last executing test programs: 4m29.533083145s ago: executing program 2 (id=5290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0, 0x0) io_destroy(r2) 4m29.403442587s ago: executing program 2 (id=5298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 4m28.149992708s ago: executing program 2 (id=5307): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 4m28.102332112s ago: executing program 2 (id=5311): r0 = gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x24044884) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000002780)=""/55, 0x37}}, 0x10) ioprio_get$pid(0x0, r0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) ptrace(0x11, r0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) fcntl$setown(r3, 0x8, r0) close(r3) syslog(0x4, &(0x7f0000000140)=""/230, 0xe6) syslog(0xd, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x200, 0x100, 0x2}, 0x18) open_tree(r4, &(0x7f00000002c0)='./file0\x00', 0x800) 4m27.876537372s ago: executing program 2 (id=5314): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000000701030000000000000000000000080c0002400000000000000002634a1263b2f8ca860c00064000000000000003ff0900010073797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000370427bd70000000040000000000", @ANYRES32=r5, @ANYBLOB="6105050000000000240012800b00010067726574617000001400028008000700ac1414aa05000a0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r5, 0x7}, 0x80, 0x0}}], 0x1, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x0, &(0x7f0000006680)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000380)=r9}, 0x20) recvmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, r7, 0xffffe000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x10) 4m26.733826293s ago: executing program 2 (id=5336): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000061000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc340000000c0a0101000000000000000000060900020073797a31000000001400038010000080040001810800034000000000140000001100010000000000000000000100000a0000"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x48040) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) wait4(r3, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r3, 0x409, &(0x7f0000000000)={0x0}) waitid(0x0, r1, 0x0, 0x4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) 4m11.713760185s ago: executing program 32 (id=5336): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000061000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc340000000c0a0101000000000000000000060900020073797a31000000001400038010000080040001810800034000000000140000001100010000000000000000000100000a0000"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x48040) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) wait4(r3, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r3, 0x409, &(0x7f0000000000)={0x0}) waitid(0x0, r1, 0x0, 0x4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) 3.764326607s ago: executing program 5 (id=8788): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=@newtaction={0x8b8, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x8a4, 0x1, [@m_police={0x8a0, 0x1, 0x0, 0x0, {{0xb}, {0x874, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xc2b, 0x800, 0x10000, 0x8872, 0x3, 0x5, 0x2, 0x7aa, 0x4, 0x7, 0x3, 0x7fff, 0x6, 0x2, 0x3ff, 0x3, 0x3, 0x3, 0x400, 0x1, 0x3, 0xff, 0x91b, 0x7, 0x1, 0x8001, 0x2, 0x9, 0x5, 0x9, 0x6, 0x88, 0x4, 0x40, 0x7, 0x6, 0x2, 0x6, 0x7, 0x4, 0x4, 0x81, 0x2fc1, 0x0, 0x5, 0x3, 0x5, 0x9, 0x8, 0x0, 0x4, 0xffffff1f, 0x1, 0x3, 0x7, 0x7eee, 0x5, 0x58c5, 0x4, 0x8001, 0x5, 0x1000, 0x7ff, 0x2, 0x4e10, 0xfac9, 0x3, 0x1, 0x6, 0x40, 0x4, 0x3, 0x6, 0x10001, 0x6, 0x2, 0x5, 0x1, 0x8, 0x0, 0x8, 0x3, 0x7fff, 0x3, 0x5, 0xfffffffb, 0x6, 0x0, 0x5, 0xf1, 0x6bf, 0xf, 0x9, 0x3eae131e, 0x0, 0x8, 0xffffffc0, 0x4, 0x5, 0xaf1, 0x0, 0xff, 0x80000001, 0x1000, 0x1, 0x6, 0x0, 0x9, 0x8, 0xd53, 0x7, 0x8, 0x2, 0xfffffffb, 0x3, 0x1, 0xffffffae, 0x80, 0xffffbf09, 0x7, 0xb86e, 0x40, 0x6, 0x8, 0x3a7b16de, 0xe85, 0x3, 0x4, 0x9, 0x7, 0xfffffffa, 0x0, 0x0, 0x6, 0x7, 0xf, 0x4, 0xffffffff, 0x4, 0x4, 0x3, 0x34fc9882, 0x1, 0xffffff47, 0xff, 0x73, 0xe3, 0xffffffff, 0xfffffff9, 0xad, 0x1fb, 0x2, 0x3f, 0x7, 0xf, 0x3ff, 0xf, 0x1ff, 0xfffffffb, 0x1ff, 0xfffffff8, 0x7, 0x4c, 0x3, 0x9, 0x6, 0xffffb528, 0x3, 0x54, 0x4, 0x8, 0x3, 0x3, 0x9a, 0x2, 0x5, 0x8, 0x9, 0x28c, 0x4, 0x7, 0x8, 0x7f, 0x8, 0x3, 0x800, 0x8, 0x6, 0xa, 0x4, 0x4, 0x7, 0x7, 0xa698, 0xf, 0x7ff, 0x7f, 0x151, 0x1, 0x6, 0x7, 0x5, 0x6, 0x7, 0x4, 0x20, 0x5, 0x800, 0xe7, 0xbb11, 0x8, 0x2, 0x69100000, 0x6c, 0xffff, 0x7, 0x800, 0x8, 0x9, 0xc2, 0x2, 0xfff, 0x10000, 0x10001, 0xd2, 0x2, 0x200, 0x2, 0x0, 0x4, 0x10000, 0x6, 0x8, 0x0, 0xc0, 0x5, 0x9, 0x8, 0x0, 0x4, 0xc9c6, 0xff, 0x4, 0x6, 0x10000, 0x7, 0x6, 0x6, 0x1, 0x7f, 0x3, 0x9, 0x8, 0x3b1a, 0x80000000, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x2, 0x2, 0x1ff, {0x6, 0x1, 0x9, 0xfe00, 0x800, 0xfffffff8}, {0x6, 0x2, 0x40, 0x6, 0x0, 0x1db}, 0x0, 0x5, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xda, 0x6, 0x3ff, 0x1, 0x7, 0x8, 0x1, 0x1, 0xc, 0x400, 0x0, 0x0, 0x1000, 0x3, 0xa9, 0x0, 0xb26f, 0x7, 0xd, 0x5, 0x2, 0x3, 0xf, 0x9c3, 0xf, 0xc8e, 0x4, 0x3, 0xe0, 0x8, 0xfc5, 0xb61, 0x8, 0x3, 0x8, 0x5e1c, 0xb, 0x7, 0x3, 0xd, 0x0, 0x20000000, 0x27, 0x6, 0x3, 0x7, 0x2ce, 0x1, 0x5, 0x1e77, 0xd0, 0x40, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x97, 0xd, 0x8, 0x101, 0x0, 0x0, 0xb61, 0x1, 0x8, 0x6, 0x7, 0x0, 0x2cde, 0x9, 0x5, 0x8, 0x10, 0x7159, 0x5, 0x4, 0xbd, 0x5, 0x5, 0x80000000, 0x1820, 0x5, 0x4, 0x7, 0x7, 0x6, 0x4, 0x6, 0x9, 0xa, 0x6, 0x8, 0xd8e, 0x7, 0x3e28, 0x1, 0x1, 0x6, 0x9, 0x98, 0xd9c5, 0xffffffff, 0x5, 0x40, 0x7, 0x401, 0x401, 0x3, 0x4, 0x80000000, 0x6f, 0x9, 0x99, 0x2, 0xffff, 0x5, 0x8000, 0xff, 0x7f3, 0x7, 0x436b, 0x9, 0x3, 0x1, 0x7, 0x5, 0x8, 0x1, 0x24000000, 0x1000, 0xfffff556, 0x1ff, 0x8000, 0x9, 0xa, 0x8, 0xc, 0x2, 0x5, 0xff, 0xfffffffe, 0x1, 0x80000001, 0x10000, 0xffffffff, 0x7fff, 0x7, 0xc4, 0x4, 0x5, 0x2, 0x87fe, 0x5, 0x7bbb, 0x7fffffff, 0xf, 0x0, 0xfffffff6, 0xfffffff9, 0x0, 0x9, 0x40, 0x13e7, 0xdb61, 0x7e97, 0xfffffffa, 0x64, 0x2, 0x55c, 0x0, 0x9f94, 0x2, 0x2, 0x2, 0x2318, 0xffffeec6, 0x5, 0x8, 0x5, 0x4, 0x582, 0x771e, 0x27c11bb0, 0xfffffffb, 0x6, 0x8, 0x8, 0x4, 0x6, 0x7eb1, 0x7, 0xaa7, 0x8001, 0x8, 0xbaf, 0x6, 0xfffffffe, 0xfffffffb, 0x0, 0xfffffff9, 0x9c, 0x3, 0xffffdd87, 0x100, 0xa, 0x8001, 0x7, 0xa, 0x3, 0x8, 0x2, 0xb, 0xc54, 0x10001, 0x3, 0x1, 0x1, 0x7, 0x9a16, 0x0, 0x58, 0x7, 0x4, 0x4, 0x10001, 0x0, 0x1, 0x1, 0x200, 0xffff0000, 0x0, 0x1ff, 0x4c74, 0x1, 0x4, 0x80, 0x7, 0x7ff, 0x0, 0x6, 0x40000000, 0x7, 0x3, 0xfff, 0x10000, 0x8a4, 0x81, 0x2, 0x100, 0x1, 0x3]}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8b8}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) 3.738636709s ago: executing program 5 (id=8790): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=@newtaction={0x8c4, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x8b0, 0x1, [@m_police={0x8ac, 0x1, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0xc2b, 0x800, 0x10000, 0x8872, 0x3, 0x5, 0x2, 0x7aa, 0x4, 0x7, 0x3, 0x7fff, 0x6, 0x2, 0x3ff, 0x3, 0x3, 0x3, 0x400, 0x1, 0x3, 0xff, 0x91b, 0x7, 0x1, 0x8001, 0x2, 0x9, 0x5, 0x9, 0x6, 0x88, 0x4, 0x40, 0x7, 0x6, 0x2, 0x6, 0x7, 0x4, 0x4, 0x81, 0x2fc1, 0x0, 0x5, 0x3, 0x5, 0x9, 0x8, 0x0, 0x4, 0xffffff1f, 0x1, 0x3, 0x7, 0x7eee, 0x5, 0x58c5, 0x4, 0x8001, 0x5, 0x1000, 0x7ff, 0x2, 0x4e10, 0xfac9, 0x3, 0x1, 0x6, 0x40, 0x4, 0x3, 0x6, 0x10001, 0x6, 0x2, 0x5, 0x1, 0x8, 0x0, 0x8, 0x3, 0x7fff, 0x3, 0x5, 0xfffffffb, 0x6, 0x0, 0x5, 0xf1, 0x6bf, 0xf, 0x9, 0x3eae131e, 0x0, 0x8, 0xffffffc0, 0x4, 0x5, 0xaf1, 0x0, 0xff, 0x80000001, 0x1000, 0x1, 0x6, 0x0, 0x9, 0x8, 0xd53, 0x7, 0x8, 0x2, 0xfffffffb, 0x3, 0x1, 0xffffffae, 0x80, 0xffffbf09, 0x7, 0xb86e, 0x40, 0x6, 0x8, 0x3a7b16de, 0xe85, 0x3, 0x4, 0x9, 0x7, 0xfffffffa, 0x0, 0x0, 0x6, 0x7, 0xf, 0x4, 0xffffffff, 0x4, 0x4, 0x3, 0x34fc9882, 0x1, 0xffffff47, 0xff, 0x73, 0xe3, 0xffffffff, 0xfffffff9, 0xad, 0x1fb, 0x2, 0x3f, 0x7, 0xf, 0x3ff, 0xf, 0x1ff, 0xfffffffb, 0x1ff, 0xfffffff8, 0x7, 0x4c, 0x3, 0x9, 0x6, 0xffffb528, 0x3, 0x54, 0x4, 0x8, 0x3, 0x3, 0x9a, 0x2, 0x5, 0x8, 0x9, 0x28c, 0x4, 0x7, 0x8, 0x7f, 0x8, 0x3, 0x800, 0x8, 0x6, 0xa, 0x4, 0x4, 0x7, 0x7, 0xa698, 0xf, 0x7ff, 0x7f, 0x151, 0x1, 0x6, 0x7, 0x5, 0x6, 0x7, 0x4, 0x20, 0x5, 0x800, 0xe7, 0xbb11, 0x8, 0x2, 0x69100000, 0x6c, 0xffff, 0x7, 0x800, 0x8, 0x9, 0xc2, 0x2, 0xfff, 0x10000, 0x10001, 0xd2, 0x2, 0x200, 0x2, 0x0, 0x4, 0x10000, 0x6, 0x8, 0x0, 0xc0, 0x5, 0x9, 0x8, 0x0, 0x4, 0xc9c6, 0xff, 0x4, 0x6, 0x10000, 0x7, 0x6, 0x6, 0x1, 0x7f, 0x3, 0x9, 0x8, 0x3b1a, 0x80000000, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x2, 0x2, 0x1ff, {0x6, 0x1, 0x9, 0xfe00, 0x800, 0xfffffff8}, {0x6, 0x2, 0x40, 0x6, 0x0, 0x1db}, 0x0, 0x5, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xda, 0x6, 0x3ff, 0x1, 0x7, 0x8, 0x1, 0x1, 0xc, 0x400, 0x0, 0x0, 0x1000, 0x3, 0xa9, 0x0, 0xb26f, 0x7, 0xd, 0x5, 0x2, 0x3, 0xf, 0x9c3, 0xf, 0xc8e, 0x4, 0x3, 0xe0, 0x8, 0xfc5, 0xb61, 0x8, 0x3, 0x8, 0x5e1c, 0xb, 0x7, 0x3, 0xd, 0x0, 0x20000000, 0x27, 0x6, 0x3, 0x7, 0x2ce, 0x1, 0x5, 0x1e77, 0xd0, 0x40, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x97, 0xd, 0x8, 0x101, 0x0, 0x0, 0xb61, 0x1, 0x8, 0x6, 0x7, 0x0, 0x2cde, 0x9, 0x5, 0x8, 0x10, 0x7159, 0x5, 0x4, 0xbd, 0x5, 0x5, 0x80000000, 0x1820, 0x5, 0x4, 0x7, 0x7, 0x6, 0x4, 0x6, 0x9, 0xa, 0x6, 0x8, 0xd8e, 0x7, 0x3e28, 0x1, 0x1, 0x6, 0x9, 0x98, 0xd9c5, 0xffffffff, 0x5, 0x40, 0x7, 0x401, 0x401, 0x3, 0x4, 0x80000000, 0x6f, 0x9, 0x99, 0x2, 0xffff, 0x5, 0x8000, 0xff, 0x7f3, 0x7, 0x436b, 0x9, 0x3, 0x1, 0x7, 0x5, 0x8, 0x1, 0x24000000, 0x1000, 0xfffff556, 0x1ff, 0x8000, 0x9, 0xa, 0x8, 0xc, 0x2, 0x5, 0xff, 0xfffffffe, 0x1, 0x80000001, 0x10000, 0xffffffff, 0x7fff, 0x7, 0xc4, 0x4, 0x5, 0x2, 0x87fe, 0x5, 0x7bbb, 0x7fffffff, 0xf, 0x0, 0xfffffff6, 0xfffffff9, 0x0, 0x9, 0x40, 0x13e7, 0xdb61, 0x7e97, 0xfffffffa, 0x64, 0x2, 0x55c, 0x0, 0x9f94, 0x2, 0x2, 0x2, 0x2318, 0xffffeec6, 0x5, 0x8, 0x5, 0x4, 0x582, 0x771e, 0x27c11bb0, 0xfffffffb, 0x6, 0x8, 0x8, 0x4, 0x6, 0x7eb1, 0x7, 0xaa7, 0x8001, 0x8, 0xbaf, 0x6, 0xfffffffe, 0xfffffffb, 0x0, 0xfffffff9, 0x9c, 0x3, 0xffffdd87, 0x100, 0xa, 0x8001, 0x7, 0xa, 0x3, 0x8, 0x2, 0xb, 0xc54, 0x10001, 0x3, 0x1, 0x1, 0x7, 0x9a16, 0x0, 0x58, 0x7, 0x4, 0x4, 0x10001, 0x0, 0x1, 0x1, 0x200, 0xffff0000, 0x0, 0x1ff, 0x4c74, 0x1, 0x4, 0x80, 0x7, 0x7ff, 0x0, 0x6, 0x40000000, 0x7, 0x3, 0xfff, 0x10000, 0x8a4, 0x81, 0x2, 0x100, 0x1, 0x3]}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c4}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x180) r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000340)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffa) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000003c0)={@id={0x2, 0x0, @c}, 0x2, r2, '\x00', @auto=[0x3e, 0x3f]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001f80)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYBLOB="000100000000000008000d0000000d"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 3.703488132s ago: executing program 0 (id=8791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 3.50014391s ago: executing program 0 (id=8794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f00000003c0)=""/163}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8000002) 3.433404746s ago: executing program 0 (id=8795): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) 3.432270246s ago: executing program 5 (id=8796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021140011800c000100636f756e74657200040002804c0000000c0a018bc60d9295bc352600070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000780090001006c617374"], 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000080)=0x2e9aa845) readahead(r3, 0x40, 0xffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf2508000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") unlinkat(r7, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) getdents(r7, &(0x7f0000000dc0)=""/4106, 0x100a) socket$nl_route(0x10, 0x3, 0x0) 3.348097834s ago: executing program 0 (id=8797): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) lseek(r0, 0x3, 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000840)={0x0, 0x12, 0xdb}, &(0x7f0000000880)={'enc=', 'raw', ' hash=', {'crc32-generic\x00'}}, &(0x7f0000000a00)="a0a020cd1de5f0bc7c9cbd37e128ad30e8b6", &(0x7f0000000a40)=""/219) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1b, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x29c1}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @generic={0x1, 0xb, 0x6, 0x2, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x75, &(0x7f0000000300)=""/117, 0x40f00, 0x64, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x0, 0xfffffffa}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x4, 0x3, 0x3}, {0x0, 0x5, 0xf, 0x1}], 0x10, 0x647}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.992915895s ago: executing program 5 (id=8800): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_compaction_try_to_compact_pages\x00', r2}, 0x18) eventfd(0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = socket(0x1e, 0x80004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r5], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000340)={[{@dioread_lock}, {@test_dummy_encryption_v1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE1MzOzPttt3dbrfQCvv5JNM+z8wzL99n5pmd2Wd2AmhbA9mfJKI3In6JiL48u7DAQP7v+tUL439evTCexOzsC38klXLXrl4YL4uW820uMoNpRPp2ErtrrHfq3PmTY5OTE2eL/PD0qdeGp86df/jEqbHjE8cnTo8ePnzo4Mhjj44+0lQcF5eZnsV1bdebZ/bsPPLSe8+Oz8bL332cbW9vMb06jlx/U+ttZCAGYrYwP7ar8vf+VS/9v2VLRHQX6WTDOm8MTeuIiGx3dVbaf190xPzO64tn3prLfLVOGwjcNNln07YlYzuK/+nc5xdwO0q0cWhT5Sd+dv9bDmt5/bHerjyZ/Z2oxH+9GH54Lq+bNLuX7c/v2DvqzP//GuN65pOzfcusvzcijs789X42RM3vIRpImi4JADDni+z656Fa13/pgmubrUUfSn9E7I+I7RHxv4jYEelcmTsi4s4Vrn9gUX7p9c9PG1e4yBXJrv8eL/q2yiGfUsaVzOW2VOLvTF45MTlxoKiTwejszvIjDdbx5dM/v1tv2kDV9V82ZOsvrwWL7fh9Q/fCeY6NTY+tIuQFrlyKJDbUij+Z6wnIamBnROxqYflZnZ148KM9WXrr5qXTl4+/gRvQzzT7YcQD+f6fiUXxl5J8TfX6J4d7YnLiwHB5VCz1/Y+Xn6/Od1alF8Tf01xMPa0GW8OVSxGbah7/RfxlMyj7a6eK/Ne9Ta/j8q/v1L2nWbr/kzg6U12iOP43zldbdvx3JS9W0l3FuDfGpqfPjkR8XoxYMH50fmllviyfxT+4b2H8+X1xmp3j/vmgmG93RGQH8V0RcXdE7C22/Z6IuDci9jWI/9un7nu1cQ21ePzfAFn8xxrt/4j+pLq/voVEx8lvPqu3/ubOf4cqqcFiTPX5r6vOcpvdwNXWHwAAANwK0kofdJIOVT2/XdoRm9LJM1PT+wfi9dPH8r7q/uhMy2+6+qq+Dx0pvhsu86OL8gcjYlvlSaONlfzQ+JnJLesUM5DbXNX+83NBmg4N5dN+q/fQC3D7WFE/WvVDZ598euM3BlhTfq8J7Uv7h/al/UP70v6hfdVq/xcjrq/DpgBrrNXP/8UPDAC3Htf/0L60f2hf2j+0paU/iS9et5KdE1r/yf/k9iOreWPAzU/M9rU+e9SfNLPyBXY0V7h8+0XTS26ucBJRhpM2iKtGItL5MX8Xb5OsjOnMy3Q1v6lrn0iXLfPEcrXRuaJ3YvTUqI29RaI7IppdzsU1q9XyDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//knXm/A==") socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xfffffffffffffd23) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.991075166s ago: executing program 0 (id=8801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000040)) r5 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r2, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r5, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 2.340539303s ago: executing program 3 (id=8804): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94) 2.294040507s ago: executing program 3 (id=8806): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') shmctl$IPC_RMID(0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x104, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5f55}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @private2, 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @local, 0x9f}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "646a3e784d6b36504e874c77e2abf83e0334ac8fc99e982dc3de72ee8e46fd78"}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x4008044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x50) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x4000}, 0x40000100) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.049099789s ago: executing program 5 (id=8811): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 2.045946029s ago: executing program 5 (id=8813): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r0 = msgget$private(0x0, 0x80) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="2471d9aafff99ccc40fb1be70fa1df0ecee9b2177f879ad53c46149c9f569e24fe772ece029b11cdc8d2e6c934e82c8d900fa9e5ce15a7f10a95c4e93590368fedba2993db8f9d671c6d3ff53decaea75bfaaff5cd67bebda3a0c2b0fdc5658ca720ca94c2", @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2d3, &(0x7f0000000b80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) msgctl$IPC_RMID(r0, 0x0) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000080)={0x77359400}, 0x0) 1.958534837s ago: executing program 1 (id=8816): syz_read_part_table(0x5c5, &(0x7f0000000800)="$eJzs1M9L+3UcB/DXljLNH5MQOtTNEQSWkERCDhIZw0uK/cBDZ8FDHQQPHoZj7mz2DxSmQnmR7p7CNBCFeRLpJPsH7OYhFp/5WYOyS9j3i/J4XN77PPd6//jwfm3Bk5aN/OD9p1YuIv54qGYkIpIv+9pPP3bC3EB8dtATEQszi5/G+5n4IiJKb94vl4nuqq+k8zubJOb6o7FzNhsR52OXp4XdbJofZSOqEfHlzV6+/98O3fsYb85zcFg8yW/WV8tb68VclCvNyeVO58V0JqK6lDbWUXtMOrHa97j7Jx3d3n/lqlxpFhpT+xet+dtvh97tPW3cvfdru2r4r98Dz8tHSUvVu/f/3Wjtunb38Vs/rE2M98TxxnZ68Z0/vg9/G36p5wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6vw+LJXdRXy1vrxZWrcqU5ufxO6Y2vS19988H30xufvz69lE2qMv+c+HPjsfbPb9Z706dKs5Cb2r9ozd/G0GoSvNqpG3/gCDx9bw9EbCb917nf0dp1rS8i1ibGX7s+3thO89bfJ+Zf8EEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCejFNVWa2YxG5GJXzLdvJW7HzvRT+k4n+ZzuU8yO2ezvx+MnI9dnhZ2F9L8aDAtvNnLd1cb/r9fg//ozwAAAP//Bt5rHA==") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095000000000000009da9873b3f13c16123c62e2a67809cec4a51ec4dd18df83431955b5c5582be184f3450199a0a3f157d18dd96343b903c570d387be775d1b394cc3037e303fd37ec88ab2d18725d434b050067bef0788d6924730602db453ad3a697065f43056257ef85190b14e94065311f6b2d1359ca6befc48b9e392e153a89837ed08924c7ad4827b53a13de0b4fea147f9a81394a2cc2d24e5d911f02304559534539fcc60859ab3946af80dd85481af3956f5e6aced93c764b27c8a88e322d56eb6d2d3def75516210"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r3) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_io_uring_setup(0x1ac6, &(0x7f0000000200)={0x0, 0xca62, 0x4, 0x2, 0x3c8}, &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.832604358s ago: executing program 1 (id=8818): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1.831458238s ago: executing program 1 (id=8819): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324292dad11008954a40b57bb23a78bd1175c0cd068c525e1cdf100", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x2b, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}, "2df7990e4ba2b0afb2fe9d5f1108bfb74e6b922142f2e46741066aa292c9ed"}}}}}}, 0x0) 1.81700317s ago: executing program 1 (id=8820): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324292dad11008954a40b57bb23a78bd1175c0cd068c525e1cdf100", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) (fail_nth: 2) syz_emit_ethernet(0x4d, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x2b, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}, "2df7990e4ba2b0afb2fe9d5f1108bfb74e6b922142f2e46741066aa292c9ed"}}}}}}, 0x0) 1.744354746s ago: executing program 1 (id=8821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 1.438449993s ago: executing program 3 (id=8822): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) semop(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000001200000418110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r8}, 0x18) link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r10 = memfd_create(0x0, 0x5) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000000280)) 1.269320428s ago: executing program 3 (id=8823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa5400008500000082"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) getgroups(0x1, &(0x7f00000003c0)=[0xee00]) 1.230026452s ago: executing program 3 (id=8824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) sync_file_range(r0, 0x407, 0x3fffc00, 0x5) ioprio_get$pid(0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x0, 0x8, 0xa, 0xffffffffffffffc0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x80000001, 0xd2, &(0x7f0000000700)=""/210, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000840)=[0x1, 0xffffffffffffffff, r1, r1, 0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x4, 0xc, 0x5}, {0x4, 0x1, 0x7}, {0x3, 0x4, 0x5, 0x4}], 0x10, 0x24}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100790018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1200) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x33, 0x1, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0xd, 0x1, 0x9, 0x100, 0x4}], &(0x7f0000000180)='GPL\x00', 0x7, 0x13, &(0x7f00000001c0)=""/19, 0x41000, 0x50, '\x00', 0x0, @fallback=0x24, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x0, 0xd8}, 0x10, r3, r4, 0x0, &(0x7f0000000bc0)=[r5, 0x1, r6]}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r9, 0x0}, 0x20) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r10 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r10, 0x0, 0x0) nanosleep(0x0, 0x0) nanosleep(&(0x7f0000000040), 0x0) 984.410403ms ago: executing program 4 (id=8827): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1000, 0xfffffffc, 0xd1, 0x0, r0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 984.024913ms ago: executing program 4 (id=8828): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0xe0701) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202) syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x105102) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) 978.811374ms ago: executing program 4 (id=8829): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 947.644936ms ago: executing program 4 (id=8830): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 919.243529ms ago: executing program 4 (id=8831): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {0x0}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') shmctl$IPC_RMID(0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x104, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5f55}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @private2, 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @local, 0x9f}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "646a3e784d6b36504e874c77e2abf83e0334ac8fc99e982dc3de72ee8e46fd78"}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x4008044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x50) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x4000}, 0x40000100) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 778.664011ms ago: executing program 1 (id=8832): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5e2, &(0x7f0000000000)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f00000008c0)={&(0x7f0000000880)={&(0x7f0000000780)="96c4a100d612130cd975982073271ba0184d408fb47dbd2d74a9f01ee0ff03ae3a197699e3d3990ce39b96f82b8f4047694a0219a75a8a7cbbb27e244971c06a1799207032801a46c4859cae91c43f19ff2ee533b0ad7ec7e750ddd38f43ad148165adc856d199b8306d594286a568ab25768ddb9e1b572adcc0e746e137ccc8c0f3ce1d4f7e4bd6ab11b258e1411bcb7efd2b208ab5739530db37054fdc494e762ee47896a1573e668c7692216e5226bbfbc1a6f29e966570ee", 0xba, 0x1, 0x7fffffff, 0x6}}, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 427.545203ms ago: executing program 0 (id=8833): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xf8, 0x0, @vifc_lcl_ifindex=r3, @empty}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="fd64000000000000f293338e6d1c8c92f4007a97cd76717084d824f9d67c8a3d13eb108c0e7141e12100"/53]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r5, @ANYRES32=r4, @ANYBLOB="5b4cbe747f1efebe37e1e009d52f0d309d21c9f14ec5a23f682024202b777da5300bbb1e7093748df48e69d4b7611750d79287e435b2c9bb2a8908d8"], 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000003c0)="fb947c180fba1fc7", 0x8, 0x24000000, &(0x7f0000000600)={0xa, 0x4e23, 0x12, @remote, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x25, 0x0, 0x1b}, 0x9c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r9, 0x0, 0xffff}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r7], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r10 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r10, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 319.193182ms ago: executing program 3 (id=8834): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) lseek(r0, 0x3, 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000840)={0x0, 0x12, 0xdb}, &(0x7f0000000880)={'enc=', 'raw', ' hash=', {'crc32-generic\x00'}}, &(0x7f0000000a00)="a0a020cd1de5f0bc7c9cbd37e128ad30e8b6", &(0x7f0000000a40)=""/219) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1b, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x29c1}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @generic={0x1, 0xb, 0x6, 0x2, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x75, &(0x7f0000000300)=""/117, 0x40f00, 0x64, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x0, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x647}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 0s ago: executing program 4 (id=8835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0xffffffffffffffe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x7, 0x81, {{0xb, 0x4, 0x3, 0x6, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @empty, {[@end, @ssrr={0x89, 0xf, 0x62, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @generic={0x86, 0x7, "ac06e3dab7"}]}}}}}) r5 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x418c646b, 0x0, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x5, 0xb, 0xae8a, 0xb86, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x4}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="030000000400000004ffff000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1600000005000000c6039c180200000000000000", @ANYRES32, @ANYBLOB="047800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000050000000000000000ff00"/28], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x2, 0x18}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000580), &(0x7f0000000ac0)=0x4) r11 = signalfd4(r2, &(0x7f0000000940)={[0x9]}, 0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') setreuid(0xee01, 0xee01) utimensat(r13, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) read$eventfd(r12, &(0x7f0000000100), 0xfffffd79) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x6, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0xad}, @alu={0x4, 0x1, 0x9, 0x9, 0x8, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x8c}], &(0x7f0000000300)='GPL\x00', 0xffff5676, 0x62, &(0x7f0000000340)=""/98, 0x41100, 0xd, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0x10001, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0xffffffffffffffff, r6, r7, r8, 0xffffffffffffffff, r9, r10, r11], &(0x7f00000009c0)=[{0x5, 0x5, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x7}], 0x10, 0x3}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r5], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r15}, 0x10) kernel console output (not intermixed with test programs): ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.1.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.413567][ T29] audit: type=1326 audit(1767671404.360:39559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.1.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.437500][ T29] audit: type=1326 audit(1767671404.360:39560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.460915][ T29] audit: type=1326 audit(1767671404.360:39561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.484640][ T29] audit: type=1326 audit(1767671404.360:39562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.507741][ T29] audit: type=1326 audit(1767671404.360:39563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.531050][ T29] audit: type=1326 audit(1767671404.360:39564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.554237][ T29] audit: type=1326 audit(1767671404.360:39565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.577847][ T29] audit: type=1326 audit(1767671404.360:39566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 521.590356][T29380] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 521.613094][T29374] gretap0: refused to change device tx_queue_len [ 521.634819][T29374] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 521.840331][T10335] Bluetooth: hci1: Frame reassembly failed (-84) [ 521.846997][ T5559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 521.853145][T21936] Bluetooth: hci0: command 0x1003 tx timeout [ 521.906491][T29384] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8213'. [ 522.098425][T29403] hub 1-0:1.0: USB hub found [ 522.098532][T29403] hub 1-0:1.0: 8 ports detected [ 522.147369][T29407] serio: Serial port ptm0 [ 522.323929][T21936] Bluetooth: hci2: command 0x1003 tx timeout [ 522.330023][T14134] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 522.366351][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8228'. [ 522.388452][T29423] bond_slave_0: entered promiscuous mode [ 522.394210][T29423] bond_slave_1: entered promiscuous mode [ 522.411012][T29423] bond_slave_0: left promiscuous mode [ 522.416501][T29423] bond_slave_1: left promiscuous mode [ 522.750052][T29441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8238'. [ 522.800113][T29442] hub 8-0:1.0: USB hub found [ 522.805971][T29442] hub 8-0:1.0: 8 ports detected [ 523.173548][ T6784] Bluetooth: hci0: Frame reassembly failed (-84) [ 523.270709][T29453] macvtap0: refused to change device tx_queue_len [ 523.655450][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8242'. [ 523.843904][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 524.367677][T29517] hub 8-0:1.0: USB hub found [ 524.372491][T29517] hub 8-0:1.0: 8 ports detected [ 524.424195][T29555] macvtap0: refused to change device tx_queue_len [ 524.482248][ T9174] Bluetooth: hci1: Frame reassembly failed (-84) [ 524.511146][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8256'. [ 524.520466][T29559] syz_tun: refused to change device tx_queue_len [ 524.556230][T29566] netlink: 'syz.1.8264': attribute type 1 has an invalid length. [ 524.573551][T29566] 8021q: adding VLAN 0 to HW filter on device bond12 [ 524.599518][T29566] bond12: (slave veth55): Enslaving as an active interface with a down link [ 524.623841][T29566] 8021q: adding VLAN 0 to HW filter on device batadv33 [ 524.632886][T29566] bond12: (slave batadv33): making interface the new active one [ 524.641910][T29566] batadv33: entered promiscuous mode [ 524.648065][T29566] bond12: (slave batadv33): Enslaving as an active interface with an up link [ 525.005290][T29574] bond_slave_0: entered promiscuous mode [ 525.011043][T29574] bond_slave_1: entered promiscuous mode [ 525.017116][T29574] bond_slave_0: left promiscuous mode [ 525.022986][T29574] bond_slave_1: left promiscuous mode [ 525.102619][T29582] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.8270'. [ 525.204031][T21936] Bluetooth: hci0: command 0x1003 tx timeout [ 525.210251][T14134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 525.399771][T27602] Bluetooth: hci2: Frame reassembly failed (-84) [ 525.496500][T29590] binfmt_misc: register: failed to install interpreter file ./file2 [ 525.534149][T29593] serio: Serial port ptm0 [ 525.554674][T29590] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 525.741070][T29608] bond_slave_0: entered promiscuous mode [ 525.741099][T29608] bond_slave_1: entered promiscuous mode [ 525.741269][T29608] bond_slave_0: left promiscuous mode [ 525.741292][T29608] bond_slave_1: left promiscuous mode [ 525.922357][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8279'. [ 525.922474][T29611] syz_tun: refused to change device tx_queue_len [ 525.933456][T29619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8277'. [ 526.060026][T29627] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 526.142811][T29635] bond_slave_0: entered promiscuous mode [ 526.148799][T29635] bond_slave_1: entered promiscuous mode [ 526.149018][T29635] bond_slave_0: left promiscuous mode [ 526.149052][T29635] bond_slave_1: left promiscuous mode [ 526.390014][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 526.390034][ T29] audit: type=1326 audit(1767671409.390:39769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390066][ T29] audit: type=1326 audit(1767671409.390:39770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390093][ T29] audit: type=1326 audit(1767671409.390:39771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390122][ T29] audit: type=1326 audit(1767671409.390:39772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390191][ T29] audit: type=1326 audit(1767671409.390:39773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390225][ T29] audit: type=1326 audit(1767671409.390:39774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390259][ T29] audit: type=1326 audit(1767671409.390:39775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390308][ T29] audit: type=1326 audit(1767671409.390:39776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ff4dee1ff code=0x7ffc0000 [ 526.390448][ T29] audit: type=1326 audit(1767671409.390:39777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.390475][ T29] audit: type=1326 audit(1767671409.390:39778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.4.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f3ff4def749 code=0x7ffc0000 [ 526.473272][T29660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8295'. [ 526.484752][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 526.574980][T21936] Bluetooth: hci1: command 0x1003 tx timeout [ 526.683051][T29660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8295'. [ 526.845338][ T5664] batadv22: left promiscuous mode [ 527.040542][T29711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8303'. [ 527.245206][T27602] Bluetooth: hci0: Frame reassembly failed (-84) [ 527.444930][T21936] Bluetooth: hci2: command 0x1003 tx timeout [ 527.444960][T14134] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 527.553227][T29793] hub 1-0:1.0: USB hub found [ 527.553272][T29793] hub 1-0:1.0: 8 ports detected [ 527.609372][ T1965] Bluetooth: hci1: Frame reassembly failed (-84) [ 527.626029][T29796] batadv1: entered promiscuous mode [ 527.638100][T29796] batadv1: left promiscuous mode [ 527.709831][T29811] netlink: 'syz.5.8317': attribute type 13 has an invalid length. [ 527.847395][T29813] netlink: 'syz.1.8318': attribute type 1 has an invalid length. [ 527.955492][T29815] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8315'. [ 528.317525][T29811] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 528.341339][T29811] batman_adv: batadv0: Interface deactivated: ipvlan6 [ 528.375995][ T7064] Bluetooth: hci2: Frame reassembly failed (-84) [ 528.377919][T29811] batman_adv: batadv0: Interface deactivated: ipvlan7 [ 528.457060][T29811] batman_adv: batadv0: Interface deactivated: ipvlan8 [ 528.479090][T29811] batman_adv: batadv0: Interface deactivated: ipvlan9 [ 528.498309][T29813] 8021q: adding VLAN 0 to HW filter on device bond13 [ 528.527186][T29814] bond13: (slave veth57): Enslaving as an active interface with a down link [ 528.566058][T29816] 8021q: adding VLAN 0 to HW filter on device batadv34 [ 528.611177][T29816] bond13: (slave batadv34): making interface the new active one [ 528.621580][T29816] batadv34: entered promiscuous mode [ 528.627873][T29816] bond13: (slave batadv34): Enslaving as an active interface with an up link [ 528.638385][ T1965] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.650081][ T1965] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.659452][ T1965] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.707223][T29833] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 528.718608][T29834] serio: Serial port ptm3 [ 528.726665][ T1965] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.136005][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8329'. [ 529.294003][ T5559] Bluetooth: hci0: command 0x1003 tx timeout [ 529.304133][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 529.442354][T29841] Set syz1 is full, maxelem 65536 reached [ 529.684655][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 529.684686][T14134] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 529.743076][T29850] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8330' sets config #0 [ 529.779425][T29852] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8331' sets config #0 [ 529.812275][T29856] siw: device registration error -23 [ 529.834858][T29858] batman_adv: batadv0: Adding interface: ipvlan8 [ 529.841361][T29858] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.867190][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.877717][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.887573][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 529.897669][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.907565][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 529.917456][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.922608][T29861] netlink: '+}[@': attribute type 13 has an invalid length. [ 529.927377][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 529.927397][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.927410][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 529.927425][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.927438][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 529.927491][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.927503][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 529.927517][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.929380][T29858] batman_adv: batadv0: Interface activated: ipvlan8 [ 530.027470][T29861] gretap0: refused to change device tx_queue_len [ 530.034290][T29861] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 530.066133][T29866] FAULT_INJECTION: forcing a failure. [ 530.066133][T29866] name failslab, interval 1, probability 0, space 0, times 0 [ 530.078894][T29866] CPU: 1 UID: 0 PID: 29866 Comm: syz.1.8337 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 530.079033][T29866] Tainted: [W]=WARN [ 530.079059][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.079077][T29866] Call Trace: [ 530.079086][T29866] [ 530.079168][T29866] __dump_stack+0x1d/0x30 [ 530.079201][T29866] dump_stack_lvl+0x95/0xd0 [ 530.079230][T29866] dump_stack+0x15/0x1b [ 530.079253][T29866] should_fail_ex+0x265/0x280 [ 530.079277][T29866] should_failslab+0x8c/0xb0 [ 530.079319][T29866] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 530.079353][T29866] ? __alloc_skb+0x2ff/0x4b0 [ 530.079386][T29866] __alloc_skb+0x2ff/0x4b0 [ 530.079415][T29866] ? __alloc_skb+0x228/0x4b0 [ 530.079444][T29866] alloc_skb_with_frags+0x7d/0x470 [ 530.079499][T29866] ? widen_string+0x42/0x210 [ 530.079530][T29866] ? put_dec+0xd3/0xe0 [ 530.079564][T29866] ? should_fail_ex+0xdb/0x280 [ 530.079658][T29866] sock_alloc_send_pskb+0x430/0x4e0 [ 530.079701][T29866] ? __rcu_read_unlock+0x4f/0x70 [ 530.079730][T29866] packet_sendmsg+0x222b/0x31f0 [ 530.079757][T29866] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 530.079901][T29866] ? avc_has_perm+0xf7/0x180 [ 530.079948][T29866] ? selinux_socket_sendmsg+0x175/0x1b0 [ 530.079986][T29866] ? __pfx_packet_sendmsg+0x10/0x10 [ 530.080012][T29866] __sock_sendmsg+0x145/0x180 [ 530.080104][T29866] __sys_sendto+0x268/0x330 [ 530.080159][T29866] __x64_sys_sendto+0x76/0x90 [ 530.080222][T29866] x64_sys_call+0x29a7/0x3000 [ 530.080257][T29866] do_syscall_64+0xca/0x2b0 [ 530.080303][T29866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.080333][T29866] RIP: 0033:0x7fc7e5adf749 [ 530.080419][T29866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.080448][T29866] RSP: 002b:00007fc7e453f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.080468][T29866] RAX: ffffffffffffffda RBX: 00007fc7e5d35fa0 RCX: 00007fc7e5adf749 [ 530.080483][T29866] RDX: 000000000000001e RSI: 0000200000000780 RDI: 0000000000000006 [ 530.080499][T29866] RBP: 00007fc7e453f090 R08: 00002000000000c0 R09: 0000000000000014 [ 530.080565][T29866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.080579][T29866] R13: 00007fc7e5d36038 R14: 00007fc7e5d35fa0 R15: 00007ffe89bf8638 [ 530.080600][T29866] [ 530.131397][T29746] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 530.234670][T29872] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.8340' sets config #0 [ 530.336140][T29873] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.8340' sets config #1 [ 530.371074][T29877] serio: Serial port ptm0 [ 530.414010][T21936] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 530.420203][T14134] Bluetooth: hci2: command 0x1003 tx timeout [ 530.611180][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8348'. [ 530.622544][T29897] syz_tun: refused to change device tx_queue_len [ 530.736981][ T6778] batadv30: left promiscuous mode [ 531.477527][T29909] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8354' sets config #0 [ 531.477596][T29909] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8354' sets config #1 [ 531.532411][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 531.532429][ T29] audit: type=1326 audit(1767671414.550:40145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.571286][T29907] netlink: 'syz.1.8353': attribute type 10 has an invalid length. [ 531.580493][ T29] audit: type=1326 audit(1767671414.550:40146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.604198][ T29] audit: type=1326 audit(1767671414.550:40147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.627933][ T29] audit: type=1326 audit(1767671414.550:40148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.651689][ T29] audit: type=1326 audit(1767671414.550:40149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.675652][ T29] audit: type=1326 audit(1767671414.550:40150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.699339][ T29] audit: type=1326 audit(1767671414.550:40151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.723005][ T29] audit: type=1326 audit(1767671414.550:40152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.746698][ T29] audit: type=1326 audit(1767671414.550:40153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec6cf9e1ff code=0x7ffc0000 [ 531.770198][ T29] audit: type=1326 audit(1767671414.550:40154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.3.8356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 531.797630][T29907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.860674][T29907] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 531.904793][T29922] serio: Serial port ptm0 [ 532.009288][T29934] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8365' sets config #0 [ 532.040623][T29936] siw: device registration error -23 [ 532.046322][T29934] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8365' sets config #1 [ 532.078428][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 532.173126][T29954] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 532.214840][T29953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8368'. [ 532.846311][T29969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8377'. [ 532.856317][T29969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8377'. [ 532.941872][T29973] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8379' sets config #0 [ 532.941941][T29973] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8379' sets config #1 [ 532.993214][T29976] serio: Serial port ptm1 [ 533.023641][T29984] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 533.093789][T29991] siw: device registration error -23 [ 533.264476][T30005] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8390' sets config #0 [ 533.273987][T30005] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8390' sets config #1 [ 533.526614][T30015] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 533.625318][T30020] wg2: entered promiscuous mode [ 533.625342][T30020] wg2: entered allmulticast mode [ 533.694433][T30022] lo speed is unknown, defaulting to 1000 [ 533.695317][T30022] wg1 speed is unknown, defaulting to 1000 [ 533.751161][ T1039] IPVS: starting estimator thread 0... [ 533.853964][T30023] IPVS: using max 2208 ests per chain, 110400 per kthread [ 534.015835][T30032] serio: Serial port ptm1 [ 534.052390][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8400'. [ 534.084457][T14134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 534.221165][T30040] binfmt_misc: register: failed to install interpreter file ./file2 [ 534.284728][T30040] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 534.382232][T30045] netlink: 'syz.5.8406': attribute type 1 has an invalid length. [ 534.418339][T30045] 8021q: adding VLAN 0 to HW filter on device bond10 [ 534.528485][T30045] bond10: (slave veth41): Enslaving as an active interface with a down link [ 534.557700][ T92] Bluetooth: hci0: Frame reassembly failed (-84) [ 534.609885][ T8334] IPVS: stop unused estimator thread 0... [ 534.630671][T30045] 8021q: adding VLAN 0 to HW filter on device batadv23 [ 534.632980][T30045] bond10: (slave batadv23): making interface the new active one [ 534.634446][T30045] batadv23: entered promiscuous mode [ 534.634562][T30045] bond10: (slave batadv23): Enslaving as an active interface with an up link [ 534.710962][T30058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30058 comm=syz.3.8410 [ 534.766779][T30063] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8407'. [ 534.908473][T30066] serio: Serial port ptm1 [ 534.926680][ T8334] Bluetooth: hci1: Frame reassembly failed (-84) [ 534.963503][T30074] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8414' sets config #0 [ 534.975026][T30074] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8414' sets config #1 [ 535.134947][ T2735] Bluetooth: hci2: Frame reassembly failed (-84) [ 535.251670][T30091] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 535.619679][T30099] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8425'. [ 536.069551][T30116] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 536.573964][ T5559] Bluetooth: hci0: command 0x1003 tx timeout [ 536.574135][T14134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 536.614059][ T9233] batadv33: left promiscuous mode [ 536.899121][ T29] kauditd_printk_skb: 878 callbacks suppressed [ 536.899140][ T29] audit: type=1326 audit(1767671419.920:41033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 536.950508][ T29] audit: type=1326 audit(1767671419.950:41034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 536.964134][T21936] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 536.974515][ T29] audit: type=1326 audit(1767671419.950:41035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 537.003779][ T29] audit: type=1326 audit(1767671419.950:41036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 537.005484][ T2015] Bluetooth: hci3: Frame reassembly failed (-84) [ 537.027462][ T29] audit: type=1326 audit(1767671419.950:41037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec6cf9f783 code=0x7ffc0000 [ 537.027500][ T29] audit: type=1326 audit(1767671419.950:41038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec6cf9e1ff code=0x7ffc0000 [ 537.080898][ T29] audit: type=1326 audit(1767671419.950:41039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fec6cf9f7d7 code=0x7ffc0000 [ 537.104514][ T29] audit: type=1326 audit(1767671419.950:41040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec6cf9df90 code=0x7ffc0000 [ 537.128364][ T29] audit: type=1326 audit(1767671419.950:41041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fec6cf9e3aa code=0x7ffc0000 [ 537.151971][ T29] audit: type=1326 audit(1767671419.950:41042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.3.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 537.203933][ T5559] Bluetooth: hci2: command 0x1003 tx timeout [ 537.203951][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 537.493725][T30055] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 537.500118][T30081] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 537.627875][T30137] netlink: 'syz.4.8440': attribute type 1 has an invalid length. [ 537.676412][T30137] 8021q: adding VLAN 0 to HW filter on device bond16 [ 537.741079][T30141] bond16: (slave veth45): Enslaving as an active interface with a down link [ 537.823712][T30137] 8021q: adding VLAN 0 to HW filter on device batadv28 [ 537.826947][T30137] bond16: (slave batadv28): making interface the new active one [ 537.828391][T30137] batadv28: entered promiscuous mode [ 537.828566][T30137] bond16: (slave batadv28): Enslaving as an active interface with an up link [ 538.593659][ T92] Bluetooth: hci0: Frame reassembly failed (-84) [ 538.964893][T14134] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 539.311244][T10885] Bluetooth: hci1: Frame reassembly failed (-84) [ 539.409508][T30189] syzkaller0: entered promiscuous mode [ 539.415217][T30189] syzkaller0: entered allmulticast mode [ 539.787375][T30202] FAULT_INJECTION: forcing a failure. [ 539.787375][T30202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.801028][T30202] CPU: 0 UID: 0 PID: 30202 Comm: syz.1.8463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 539.801098][T30202] Tainted: [W]=WARN [ 539.801106][T30202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.801123][T30202] Call Trace: [ 539.801131][T30202] [ 539.801142][T30202] __dump_stack+0x1d/0x30 [ 539.801170][T30202] dump_stack_lvl+0x95/0xd0 [ 539.801255][T30202] dump_stack+0x15/0x1b [ 539.801277][T30202] should_fail_ex+0x265/0x280 [ 539.801349][T30202] should_fail_alloc_page+0xf2/0x100 [ 539.801374][T30202] alloc_pages_bulk_noprof+0x102/0x540 [ 539.801452][T30202] copy_splice_read+0xf3/0x660 [ 539.801495][T30202] ? __pfx_copy_splice_read+0x10/0x10 [ 539.801538][T30202] splice_direct_to_actor+0x26f/0x680 [ 539.801573][T30202] ? __pfx_direct_splice_actor+0x10/0x10 [ 539.801623][T30202] do_splice_direct+0xda/0x150 [ 539.801697][T30202] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 539.801724][T30202] do_sendfile+0x380/0x650 [ 539.801757][T30202] __x64_sys_sendfile64+0x105/0x150 [ 539.801787][T30202] x64_sys_call+0x2db1/0x3000 [ 539.801879][T30202] do_syscall_64+0xca/0x2b0 [ 539.801915][T30202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.801943][T30202] RIP: 0033:0x7fc7e5adf749 [ 539.801962][T30202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.802050][T30202] RSP: 002b:00007fc7e453f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 539.802071][T30202] RAX: ffffffffffffffda RBX: 00007fc7e5d35fa0 RCX: 00007fc7e5adf749 [ 539.802083][T30202] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 539.802203][T30202] RBP: 00007fc7e453f090 R08: 0000000000000000 R09: 0000000000000000 [ 539.802215][T30202] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 539.802297][T30202] R13: 00007fc7e5d36038 R14: 00007fc7e5d35fa0 R15: 00007ffe89bf8638 [ 539.802331][T30202] [ 540.103762][T30211] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 540.241879][T30218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8470'. [ 540.269800][T30218] lo speed is unknown, defaulting to 1000 [ 540.275995][T30218] wg1 speed is unknown, defaulting to 1000 [ 540.663907][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 540.670192][T21936] Bluetooth: hci0: command 0x1003 tx timeout [ 540.699102][T30165] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 540.991626][ T413] batadv34: left promiscuous mode [ 541.266087][T30228] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8473'. [ 541.364183][T21936] Bluetooth: hci1: command 0x1003 tx timeout [ 541.364245][T14134] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 541.447288][T30258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8483'. [ 541.644961][T30265] hub 8-0:1.0: USB hub found [ 541.645112][T30265] hub 8-0:1.0: 8 ports detected [ 541.658128][ T7064] Bluetooth: hci1: Frame reassembly failed (-84) [ 541.904144][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 541.904158][ T29] audit: type=1326 audit(1767671424.920:41328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30276 comm="syz.5.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef62cbf749 code=0x7ffc0000 [ 541.904463][ T29] audit: type=1326 audit(1767671424.930:41329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30276 comm="syz.5.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef62cbf749 code=0x7ffc0000 [ 541.904829][ T29] audit: type=1326 audit(1767671424.930:41330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30276 comm="syz.5.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef62cbf749 code=0x7ffc0000 [ 541.982745][ T29] audit: type=1326 audit(1767671424.930:41331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30276 comm="syz.5.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef62cbf749 code=0x7ffc0000 [ 542.006537][ T29] audit: type=1326 audit(1767671424.930:41332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30276 comm="syz.5.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef62cbf749 code=0x7ffc0000 [ 542.006584][ T29] audit: type=1326 audit(1767671424.940:41333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30276 comm="syz.5.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fef62cbf749 code=0x7ffc0000 [ 542.289398][ T29] audit: type=1326 audit(1767671425.310:41334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.8497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 542.314017][ T29] audit: type=1326 audit(1767671425.310:41335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.8497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 542.337923][ T29] audit: type=1326 audit(1767671425.310:41336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.8497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 542.361511][ T29] audit: type=1326 audit(1767671425.310:41337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.8497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 543.162960][T30305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8506'. [ 543.335323][T30316] hub 8-0:1.0: USB hub found [ 543.344866][T30316] hub 8-0:1.0: 8 ports detected [ 543.353481][T30319] serio: Serial port ptm2 [ 543.372459][T30324] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 543.382714][T21936] Bluetooth: hci0: command 0x1003 tx timeout [ 543.382744][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 543.413306][T30326] hub 1-0:1.0: USB hub found [ 543.418304][T30326] hub 1-0:1.0: 8 ports detected [ 543.600183][T30333] lo speed is unknown, defaulting to 1000 [ 543.606304][T30333] wg1 speed is unknown, defaulting to 1000 [ 543.672344][T30333] chnl_net:caif_netlink_parms(): no params data found [ 543.686967][T14134] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 543.693097][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 543.743271][T30351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8520'. [ 543.757897][T30358] batman_adv: batadv0: Adding interface: ipvlan13 [ 543.764563][T30358] batman_adv: batadv0: The MTU of interface ipvlan13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.790290][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.800845][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.810757][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 543.820595][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.830454][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 543.840423][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.850378][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 543.860342][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.870272][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 543.880214][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.890077][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 543.899926][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.909933][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 543.919897][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.929795][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 543.939690][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.949510][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 543.959434][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.969405][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 543.979364][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.989565][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 543.999493][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.009413][T30358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 544.019499][T30358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.029369][T30358] batman_adv: batadv0: Interface activated: ipvlan13 [ 544.100255][T30333] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.107658][T30333] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.116183][T30333] bridge_slave_0: entered allmulticast mode [ 544.124607][T30333] bridge_slave_0: entered promiscuous mode [ 544.132245][ T2735] Bluetooth: hci0: Frame reassembly failed (-84) [ 544.142627][T30333] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.149836][T30333] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.158165][T30333] bridge_slave_1: entered allmulticast mode [ 544.165596][T30333] bridge_slave_1: entered promiscuous mode [ 544.196666][T30333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.205216][T30367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8525'. [ 544.211020][T30333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.230961][T30367] 8021q: adding VLAN 0 to HW filter on device bond11 [ 544.260144][T30367] bond11: (slave veth47): Enslaving as an active interface with an up link [ 544.270677][T30333] team0: Port device team_slave_0 added [ 544.280871][T30333] team0: Port device team_slave_1 added [ 544.297878][T30367] 8021q: adding VLAN 0 to HW filter on device batadv27 [ 544.306867][T30367] bond11: (slave batadv27): Enslaving as an active interface with an up link [ 544.325082][T30333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.332140][T30333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.358446][T30333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.389383][T30333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.396461][T30333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.422449][T30333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.457609][T30333] hsr_slave_0: entered promiscuous mode [ 544.464252][T30333] hsr_slave_1: entered promiscuous mode [ 544.470521][T30333] debugfs: 'hsr0' already exists in 'hsr' [ 544.476342][T30333] Cannot create hsr debugfs directory [ 544.547701][T30333] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.616147][T30333] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.676307][T30333] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.716286][T30333] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.735567][T30385] batman_adv: batadv0: Adding interface: ipvlan10 [ 544.742137][T30385] batman_adv: batadv0: The MTU of interface ipvlan10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.767705][T30385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 544.777887][T30385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.787781][T30385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 544.797662][T30385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.807545][T30385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 544.817546][T30385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.827523][T30385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 544.837438][T30385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.847291][T30385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 544.857191][T30385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.867041][T30385] batman_adv: batadv0: Interface activated: ipvlan10 [ 544.921683][T30333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 544.936772][T30333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 544.939526][T30333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 544.942409][T30333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 545.020396][T30389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8533'. [ 545.068770][T30333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.082869][T30333] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.100334][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.107643][ T9993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.120672][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.127806][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.154527][T30398] hub 8-0:1.0: USB hub found [ 545.164616][T30398] hub 8-0:1.0: 8 ports detected [ 545.249966][T30333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.387742][T30333] veth0_vlan: entered promiscuous mode [ 545.398819][T30333] veth1_vlan: entered promiscuous mode [ 545.418900][T30333] veth0_macvtap: entered promiscuous mode [ 545.427761][T30333] veth1_macvtap: entered promiscuous mode [ 545.442211][T30333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.452969][T30333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.467339][T10855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.476653][T10855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.487751][T10855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.498444][T10855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.623019][T30432] bond_slave_0: entered promiscuous mode [ 545.628750][T30432] bond_slave_1: entered promiscuous mode [ 545.635655][T30432] bond_slave_0: left promiscuous mode [ 545.641094][T30432] bond_slave_1: left promiscuous mode [ 545.667296][T30434] netlink: 'syz.4.8540': attribute type 1 has an invalid length. [ 546.937428][T14134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 546.966043][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 546.966111][ T29] audit: type=1326 audit(1767671429.400:41495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 546.996005][ T29] audit: type=1326 audit(1767671429.400:41496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.019716][ T29] audit: type=1326 audit(1767671429.510:41497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.043483][ T29] audit: type=1326 audit(1767671429.510:41498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.067347][ T29] audit: type=1326 audit(1767671429.510:41499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.090978][ T29] audit: type=1326 audit(1767671429.660:41500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.115159][ T29] audit: type=1326 audit(1767671429.660:41501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.138855][ T29] audit: type=1326 audit(1767671429.660:41502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.162649][ T29] audit: type=1326 audit(1767671429.780:41503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.186342][ T29] audit: type=1326 audit(1767671429.780:41504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30438 comm="syz.4.8542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 547.837902][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8543'. [ 547.859277][T30456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8545'. [ 547.895292][ T53] batadv23: left promiscuous mode [ 548.653330][T30450] Set syz1 is full, maxelem 65536 reached [ 548.974937][T30474] batman_adv: batadv0: Adding interface: ipvlan14 [ 548.981435][T30474] batman_adv: batadv0: The MTU of interface ipvlan14 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.007124][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.017606][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.027581][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 549.037427][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.047515][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 549.057393][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.067226][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 549.077065][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.086907][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 549.096823][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.106711][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 549.116605][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.126500][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 549.136340][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.146189][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 549.156061][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.165921][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 549.175814][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.185765][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 549.195783][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.205770][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 549.215836][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.225695][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 549.235781][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.245721][T30474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan13 [ 549.255683][T30474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.270246][T30474] batman_adv: batadv0: Interface activated: ipvlan14 [ 549.372215][T30480] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.383667][T30480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.392978][T30480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.404263][T30480] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.413804][T30480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.423102][T30480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.446367][T30480] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.455469][T30480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8554'. [ 549.957140][T30505] hub 8-0:1.0: USB hub found [ 549.961997][T30505] hub 8-0:1.0: 8 ports detected [ 550.182436][T30462] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 550.408659][T30510] hub 8-0:1.0: USB hub found [ 550.413740][T30510] hub 8-0:1.0: 8 ports detected [ 551.393269][T30512] lo speed is unknown, defaulting to 1000 [ 551.399743][T30512] wg1 speed is unknown, defaulting to 1000 [ 551.571250][T30523] syz_tun: refused to change device tx_queue_len [ 551.787510][T30530] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8568' sets config #0 [ 551.801995][T30530] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8568' sets config #1 [ 551.873110][T30537] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8571' sets config #0 [ 551.896701][T30537] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8571' sets config #1 [ 551.915421][T30538] siw: device registration error -23 [ 552.076560][T30551] syz_tun: refused to change device tx_queue_len [ 552.107318][T30550] siw: device registration error -23 [ 552.585935][ T9511] batadv28: left promiscuous mode [ 552.645243][ T29] kauditd_printk_skb: 1382 callbacks suppressed [ 552.645258][ T29] audit: type=1326 audit(1767671435.670:42885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 552.674653][T30546] Set syz1 is full, maxelem 65536 reached [ 552.681212][ T29] audit: type=1326 audit(1767671435.700:42886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 552.704981][ T29] audit: type=1326 audit(1767671435.700:42887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 552.709380][ T6777] Bluetooth: hci0: Frame reassembly failed (-84) [ 552.730005][ T29] audit: type=1326 audit(1767671435.700:42888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 552.760193][ T29] audit: type=1326 audit(1767671435.700:42889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0ab5df783 code=0x7ffc0000 [ 552.783694][ T29] audit: type=1326 audit(1767671435.700:42890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0ab5de1ff code=0x7ffc0000 [ 552.807256][ T29] audit: type=1326 audit(1767671435.700:42891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe0ab5df7d7 code=0x7ffc0000 [ 552.831753][ T29] audit: type=1326 audit(1767671435.700:42892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0ab5ddf90 code=0x7ffc0000 [ 552.855440][ T29] audit: type=1326 audit(1767671435.700:42893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0ab5de3aa code=0x7ffc0000 [ 552.970321][ T29] audit: type=1326 audit(1767671435.700:42894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30556 comm="syz.0.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 553.084609][T30567] __nla_validate_parse: 7 callbacks suppressed [ 553.084702][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8578'. [ 553.169947][ T6777] Bluetooth: hci1: Frame reassembly failed (-84) [ 553.188639][T30571] hub 8-0:1.0: USB hub found [ 553.194473][T30571] hub 8-0:1.0: 8 ports detected [ 553.981121][T30588] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8584' sets config #0 [ 554.098620][T30592] FAULT_INJECTION: forcing a failure. [ 554.098620][T30592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.112211][T30592] CPU: 0 UID: 0 PID: 30592 Comm: syz.5.8587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 554.112244][T30592] Tainted: [W]=WARN [ 554.112332][T30592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.112345][T30592] Call Trace: [ 554.112353][T30592] [ 554.112365][T30592] __dump_stack+0x1d/0x30 [ 554.112396][T30592] dump_stack_lvl+0x95/0xd0 [ 554.112477][T30592] dump_stack+0x15/0x1b [ 554.112497][T30592] should_fail_ex+0x265/0x280 [ 554.112528][T30592] should_fail+0xb/0x20 [ 554.112553][T30592] should_fail_usercopy+0x1a/0x20 [ 554.112628][T30592] _copy_from_user+0x1c/0xb0 [ 554.112672][T30592] __sys_bpf+0x183/0x7c0 [ 554.112703][T30592] __x64_sys_bpf+0x41/0x50 [ 554.112804][T30592] x64_sys_call+0x28e1/0x3000 [ 554.112837][T30592] do_syscall_64+0xca/0x2b0 [ 554.112875][T30592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.112951][T30592] RIP: 0033:0x7fef62cbf749 [ 554.112987][T30592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.113006][T30592] RSP: 002b:00007fef6171f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 554.113087][T30592] RAX: ffffffffffffffda RBX: 00007fef62f15fa0 RCX: 00007fef62cbf749 [ 554.113105][T30592] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 554.113121][T30592] RBP: 00007fef6171f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.113136][T30592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.113223][T30592] R13: 00007fef62f16038 R14: 00007fef62f15fa0 R15: 00007ffca7508338 [ 554.113243][T30592] [ 554.326066][T30594] batman_adv: batadv0: Adding interface: ipvlan11 [ 554.332658][T30594] batman_adv: batadv0: The MTU of interface ipvlan11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.358577][T30594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 554.368607][T30594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.378524][T30594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 554.388864][T30594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.399613][T30594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 554.410187][T30594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.420111][T30594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 554.430101][T30594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.439974][T30594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 554.449988][T30594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.459876][T30594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 554.470192][T30594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.480202][T30594] batman_adv: batadv0: Interface activated: ipvlan11 [ 554.588695][T30603] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8591' sets config #0 [ 554.598231][T30603] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8591' sets config #1 [ 554.814071][T21936] Bluetooth: hci0: command 0x1003 tx timeout [ 554.820229][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 555.066634][T10724] Bluetooth: hci2: Frame reassembly failed (-84) [ 555.204465][T21936] Bluetooth: hci1: command 0x1003 tx timeout [ 555.210609][T14134] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 555.238493][T30572] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 555.607067][T30623] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8599'. [ 555.760291][T30638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8602'. [ 555.951329][T10724] Bluetooth: hci0: Frame reassembly failed (-84) [ 556.089180][ T9993] Bluetooth: hci1: Frame reassembly failed (-84) [ 556.387441][T30652] siw: device registration error -23 [ 556.551631][ T9993] Bluetooth: hci3: Frame reassembly failed (-84) [ 557.124824][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 557.125426][ T3574] Bluetooth: hci2: command 0x1003 tx timeout [ 557.202458][T30664] serio: Serial port ptm2 [ 557.230666][ T9120] Bluetooth: hci2: Frame reassembly failed (-84) [ 557.632569][T30680] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 558.003903][ T3574] Bluetooth: hci0: command 0x1003 tx timeout [ 558.010046][T14134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 558.083959][T21936] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 558.458268][T30692] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8619'. [ 558.574141][T21936] Bluetooth: hci3: command 0x1003 tx timeout [ 558.574160][ T5559] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 558.642257][T30695] siw: device registration error -23 [ 558.654806][T30701] FAULT_INJECTION: forcing a failure. [ 558.654806][T30701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.668002][T30701] CPU: 0 UID: 0 PID: 30701 Comm: syz.3.8622 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 558.668042][T30701] Tainted: [W]=WARN [ 558.668052][T30701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.668073][T30701] Call Trace: [ 558.668080][T30701] [ 558.668088][T30701] __dump_stack+0x1d/0x30 [ 558.668111][T30701] dump_stack_lvl+0x95/0xd0 [ 558.668165][T30701] dump_stack+0x15/0x1b [ 558.668182][T30701] should_fail_ex+0x265/0x280 [ 558.668203][T30701] should_fail+0xb/0x20 [ 558.668219][T30701] should_fail_usercopy+0x1a/0x20 [ 558.668289][T30701] _copy_from_user+0x1c/0xb0 [ 558.668317][T30701] kstrtouint_from_user+0x69/0xf0 [ 558.668337][T30701] ? 0xffffffff81000000 [ 558.668364][T30701] ? selinux_file_permission+0x1e2/0x320 [ 558.668407][T30701] proc_fail_nth_write+0x50/0x160 [ 558.668434][T30701] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 558.668484][T30701] vfs_write+0x269/0x960 [ 558.668502][T30701] ? vfs_read+0x4e6/0x770 [ 558.668517][T30701] ? __rcu_read_unlock+0x4f/0x70 [ 558.668535][T30701] ? __fget_files+0x184/0x1c0 [ 558.668596][T30701] ? mutex_lock+0x58/0x90 [ 558.668659][T30701] ksys_write+0xda/0x1a0 [ 558.668678][T30701] __x64_sys_write+0x40/0x50 [ 558.668695][T30701] x64_sys_call+0x2847/0x3000 [ 558.668716][T30701] do_syscall_64+0xca/0x2b0 [ 558.668783][T30701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.668801][T30701] RIP: 0033:0x7fec6cf9e1ff [ 558.668865][T30701] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 558.668881][T30701] RSP: 002b:00007fec6ba07030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 558.668915][T30701] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fec6cf9e1ff [ 558.668926][T30701] RDX: 0000000000000001 RSI: 00007fec6ba070a0 RDI: 0000000000000004 [ 558.668936][T30701] RBP: 00007fec6ba07090 R08: 0000000000000000 R09: 0000000000000000 [ 558.668947][T30701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 558.668972][T30701] R13: 00007fec6d1f6038 R14: 00007fec6d1f5fa0 R15: 00007ffddab6d9b8 [ 558.669003][T30701] [ 558.894949][T30641] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 558.973497][T30709] bond_slave_0: entered promiscuous mode [ 558.979391][T30709] bond_slave_1: entered promiscuous mode [ 558.985466][T30709] bond_slave_0: left promiscuous mode [ 558.985495][T30709] bond_slave_1: left promiscuous mode [ 559.031586][T30713] serio: Serial port ptm0 [ 559.049717][T30711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8624'. [ 559.059594][T30711] syz_tun: refused to change device tx_queue_len [ 559.082601][T30712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8625'. [ 559.105567][T30718] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8628'. [ 559.294667][ T5559] Bluetooth: hci2: command 0x1003 tx timeout [ 559.304685][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 559.509963][T30723] hub 8-0:1.0: USB hub found [ 559.510109][T30723] hub 8-0:1.0: 8 ports detected [ 559.835650][T30734] hub 8-0:1.0: USB hub found [ 559.835778][T30734] hub 8-0:1.0: 8 ports detected [ 560.278855][T30737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8635'. [ 560.279008][T30737] syz_tun: refused to change device tx_queue_len [ 560.702375][T30749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8640'. [ 560.841364][T30756] netlink: 'syz.1.8644': attribute type 1 has an invalid length. [ 561.039876][T30759] hub 8-0:1.0: USB hub found [ 561.045458][T30759] hub 8-0:1.0: 8 ports detected [ 561.352614][T30730] Set syz1 is full, maxelem 65536 reached [ 561.506916][T30756] 8021q: adding VLAN 0 to HW filter on device bond14 [ 561.559533][T30760] bond14: (slave veth61): Enslaving as an active interface with a down link [ 561.599950][T30762] 8021q: adding VLAN 0 to HW filter on device batadv38 [ 561.609246][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 561.609321][ T29] audit: type=1326 audit(1767671444.600:43156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="syz.3.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.639392][ T29] audit: type=1326 audit(1767671444.600:43157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="syz.3.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.663072][ T29] audit: type=1326 audit(1767671444.600:43158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="syz.3.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.687344][ T29] audit: type=1326 audit(1767671444.600:43159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="(}-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.710376][ T29] audit: type=1326 audit(1767671444.600:43160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="(}-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.733455][ T29] audit: type=1326 audit(1767671444.600:43161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="(}-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.756727][ T29] audit: type=1326 audit(1767671444.600:43162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="(}-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.780009][ T29] audit: type=1326 audit(1767671444.600:43163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="(}-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.803083][ T29] audit: type=1326 audit(1767671444.600:43164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="(}-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.826091][ T29] audit: type=1326 audit(1767671444.600:43165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30765 comm="(}-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6cf9f749 code=0x7ffc0000 [ 561.851094][T30762] bond14: (slave batadv38): making interface the new active one [ 561.869073][T30762] batadv38: entered promiscuous mode [ 561.876231][T30762] bond14: (slave batadv38): Enslaving as an active interface with an up link [ 561.885417][T30766] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 561.983221][T30772] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 562.018924][T30774] batman_adv: batadv0: Adding interface: ipvlan15 [ 562.025428][T30774] batman_adv: batadv0: The MTU of interface ipvlan15 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.051191][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.061872][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.071809][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 562.081795][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.091877][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 562.101862][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.112291][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 562.122405][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.132367][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 562.142242][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.152105][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 562.161968][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.171874][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 562.181752][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.191610][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 562.201542][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.211417][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 562.221353][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.231233][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 562.241249][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.251154][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 562.261183][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.271037][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 562.280974][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.290841][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan13 [ 562.300785][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.310627][T30774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan14 [ 562.320574][T30774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.385142][T30781] hub 1-0:1.0: USB hub found [ 562.390059][T30781] hub 1-0:1.0: 8 ports detected [ 562.436932][T30774] batman_adv: batadv0: Interface activated: ipvlan15 [ 562.464011][T30778] hub 8-0:1.0: USB hub found [ 562.494983][T30778] hub 8-0:1.0: 8 ports detected [ 562.561045][T30784] 9p: Could not find request transport: [ 562.561045][T30784] [ 562.920789][T30790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8653'. [ 562.960660][T30790] syz_tun: entered promiscuous mode [ 563.001387][T30790] syz_tun: refused to change device tx_queue_len [ 563.015873][T30798] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 563.112755][T30801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8658'. [ 563.568471][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 563.626043][T30839] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.8671' sets config #0 [ 563.635630][T30839] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.8671' sets config #1 [ 563.654088][ T9174] Bluetooth: hci1: Frame reassembly failed (-84) [ 563.668050][ T9174] Bluetooth: hci2: Frame reassembly failed (-84) [ 563.784859][T30844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8672'. [ 563.909228][T30851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8674'. [ 564.537416][T30855] tipc: Can't bind to reserved service type 1 [ 564.613759][T30857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8676'. [ 564.617476][T30857] syz_tun: refused to change device tx_queue_len [ 564.844441][T30868] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 564.877877][T30866] hub 8-0:1.0: USB hub found [ 564.882676][T30866] hub 8-0:1.0: 8 ports detected [ 564.889675][T30870] lo speed is unknown, defaulting to 1000 [ 564.896212][T30870] wg1 speed is unknown, defaulting to 1000 [ 565.043457][T30879] FAULT_INJECTION: forcing a failure. [ 565.043457][T30879] name failslab, interval 1, probability 0, space 0, times 0 [ 565.056301][T30879] CPU: 1 UID: 0 PID: 30879 Comm: syz.5.8683 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 565.056390][T30879] Tainted: [W]=WARN [ 565.056454][T30879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.056470][T30879] Call Trace: [ 565.056490][T30879] [ 565.056499][T30879] __dump_stack+0x1d/0x30 [ 565.056530][T30879] dump_stack_lvl+0x95/0xd0 [ 565.056559][T30879] dump_stack+0x15/0x1b [ 565.056585][T30879] should_fail_ex+0x265/0x280 [ 565.056630][T30879] should_failslab+0x8c/0xb0 [ 565.056653][T30879] __kmalloc_cache_noprof+0x65/0x4c0 [ 565.056740][T30879] ? audit_log_d_path+0x8d/0x150 [ 565.056772][T30879] audit_log_d_path+0x8d/0x150 [ 565.056795][T30879] audit_log_d_path_exe+0x42/0x70 [ 565.056884][T30879] audit_log_task+0x1e9/0x250 [ 565.056918][T30879] ? kstrtouint+0x76/0xc0 [ 565.056941][T30879] audit_seccomp+0x61/0x100 [ 565.056982][T30879] ? __seccomp_filter+0x832/0x1260 [ 565.057050][T30879] __seccomp_filter+0x843/0x1260 [ 565.057079][T30879] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 565.057150][T30879] ? vfs_write+0x7e8/0x960 [ 565.057168][T30879] ? __rcu_read_unlock+0x4f/0x70 [ 565.057189][T30879] ? __fget_files+0x184/0x1c0 [ 565.057240][T30879] __secure_computing+0x82/0x150 [ 565.057267][T30879] syscall_trace_enter+0xcf/0x1e0 [ 565.057291][T30879] do_syscall_64+0xa4/0x2b0 [ 565.057333][T30879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.057401][T30879] RIP: 0033:0x7fef62cbf749 [ 565.057498][T30879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.057523][T30879] RSP: 002b:00007fef6171f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 565.057546][T30879] RAX: ffffffffffffffda RBX: 00007fef62f15fa0 RCX: 00007fef62cbf749 [ 565.057561][T30879] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 565.057600][T30879] RBP: 00007fef6171f090 R08: 0000000000000000 R09: 0000000000000000 [ 565.057615][T30879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.057629][T30879] R13: 00007fef62f16038 R14: 00007fef62f15fa0 R15: 00007ffca7508338 [ 565.057656][T30879] [ 565.495592][T30888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8687'. [ 565.599039][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8688'. [ 565.599199][T30892] syz_tun: refused to change device tx_queue_len [ 565.608287][T14134] Bluetooth: hci0: command 0x1003 tx timeout [ 565.612440][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 565.685449][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 565.685474][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 565.685499][ T5559] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 565.746654][T21936] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 565.804866][T30900] netlink: 'syz.4.8692': attribute type 1 has an invalid length. [ 565.804897][T30900] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8692'. [ 565.924026][ T3392] page_pool_release_retry() stalled pool shutdown: id 258, 32 inflight 181 sec [ 566.037089][T30908] batman_adv: batadv0: Adding interface: ipvlan16 [ 566.037107][T30908] batman_adv: batadv0: The MTU of interface ipvlan16 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.037134][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.037191][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037240][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 566.037258][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037268][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 566.037286][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037377][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 566.037396][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037409][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 566.037472][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037481][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 566.037494][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037507][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 566.037525][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037534][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 566.037547][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037556][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 566.037633][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037646][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 566.037664][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037688][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 566.037701][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037711][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 566.037724][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037733][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan13 [ 566.037817][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037830][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan14 [ 566.037900][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.037909][T30908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan15 [ 566.037995][T30908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.038030][T30908] batman_adv: batadv0: Interface activated: ipvlan16 [ 566.618584][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 566.618602][ T29] audit: type=1326 audit(1767671449.640:43473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.629212][ T29] audit: type=1326 audit(1767671449.650:43474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.639447][ T29] audit: type=1326 audit(1767671449.660:43475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.656149][ T29] audit: type=1326 audit(1767671449.680:43476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.666535][ T29] audit: type=1326 audit(1767671449.690:43477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.676786][ T29] audit: type=1326 audit(1767671449.700:43478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.687070][ T29] audit: type=1326 audit(1767671449.710:43479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.697191][ T29] audit: type=1326 audit(1767671449.720:43480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.704146][ T29] audit: type=1326 audit(1767671449.730:43481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.758321][ T29] audit: type=1326 audit(1767671449.760:43482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.3.8700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec6cfd2005 code=0x7ffc0000 [ 566.975902][T30949] bond_slave_0: entered promiscuous mode [ 566.981729][T30949] bond_slave_1: entered promiscuous mode [ 567.027113][T30953] bond_slave_0: left promiscuous mode [ 567.032710][T30953] bond_slave_1: left promiscuous mode [ 568.752035][T30974] batman_adv: batadv0: Adding interface: ipvlan17 [ 568.758562][T30974] batman_adv: batadv0: The MTU of interface ipvlan17 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.784140][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.794607][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.804482][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 568.814350][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.824266][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 568.834113][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.843966][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 568.853896][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.863727][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 568.873696][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.883555][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 568.893492][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.903340][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 568.913195][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.923202][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 568.933095][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.943025][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 568.952947][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.962823][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 568.972858][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.982730][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 568.992754][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.002621][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 569.012560][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.022472][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan13 [ 569.032529][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.042380][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan14 [ 569.052350][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.062293][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan15 [ 569.072326][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.082161][T30974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan16 [ 569.092228][T30974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.112355][T30974] batman_adv: batadv0: Interface activated: ipvlan17 [ 569.191463][T30988] bond_slave_0: entered promiscuous mode [ 569.197266][T30988] bond_slave_1: entered promiscuous mode [ 569.202945][T30988] batadv0: entered promiscuous mode [ 569.211234][T30993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8727'. [ 569.242235][T30988] bond_slave_0: left promiscuous mode [ 569.247753][T30988] bond_slave_1: left promiscuous mode [ 569.253162][T30988] batadv0: left promiscuous mode [ 569.292834][T30992] block device autoloading is deprecated and will be removed. [ 569.322689][T30985] lo speed is unknown, defaulting to 1000 [ 569.328952][T30985] wg1 speed is unknown, defaulting to 1000 [ 569.431038][T30985] chnl_net:caif_netlink_parms(): no params data found [ 569.508076][T30985] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.515509][T30985] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.523768][T30985] bridge_slave_0: entered allmulticast mode [ 569.530828][T30985] bridge_slave_0: entered promiscuous mode [ 569.553209][T30985] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.560491][T30985] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.568243][T30985] bridge_slave_1: entered allmulticast mode [ 569.574937][T30985] bridge_slave_1: entered promiscuous mode [ 569.636161][T31026] batman_adv: batadv0: Adding interface: ipvlan12 [ 569.642645][T31026] batman_adv: batadv0: The MTU of interface ipvlan12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.668097][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.678655][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.688571][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 569.698770][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.708613][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 569.718537][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.728416][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 569.738270][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.748102][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 569.757935][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.767786][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 569.777695][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.787618][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 569.797571][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.807446][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 569.817657][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.827487][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 569.837405][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.847385][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 569.857230][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.867116][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 569.876983][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.886967][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 569.896994][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.906826][T31026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 569.916819][T31026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.926827][T31026] batman_adv: batadv0: Interface activated: ipvlan12 [ 569.939194][T30985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.988468][T31037] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 570.057035][T10885] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.066653][T10885] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.076112][T10885] .` (unregistering): Released all slaves [ 570.089228][T10885] bond0 (unregistering): (slave veth3): Releasing active interface [ 570.097305][T10885] batadv1: entered promiscuous mode [ 570.119990][T10885] bond0 (unregistering): (slave batadv1): Releasing active interface [ 570.132716][T10885] bond0 (unregistering): Released all slaves [ 570.143546][T10885] bond1 (unregistering): Released all slaves [ 570.158304][T10885] bond2 (unregistering): (slave veth13): Releasing backup interface [ 570.167936][T10885] bond2 (unregistering): (slave batadv5): Releasing backup interface [ 570.177044][T10885] bond2 (unregistering): Released all slaves [ 570.186906][T10885] bond3 (unregistering): (slave veth23): Releasing active interface [ 570.195158][T10885] batadv11: entered promiscuous mode [ 570.201514][T10885] bond3 (unregistering): (slave batadv11): Releasing active interface [ 570.218284][T10885] bond3 (unregistering): Released all slaves [ 570.236194][T10885] bond4 (unregistering): (slave veth25): Releasing active interface [ 570.244488][T10885] batadv12: entered promiscuous mode [ 570.265023][T10885] bond4 (unregistering): (slave batadv12): Releasing active interface [ 570.274288][T10885] bond4 (unregistering): Released all slaves [ 570.287244][T10885] bond5 (unregistering): Released all slaves [ 570.296179][T10885] bond6 (unregistering): Released all slaves [ 570.305854][T10885] bond7 (unregistering): (slave veth33): Releasing active interface [ 570.313976][T10885] batadv19: entered promiscuous mode [ 570.320955][T10885] bond7 (unregistering): (slave batadv19): Releasing active interface [ 570.334582][T10885] bond7 (unregistering): Released all slaves [ 570.346372][T10885] bond8 (unregistering): (slave veth35): Releasing active interface [ 570.354450][T10885] batadv20: entered promiscuous mode [ 570.360972][T10885] bond8 (unregistering): (slave batadv20): Releasing active interface [ 570.369882][T10885] bond8 (unregistering): Released all slaves [ 570.379964][T10885] bond9 (unregistering): (slave veth39): Releasing active interface [ 570.388060][T10885] batadv22: entered promiscuous mode [ 570.396165][T31053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8741'. [ 570.405882][T10885] bond9 (unregistering): (slave batadv22): Releasing active interface [ 570.416819][T10885] bond9 (unregistering): Released all slaves [ 570.426272][T10885] bond10 (unregistering): (slave veth41): Releasing active interface [ 570.434434][T10885] batadv23: entered promiscuous mode [ 570.442850][T10885] bond10 (unregistering): (slave batadv23): Releasing active interface [ 570.452452][T10885] bond10 (unregistering): Released all slaves [ 570.462714][T10885] bond11 (unregistering): (slave veth47): Releasing backup interface [ 570.474348][T10885] bond11 (unregistering): (slave batadv27): Releasing backup interface [ 570.484548][T10885] bond11 (unregistering): Released all slaves [ 570.505382][T30985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.530651][T31055] hub 1-0:1.0: USB hub found [ 570.535474][T31055] hub 1-0:1.0: 8 ports detected [ 570.588371][T30985] team0: Port device team_slave_0 added [ 570.596570][T10885] batman_adv: batadv0: Removing interface: ipvlan5 [ 570.635034][T10885] batman_adv: batadv0: Removing interface: ipvlan6 [ 570.642439][T10885] batman_adv: batadv0: Removing interface: ipvlan7 [ 570.660836][T31061] Cannot find add_set index 0 as target [ 570.734600][T10885] batman_adv: batadv0: Removing interface: ipvlan8 [ 570.743672][T10885] batman_adv: batadv0: Removing interface: ipvlan9 [ 570.751271][T10885] batman_adv: batadv0: Interface deactivated: ipvlan10 [ 570.758247][T10885] batman_adv: batadv0: Removing interface: ipvlan10 [ 570.765897][T10885] batman_adv: batadv0: Interface deactivated: ipvlan11 [ 570.772800][T10885] batman_adv: batadv0: Removing interface: ipvlan11 [ 570.783019][T10885] hsr_slave_0: left promiscuous mode [ 570.789144][T10885] hsr_slave_1: left promiscuous mode [ 570.886221][T31063] hub 8-0:1.0: USB hub found [ 570.891223][T31063] hub 8-0:1.0: 8 ports detected [ 571.047019][T31066] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 571.348067][T30985] team0: Port device team_slave_1 added [ 571.582049][T30985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.589098][T30985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.616063][T30985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.635804][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 571.635824][ T29] audit: type=1326 audit(1767671454.580:43780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31060 comm="syz.1.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 571.666104][ T29] audit: type=1326 audit(1767671454.580:43781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31060 comm="syz.1.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e5adf749 code=0x7ffc0000 [ 571.743936][T31074] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 571.887788][ T29] audit: type=1326 audit(1767671454.790:43782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 571.911561][ T29] audit: type=1326 audit(1767671454.790:43783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 571.936032][ T29] audit: type=1326 audit(1767671454.790:43784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 571.959865][ T29] audit: type=1326 audit(1767671454.790:43785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 571.984038][ T29] audit: type=1326 audit(1767671454.790:43786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 572.006625][T31082] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8756' sets config #0 [ 572.007733][ T29] audit: type=1326 audit(1767671454.790:43787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 572.017522][T31082] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8756' sets config #1 [ 572.040248][ T29] audit: type=1326 audit(1767671454.790:43788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 572.073065][ T29] audit: type=1326 audit(1767671454.790:43789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ab5df749 code=0x7ffc0000 [ 572.086672][T31083] hub 8-0:1.0: USB hub found [ 572.103989][T31083] hub 8-0:1.0: 8 ports detected [ 572.110707][T30985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.117809][T30985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.144236][T30985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.183797][T31087] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 572.209348][T30985] hsr_slave_0: entered promiscuous mode [ 572.215983][T30985] hsr_slave_1: entered promiscuous mode [ 572.222053][T30985] debugfs: 'hsr0' already exists in 'hsr' [ 572.227870][T30985] Cannot create hsr debugfs directory [ 572.268241][T31093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 572.287810][T31093] 8021q: adding VLAN 0 to HW filter on device batadv44 [ 572.296828][T31093] bond10: (slave batadv44): Enslaving as an active interface with an up link [ 572.387619][ T5491] Bluetooth: hci0: Frame reassembly failed (-84) [ 572.484902][T31105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8762'. [ 572.622880][T30985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 572.632151][T30985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 572.641582][T30985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 572.655012][T30985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 572.707232][T30985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.721593][T30985] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.734672][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.741867][ T7064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.754401][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.761629][ T9511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.770963][T31115] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8766'. [ 572.783455][T31115] xt_hashlimit: max too large, truncated to 1048576 [ 572.796668][T31115] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 572.876043][T30985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.046347][T30985] veth0_vlan: entered promiscuous mode [ 573.065870][T30985] veth1_vlan: entered promiscuous mode [ 573.090688][T30985] veth0_macvtap: entered promiscuous mode [ 573.099831][T30985] veth1_macvtap: entered promiscuous mode [ 573.111916][T30985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.130160][T30985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.144840][ T7064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.173381][ T7064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.188693][T31135] batman_adv: batadv0: Adding interface: ipvlan13 [ 573.195261][T31135] batman_adv: batadv0: The MTU of interface ipvlan13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.221135][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.231708][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.241694][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 573.251610][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.261554][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 573.271504][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.281533][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 573.291600][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.301499][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 573.311539][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.321415][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 573.331282][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.341203][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 573.351094][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.360957][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 573.370865][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.380746][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 573.390653][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.400506][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 573.410420][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.420318][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 573.430209][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.440171][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 573.450198][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.460122][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 573.470093][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.480045][T31135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 573.490082][T31135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.501514][T31135] batman_adv: batadv0: Interface activated: ipvlan13 [ 573.508952][T31137] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 573.519534][ T7064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.532472][T31141] bond_slave_0: entered promiscuous mode [ 573.538293][T31141] bond_slave_1: entered promiscuous mode [ 573.544211][T31141] batadv0: entered promiscuous mode [ 573.557976][ T7064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.569044][T31143] bond_slave_0: left promiscuous mode [ 573.574593][T31143] bond_slave_1: left promiscuous mode [ 573.580044][T31143] batadv0: left promiscuous mode [ 573.648139][T31153] serio: Serial port ptm1 [ 573.754554][T31161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8777'. [ 573.789129][T10885] IPVS: stop unused estimator thread 0... [ 573.864417][T31160] hub 8-0:1.0: USB hub found [ 573.875034][T31169] batman_adv: batadv0: Adding interface: ipvlan2 [ 573.881564][T31169] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.883469][T31160] hub 8-0:1.0: 8 ports detected [ 573.907177][T31169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.907200][T31169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.943699][T31169] batman_adv: batadv0: Interface activated: ipvlan2 [ 573.984482][T31172] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8782'. [ 574.127521][T31189] serio: Serial port ptm1 [ 574.235966][T31196] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8790'. [ 574.388207][T31195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8793'. [ 574.411950][T21936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 574.418192][T14134] Bluetooth: hci0: command 0x1003 tx timeout [ 574.419086][T31206] batman_adv: batadv0: Adding interface: ipvlan14 [ 574.430760][T31206] batman_adv: batadv0: The MTU of interface ipvlan14 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.456379][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.466896][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.476813][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 574.486963][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.496849][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 574.506816][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.516734][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 574.526666][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.536545][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 574.546487][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.556404][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 574.566359][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.576268][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 574.586152][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.596145][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 574.606860][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.616742][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 574.626747][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.636688][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 574.646768][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.656666][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 574.666630][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.676489][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 574.686491][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.696393][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 574.706385][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.716300][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 574.726341][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.736291][T31206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan13 [ 574.746354][T31206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.757875][T31206] batman_adv: batadv0: Interface activated: ipvlan14 [ 574.804607][T10335] batadv38: left promiscuous mode [ 575.242067][ T8334] Bluetooth: hci1: Frame reassembly failed (-84) [ 575.262530][T31225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8803'. [ 575.298930][T31226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31226 comm=syz.1.8803 [ 575.326859][T31225] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.334195][T31225] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.341656][T31102] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 575.415014][T31229] netlink: 'syz.1.8803': attribute type 10 has an invalid length. [ 575.431745][T31225] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8803'. [ 575.510364][T31234] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 575.537386][T31238] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.8807' sets config #0 [ 575.546719][T31238] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.8807' sets config #1 [ 575.562204][T31239] netlink: '+}[@': attribute type 13 has an invalid length. [ 575.570982][T31239] gretap0: refused to change device tx_queue_len [ 575.578027][T31239] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 575.596708][T31241] netlink: 'syz.1.8808': attribute type 1 has an invalid length. [ 575.612572][T31241] 8021q: adding VLAN 0 to HW filter on device bond15 [ 575.632840][T31241] bond15: (slave veth65): Enslaving as an active interface with a down link [ 575.652930][T31241] 8021q: adding VLAN 0 to HW filter on device batadv42 [ 575.662768][T31241] bond15: (slave batadv42): making interface the new active one [ 575.672195][T31241] batadv42: entered promiscuous mode [ 575.678019][T31241] bond15: (slave batadv42): Enslaving as an active interface with an up link [ 575.766456][T31255] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8814'. [ 575.782004][T31255] xt_hashlimit: max too large, truncated to 1048576 [ 575.816273][ T6500] Bluetooth: hci0: Frame reassembly failed (-84) [ 575.851497][T31262] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 575.860631][T31262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8817'. [ 575.870371][T31260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8816'. [ 575.879578][T31260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8816'. [ 575.893646][T10848] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.902855][T10848] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.911716][T10848] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.920952][T10848] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.937729][T31266] hub 1-0:1.0: USB hub found [ 575.942538][T31266] hub 1-0:1.0: 8 ports detected [ 575.980867][T31270] FAULT_INJECTION: forcing a failure. [ 575.980867][T31270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.994192][T31270] CPU: 1 UID: 0 PID: 31270 Comm: syz.1.8820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 575.994303][T31270] Tainted: [W]=WARN [ 575.994313][T31270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.994402][T31270] Call Trace: [ 575.994409][T31270] [ 575.994417][T31270] __dump_stack+0x1d/0x30 [ 575.994462][T31270] dump_stack_lvl+0x95/0xd0 [ 575.994490][T31270] dump_stack+0x15/0x1b [ 575.994515][T31270] should_fail_ex+0x265/0x280 [ 575.994554][T31270] should_fail+0xb/0x20 [ 575.994571][T31270] should_fail_usercopy+0x1a/0x20 [ 575.994592][T31270] _copy_from_iter+0xcf/0xe70 [ 575.994615][T31270] ? alloc_pages_mpol+0x217/0x260 [ 575.994727][T31270] copy_page_from_iter+0x178/0x2a0 [ 575.994830][T31270] tun_get_user+0x679/0x2670 [ 575.994886][T31270] ? ref_tracker_alloc+0x1f2/0x2f0 [ 575.994913][T31270] tun_chr_write_iter+0x15e/0x210 [ 575.994933][T31270] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 575.994958][T31270] vfs_write+0x52a/0x960 [ 575.994980][T31270] ksys_write+0xda/0x1a0 [ 575.995009][T31270] __x64_sys_write+0x40/0x50 [ 575.995082][T31270] x64_sys_call+0x2847/0x3000 [ 575.995104][T31270] do_syscall_64+0xca/0x2b0 [ 575.995135][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.995225][T31270] RIP: 0033:0x7fc7e5ade1ff [ 575.995239][T31270] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 575.995324][T31270] RSP: 002b:00007fc7e453f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 575.995408][T31270] RAX: ffffffffffffffda RBX: 00007fc7e5d35fa0 RCX: 00007fc7e5ade1ff [ 575.995422][T31270] RDX: 00000000000000be RSI: 0000200000000240 RDI: 00000000000000c8 [ 575.995439][T31270] RBP: 00007fc7e453f090 R08: 0000000000000000 R09: 0000000000000000 [ 575.995460][T31270] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 575.995472][T31270] R13: 00007fc7e5d36038 R14: 00007fc7e5d35fa0 R15: 00007ffe89bf8638 [ 575.995491][T31270] [ 576.365572][T31276] netlink: 'syz.3.8822': attribute type 1 has an invalid length. [ 576.381668][T31276] 8021q: adding VLAN 0 to HW filter on device bond11 [ 576.425123][T31276] bond11: (slave veth55): Enslaving as an active interface with a down link [ 576.450679][T31276] 8021q: adding VLAN 0 to HW filter on device batadv45 [ 576.461176][T31276] bond11: (slave batadv45): making interface the new active one [ 576.470893][T31276] batadv45: entered promiscuous mode [ 576.476687][T31276] bond11: (slave batadv45): Enslaving as an active interface with an up link [ 576.736248][T31286] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8826'. [ 576.747935][T31286] xt_hashlimit: max too large, truncated to 1048576 [ 576.791315][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 576.791336][ T29] audit: type=1400 audit(1767671459.810:44249): avc: denied { connect } for pid=31289 comm="syz.4.8828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 576.848205][T31294] hub 1-0:1.0: USB hub found [ 576.852997][T31294] hub 1-0:1.0: 8 ports detected [ 576.882575][ T29] audit: type=1326 audit(1767671459.900:44250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="syz.4.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 576.886650][T31296] netlink: '+}[@': attribute type 13 has an invalid length. [ 576.918715][ T29] audit: type=1326 audit(1767671459.900:44251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="syz.4.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 576.942732][ T29] audit: type=1326 audit(1767671459.900:44252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="syz.4.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 576.966406][ T29] audit: type=1326 audit(1767671459.900:44253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 576.987335][T31296] gretap0: refused to change device tx_queue_len [ 576.989992][ T29] audit: type=1326 audit(1767671459.900:44254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 577.018910][ T29] audit: type=1326 audit(1767671459.900:44255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 577.025913][T31296] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 577.042482][ T29] audit: type=1326 audit(1767671459.900:44256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 577.065663][T31300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31300 comm=syz.4.8831 [ 577.081788][ T29] audit: type=1326 audit(1767671459.900:44257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 577.117063][ T29] audit: type=1326 audit(1767671459.900:44258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31295 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f61afc8f749 code=0x7ffc0000 [ 577.153671][T10855] Bluetooth: hci2: Frame reassembly failed (-84) [ 577.284183][T14134] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 577.386911][T31303] netlink: 'syz.0.8833': attribute type 1 has an invalid length. [ 577.441994][T31303] bond13: entered promiscuous mode [ 577.449601][T31303] 8021q: adding VLAN 0 to HW filter on device bond13 [ 577.466401][T31307] 8021q: adding VLAN 0 to HW filter on device bond13 [ 577.474517][T31307] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 577.485341][T31307] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 577.498598][T31307] bond13: (slave wireguard0): making interface the new active one [ 577.506551][T31307] wireguard0: entered promiscuous mode [ 577.514614][T31307] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 577.529718][T31306] batman_adv: batadv0: Adding interface: ipvlan18 [ 577.536354][T31306] batman_adv: batadv0: The MTU of interface ipvlan18 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.561776][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.572376][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.582479][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 577.592374][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.602302][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 577.612184][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.622238][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 577.632185][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.642051][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 577.652000][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.661894][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 577.671837][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.681885][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 577.691883][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.701843][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 577.711920][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.721782][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 577.731664][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.741538][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 577.752171][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.762227][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 577.772254][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.782322][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan12 [ 577.792432][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.802326][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan13 [ 577.812956][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.822870][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan14 [ 577.832913][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.842772][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan15 [ 577.852745][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.852785][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 577.862655][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan16 [ 577.869177][T21936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 577.878624][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.878639][T31306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan17 [ 577.878658][T31306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.915786][T31256] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 577.924643][ T3392] ================================================================== [ 577.932740][ T3392] BUG: KCSAN: data-race in __mod_timer / __mod_timer [ 577.935010][T31306] batman_adv: batadv0: Interface activated: ipvlan18 [ 577.939450][ T3392] [ 577.939460][ T3392] write to 0xffff88811a260a80 of 8 bytes by task 31109 on cpu 1: [ 577.956463][ T3392] __mod_timer+0x5a1/0x840 [ 577.960924][ T3392] mod_timer+0x1f/0x30 [ 577.965035][ T3392] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 577.972277][ T3392] wg_packet_rx_poll+0x7f5/0x1160 [ 577.977350][ T3392] __napi_poll+0x5f/0x300 [ 577.981712][ T3392] napi_threaded_poll_loop+0x1ac/0x630 [ 577.987214][ T3392] napi_threaded_poll+0x164/0x200 [ 577.992267][ T3392] kthread+0x489/0x510 [ 577.996368][ T3392] ret_from_fork+0x149/0x290 [ 578.000998][ T3392] ret_from_fork_asm+0x1a/0x30 [ 578.005875][ T3392] [ 578.008218][ T3392] read to 0xffff88811a260a80 of 8 bytes by task 3392 on cpu 0: [ 578.015806][ T3392] __mod_timer+0x69/0x840 [ 578.020166][ T3392] mod_timer+0x1f/0x30 [ 578.024261][ T3392] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 578.031494][ T3392] wg_packet_tx_worker+0xeb/0x330 [ 578.036540][ T3392] process_scheduled_works+0x4ce/0x9d0 [ 578.042034][ T3392] worker_thread+0x582/0x770 [ 578.046653][ T3392] kthread+0x489/0x510 [ 578.050750][ T3392] ret_from_fork+0x149/0x290 [ 578.055386][ T3392] ret_from_fork_asm+0x1a/0x30 [ 578.060176][ T3392] [ 578.062543][ T3392] value changed: 0x0000000100006e27 -> 0x0000000100006fdc [ 578.069667][ T3392] [ 578.072023][ T3392] Reported by Kernel Concurrency Sanitizer on: [ 578.078200][ T3392] CPU: 0 UID: 0 PID: 3392 Comm: kworker/0:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 578.089631][ T3392] Tainted: [W]=WARN [ 578.093459][ T3392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.103535][ T3392] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 578.109667][ T3392] ================================================================== [ 579.204133][T21936] Bluetooth: hci2: command 0x1003 tx timeout [ 579.210280][ T5559] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 587.004005][T22203] batadv42: left promiscuous mode [ 587.564285][ T1965] batadv45: left promiscuous mode