 RSI: ffffffff8c1e6100 RDI: ffffffff8e1f3938 [ 50.924566][ T5965] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 50.927769][ T5965] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 50.930901][ T5965] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 50.933989][ T5965] FS: 00007f486f7fe6c0(0000) GS:ffff8880d6616000(0000) knlGS:0000000000000000 [ 50.937537][ T5965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.940198][ T5965] CR2: 00007f486ec17dac CR3: 000000003cd1c000 CR4: 0000000000352ef0 [ 50.943532][ T5965] Call Trace: [ 50.945211][ T5965] [ 50.946446][ T5965] ? io_pin_pages+0xc3/0x1e0 [ 50.948291][ T5965] io_pin_pages+0xc3/0x1e0 [ 50.950063][ T5965] io_sqe_buffer_register+0x1d9/0x1500 [ 50.952199][ T5965] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 50.954573][ T5965] ? trace_kmalloc+0xeb/0x110 [ 50.956442][ T5965] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 50.958776][ T5965] ? io_rsrc_data_alloc+0x2c/0xa0 [ 50.960757][ T5965] ? copy_iovec_from_user+0x102/0x140 [ 50.962877][ T5965] ? iovec_from_user+0xda/0x140 [ 50.964886][ T5965] io_sqe_buffers_register.cold+0x346/0x4c3 [ 50.967200][ T5965] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 50.969550][ T5965] ? __fget_files+0x21f/0x3d0 [ 50.971419][ T5965] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 50.973709][ T5965] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 50.976730][ T5965] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 50.979222][ T5965] ? __x64_sys_futex+0x34f/0x4d0 [ 50.981165][ T5965] ? __x64_sys_futex+0x358/0x4d0 [ 50.983119][ T5965] ? rcu_is_watching+0x12/0xc0 [ 50.985089][ T5965] ? xfd_validate_state+0x129/0x190 [ 50.987124][ T5965] ? rcu_is_watching+0x12/0xc0 [ 50.989017][ T5965] do_syscall_64+0x115/0x870 [ 50.990847][ T5965] ? clear_bhb_loop+0x40/0x90 [ 50.992715][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.995108][ T5965] RIP: 0033:0x7f486e99ce59 [ 50.996866][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.004319][ T5965] RSP: 002b:00007f486f7fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 51.007636][ T5965] RAX: ffffffffffffffda RBX: 00007f486ec15fa0 RCX: 00007f486e99ce59 [ 51.010723][ T5965] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.013802][ T5965] RBP: 00007f486ea32e6f R08: 0000000000000000 R09: 0000000000000000 [ 51.016948][ T5965] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 51.020045][ T5965] R13: 00007f486ec16038 R14: 00007f486ec15fa0 R15: 00007ffd22a1e458 [ 51.023134][ T5965] [ 51.024437][ T5965] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.027267][ T5965] CPU: 3 UID: 0 PID: 5965 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 51.030784][ T5965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.034688][ T5965] Call Trace: [ 51.036024][ T5965] [ 51.037199][ T5965] dump_stack_lvl+0x100/0x190 [ 51.039099][ T5965] vpanic+0x552/0x970 [ 51.040679][ T5965] ? __pfx_vpanic+0x10/0x10 [ 51.042451][ T5965] ? lock_release+0x24d/0x310 [ 51.044320][ T5965] panic+0xd1/0xe0 [ 51.045799][ T5965] ? __pfx_panic+0x10/0x10 [ 51.047569][ T5965] check_panic_on_warn.cold+0x19/0x34 [ 51.049678][ T5965] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 51.051844][ T5965] __warn.cold+0x191/0x318 [ 51.053595][ T5965] __report_bug+0x30f/0x440 [ 51.055381][ T5965] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 51.057543][ T5965] ? __pfx___report_bug+0x10/0x10 [ 51.059520][ T5965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.061850][ T5965] ? policy_nodemask+0xed/0x4f0 [ 51.063775][ T5965] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 51.065974][ T5965] report_bug+0xb2/0x220 [ 51.067658][ T5965] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 51.069844][ T5965] handle_bug+0x16a/0x2a0 [ 51.071600][ T5965] exc_invalid_op+0x17/0x50 [ 51.073417][ T5965] asm_exc_invalid_op+0x1a/0x20 [ 51.075352][ T5965] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 [ 51.077779][ T5965] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 5e 81 f2 8d e8 10 [ 51.085300][ T5965] RSP: 0018:ffffc900030d7a88 EFLAGS: 00010246 [ 51.087661][ T5965] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 51.090767][ T5965] RDX: 0000000000000000 RSI: ffffffff8c1e6100 RDI: ffffffff8e1f3938 [ 51.093845][ T5965] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 51.096945][ T5965] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 51.100060][ T5965] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 51.103190][ T5965] ? __kvmalloc_node_noprof+0x6d3/0xa60 [ 51.105385][ T5965] ? io_pin_pages+0xc3/0x1e0 [ 51.107213][ T5965] io_pin_pages+0xc3/0x1e0 [ 51.109001][ T5965] io_sqe_buffer_register+0x1d9/0x1500 [ 51.111136][ T5965] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 51.113440][ T5965] ? trace_kmalloc+0xeb/0x110 [ 51.115304][ T5965] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 51.117592][ T5965] ? io_rsrc_data_alloc+0x2c/0xa0 [ 51.119576][ T5965] ? copy_iovec_from_user+0x102/0x140 [ 51.121663][ T5965] ? iovec_from_user+0xda/0x140 [ 51.123552][ T5965] io_sqe_buffers_register.cold+0x346/0x4c3 [ 51.125869][ T5965] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 51.128222][ T5965] ? __fget_files+0x21f/0x3d0 [ 51.130117][ T5965] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 51.132425][ T5965] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 51.134977][ T5965] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 51.137390][ T5965] ? __x64_sys_futex+0x34f/0x4d0 [ 51.139414][ T5965] ? __x64_sys_futex+0x358/0x4d0 [ 51.141386][ T5965] ? rcu_is_watching+0x12/0xc0 [ 51.143299][ T5965] ? xfd_validate_state+0x129/0x190 [ 51.145342][ T5965] ? rcu_is_watching+0x12/0xc0 [ 51.147244][ T5965] do_syscall_64+0x115/0x870 [ 51.149075][ T5965] ? clear_bhb_loop+0x40/0x90 [ 51.150956][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.153262][ T5965] RIP: 0033:0x7f486e99ce59 [ 51.155038][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.162473][ T5965] RSP: 002b:00007f486f7fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 51.165720][ T5965] RAX: ffffffffffffffda RBX: 00007f486ec15fa0 RCX: 00007f486e99ce59 [ 51.168942][ T5965] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.172055][ T5965] RBP: 00007f486ea32e6f R08: 0000000000000000 R09: 0000000000000000 [ 51.175186][ T5965] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 51.178267][ T5965] R13: 00007f486ec16038 R14: 00007f486ec15fa0 R15: 00007ffd22a1e458 [ 51.181364][ T5965] [ 51.183342][ T5965] Kernel Offset: disabled [ 51.185054][ T5965] Rebooting in 86400 seconds..