last executing test programs: 40.742634257s ago: executing program 3 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0x21a02, 0x13a) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r1, r3, 0x0, 0x101) 38.114000438s ago: executing program 3 (id=197): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 36.73497015s ago: executing program 3 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0), 0x4) 36.649796106s ago: executing program 3 (id=205): syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 35.503529389s ago: executing program 3 (id=207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 32.930777496s ago: executing program 3 (id=217): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x141480, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000100)={0x2, 0x0, 0x8001, 0x8a7, 0x800, 0xccc7, 0x3}) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x800400, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES16=r4]) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 31.222853904s ago: executing program 32 (id=217): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x141480, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000100)={0x2, 0x0, 0x8001, 0x8a7, 0x800, 0xccc7, 0x3}) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x800400, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES16=r4]) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 13.187809447s ago: executing program 0 (id=276): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 11.074599617s ago: executing program 0 (id=283): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) r0 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 10.509722263s ago: executing program 1 (id=285): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x33, 0xb, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f00000001c0)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 9.373111404s ago: executing program 1 (id=288): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}, 0x8) 7.552308681s ago: executing program 2 (id=291): r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r5, @ANYBLOB="0500"/12, @ANYRES32, @ANYRESDEC=r1, @ANYRESOCT=r1], 0x20) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020}, 0xffffffffffffff5e) preadv(r6, 0x0, 0x0, 0x80000001, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xb0a82) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 7.551464002s ago: executing program 1 (id=300): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000)=@nullb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10da) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/132, 0x84) lseek(r0, 0xfffffffffffffffc, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}) 7.166959532s ago: executing program 0 (id=292): unshare(0x28000400) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6.830902709s ago: executing program 4 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000f000000000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r4, 0x18, 0x18000000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 6.130396126s ago: executing program 2 (id=294): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) capset(0x0, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x10000000, 0x0, 0x1}) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0xffff90f7, {0x2a12, 0x80010000, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x3, 0x10, "fe78fc179fd1e1dab6a7bd64c6a4b4e00d9683dda3af9ea80000000000000000000000deff0000000000000000080000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x3]}}) 4.992883677s ago: executing program 0 (id=295): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r6, &(0x7f0000000600)=""/60, 0x48) getdents64(r6, 0xfffffffffffffffe, 0x41) 4.991761098s ago: executing program 4 (id=305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 4.984028638s ago: executing program 2 (id=296): r0 = socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(r0, r0, &(0x7f0000000000)=0x2, 0x1422) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b", @ANYRESOCT=0x0], 0x0) 4.226971839s ago: executing program 1 (id=297): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) getpeername$unix(r1, 0x0, 0x0) 4.181895413s ago: executing program 4 (id=298): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010140) 3.988784758s ago: executing program 4 (id=299): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) 3.110917089s ago: executing program 1 (id=301): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) socket(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 2.117098769s ago: executing program 1 (id=302): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) r0 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.940463113s ago: executing program 2 (id=303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) 1.665558015s ago: executing program 4 (id=304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252100000009001f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.644385877s ago: executing program 0 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000f000000000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r4, 0x18, 0x18000000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 1.338872622s ago: executing program 2 (id=307): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) capset(0x0, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x10000000, 0x0, 0x1}) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0xffff90f7, {0x2a12, 0x80010000, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x3, 0x10, "fe78fc179fd1e1dab6a7bd64c6a4b4e00d9683dda3af9ea80000000000000000000000deff0000000000000000080000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x3]}}) 1.338543652s ago: executing program 4 (id=308): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000140)={0xa, 0x4e24, 0xd, @remote, 0xe}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000280)="f520", 0x2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000034000000190000090000000078"], 0x90}, 0x2000c800) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4048043) 363.185671ms ago: executing program 0 (id=309): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000cd7e3fa45209df0adedb5f15167a30b480c636b545491d7eaf7163d16ff118b2f0afda7f5489dd44aa402d8ab2fb4fd65474c598385d6fedb667ca51ea2ee936264d2426ec277721e6d94afc7f3cc5e87ff5030d931f33f0f2eef5f8b799868358ca9d065db10eaa4ef7378471a48f1a5103bd4c545f508db14cb7bf7be5886fe9772db57b3d12e33aed73a96bb864e27e451b39e1070e780c2bf0b236193c10ff81f567edcec42d590b59bf32215889c1e8434c0fb6197409d4359bf6a817c10ffafdc7bece912d574758b18809cb3b019e5303b161ace04517821d2f702a877811024c6d", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0xc9100120, 0x0, 0x0) gettid() r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x4000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvfrom(r6, &(0x7f0000000000)=""/6, 0x6, 0x2002, 0x0, 0x0) 0s ago: executing program 2 (id=310): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1, priority 10 [ 95.661403][ C0] sched: RT throttling activated [ 96.601823][ T1108] tipc: Node number set to 2886997007 [ 97.984079][ T4499] binder: 4495:4499 ioctl c0306201 200000000240 returned -11 [ 99.855276][ T4534] binder: 4533:4534 ioctl c0306201 200000000240 returned -11 [ 100.017591][ T4535] process 'syz.0.70' launched './file0' with NULL argv: empty string added [ 105.007498][ T4572] ======================================================= [ 105.007498][ T4572] WARNING: The mand mount option has been deprecated and [ 105.007498][ T4572] and is ignored by this kernel. Remove the mand [ 105.007498][ T4572] option from the mount to silence this warning. [ 105.007498][ T4572] ======================================================= [ 105.567302][ T4582] binder: 4581:4582 ioctl c0306201 200000000240 returned -11 [ 105.898492][ T4572] ODEBUG: Out of memory. ODEBUG disabled [ 108.601579][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.559053][ T4611] kexec: Could not allocate control_code_buffer [ 109.611528][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 109.739149][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.767482][ T7] usb 3-1: config 0 has no interface number 0 [ 110.622354][ T7] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.634852][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.666192][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.710481][ T7] usb 3-1: config 0 descriptor?? [ 110.739456][ T4621] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.797555][ T7] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.033116][ T7] usb 3-1: USB disconnect, device number 2 [ 111.181656][ T4626] binder: 4625:4626 ioctl c0306201 200000000240 returned -11 [ 111.358761][ T4629] Invalid ELF header magic: != ELF [ 111.415150][ T4629] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.983531][ T4658] binder: 4655:4658 ioctl c0306201 200000000240 returned -11 [ 114.001633][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.281700][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 115.459556][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.470552][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.481097][ T4226] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 115.490681][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.608787][ T4226] usb 5-1: config 0 descriptor?? [ 116.055392][ T4694] binder: 4693:4694 ioctl c0306201 200000000240 returned -11 [ 116.509646][ T4226] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 116.529767][ T4226] usb 5-1: USB disconnect, device number 2 [ 116.861650][ T4708] fido_id[4708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 119.361799][ T4738] binder: 4735:4738 ioctl c0306201 200000000240 returned -11 [ 121.659521][ T4757] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.813708][ T4766] capability: warning: `syz.1.145' uses 32-bit capabilities (legacy support in use) [ 123.531173][ T4760] Invalid ELF header magic: != ELF [ 123.539401][ T4760] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.572384][ T4766] capability: warning: `syz.1.145' uses deprecated v2 capabilities in a way that may be insecure [ 124.393758][ T4775] binder: 4774:4775 ioctl 4018620d 0 returned -22 [ 124.409037][ T4775] binder: 4774:4775 ioctl c0306201 200000000240 returned -11 [ 126.922376][ T4802] netlink: 64 bytes leftover after parsing attributes in process `syz.0.156'. [ 129.548415][ T4810] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.564955][ T4812] binder: 4811:4812 ioctl 4018620d 0 returned -22 [ 129.631843][ T4812] binder: 4811:4812 ioctl c0306201 200000000240 returned -11 [ 130.023903][ T4821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.164'. [ 130.602672][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 132.097111][ T4852] binder: 4849:4852 ioctl 4018620d 0 returned -22 [ 132.154190][ T4852] binder: 4849:4852 ioctl c0306201 200000000240 returned -11 [ 132.939258][ T4858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.426186][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.513681][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.247045][ T4891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.404653][ T4912] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.404653][ T4912] program syz.1.190 not setting count and/or reply_len properly [ 139.689911][ T4916] binder: BINDER_SET_CONTEXT_MGR already set [ 140.678256][ T4919] overlayfs: failed to resolve './file0': -2 [ 140.679032][ T4916] binder: 4915:4916 ioctl 4018620d 2000000002c0 returned -16 [ 141.485761][ T4914] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.529208][ T4916] binder: 4915:4916 ioctl c0306201 200000000240 returned -11 [ 141.647026][ T4923] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.555516][ T4965] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.634799][ T4965] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 146.278331][ T4978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.922684][ T4985] netlink: 64 bytes leftover after parsing attributes in process `syz.1.216'. [ 148.770922][ T4998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.127150][ T4435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.015321][ T4435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.285103][ T1324] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.414065][ T4435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.458334][ T5013] comedi comedi3: pcl726: a I/O base address must be specified [ 150.952629][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 150.977242][ T5021] binder: BINDER_SET_CONTEXT_MGR already set [ 151.031233][ T5021] binder: 5020:5021 ioctl 4018620d 2000000002c0 returned -16 [ 151.103636][ T5021] binder: 5020:5021 ioctl c0306201 200000000240 returned -11 [ 151.111467][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 151.168296][ T4435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.212514][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.230'. [ 152.034971][ T1324] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 152.055354][ T1324] usb 2-1: config 1 has no interface number 0 [ 152.061587][ T1324] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.071843][ T1324] usb 2-1: config 1 interface 105 has no altsetting 0 [ 152.118246][ T1324] usb 2-1: string descriptor 0 read error: -71 [ 152.138596][ T1324] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 152.164859][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.458477][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 152.464903][ T1324] usb 2-1: can't set config #1, error -71 [ 152.472482][ T1324] usb 2-1: USB disconnect, device number 2 [ 153.456661][ T5010] chnl_net:caif_netlink_parms(): no params data found [ 153.522665][ T1324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.888924][ T5053] device ipvlan0 entered promiscuous mode [ 154.148614][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.171594][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.231505][ T5010] device bridge_slave_0 entered promiscuous mode [ 154.716677][ T2282] Bluetooth: hci4: command 0x041b tx timeout [ 154.731576][ T1324] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 154.740156][ T1324] usb 2-1: config 0 has no interface number 0 [ 154.756831][ T1324] usb 2-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 154.858486][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.871480][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.880005][ T5010] device bridge_slave_1 entered promiscuous mode [ 154.926316][ T5076] binder: 5069:5076 unknown command 1074553619 [ 154.946751][ T5076] binder: 5069:5076 ioctl c0306201 200000000040 returned -22 [ 154.981684][ T1324] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6 [ 154.989105][ T5078] syz.4.242 uses obsolete (PF_INET,SOCK_PACKET) [ 155.010225][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.031264][ T1324] usb 2-1: Product: syz [ 155.045757][ T1324] usb 2-1: Manufacturer: syz [ 155.048521][ T5010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.060234][ T1324] usb 2-1: SerialNumber: syz [ 155.078001][ T1324] usb 2-1: config 0 descriptor?? [ 155.121809][ T5041] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.141281][ T5010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.181589][ T1324] usb 2-1: can't set config #0, error -71 [ 155.210860][ T1324] usb 2-1: USB disconnect, device number 3 [ 155.375617][ T5010] team0: Port device team_slave_0 added [ 155.621829][ T5010] team0: Port device team_slave_1 added [ 156.237066][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.292251][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.318394][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.425532][ T5010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.498280][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.539989][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.621419][ T5010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.742743][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 156.819583][ T5010] device hsr_slave_0 entered promiscuous mode [ 156.854264][ T5010] device hsr_slave_1 entered promiscuous mode [ 156.885312][ T5010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.937104][ T5010] Cannot create hsr debugfs directory [ 157.814567][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.860027][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 159.992223][ T4435] device hsr_slave_0 left promiscuous mode [ 160.172014][ T4435] device hsr_slave_1 left promiscuous mode [ 161.172808][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.851549][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.282450][ T5187] xt_policy: too many policy elements [ 164.114522][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.151481][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.174799][ T4435] device bridge_slave_1 left promiscuous mode [ 164.182632][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.234070][ T4435] device bridge_slave_0 left promiscuous mode [ 164.240670][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.301216][ T4435] device veth1_macvtap left promiscuous mode [ 164.326928][ T4435] device veth0_macvtap left promiscuous mode [ 164.540599][ T4435] device veth1_vlan left promiscuous mode [ 164.546693][ T4435] device veth0_vlan left promiscuous mode [ 165.695558][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.921132][ T4435] team0 (unregistering): Port device team_slave_1 removed [ 165.972074][ T4435] team0 (unregistering): Port device team_slave_0 removed [ 166.196514][ T4435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.601797][ T4435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.731456][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 166.888085][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 167.053441][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.081664][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.094154][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 167.106466][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 167.116744][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.787412][ T5235] comedi comedi3: pcl726: a I/O base address must be specified [ 168.431121][ T7] usb 5-1: config 0 descriptor?? [ 168.463046][ T4435] bond0 (unregistering): Released all slaves [ 168.674986][ T5227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.789124][ T5010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.830812][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.843861][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.867161][ T5010] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.929965][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.943245][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.959043][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.966447][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.006876][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.026409][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.107282][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.155604][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.163020][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.188680][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.410650][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.961731][ T7] usb 5-1: USB disconnect, device number 3 [ 170.262740][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.274969][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.284236][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.360624][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.414104][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.470601][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.542315][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.594466][ T5010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.369309][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.378193][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.960387][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.981798][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.321664][ T2282] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.673516][ T5010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.702525][ T2282] usb 3-1: Using ep0 maxpacket: 8 [ 175.821695][ T2282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 175.848073][ T2282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.907565][ T2282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.966365][ T2282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 176.003409][ T2282] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 176.031473][ T2282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.069362][ T2282] usb 3-1: config 0 descriptor?? [ 176.341700][ T4860] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 176.444126][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.460401][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.528994][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.547430][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.579937][ T5010] device veth0_vlan entered promiscuous mode [ 176.596920][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.617700][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.631546][ T4860] usb 5-1: Using ep0 maxpacket: 16 [ 176.654614][ T5010] device veth1_vlan entered promiscuous mode [ 176.731247][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.765873][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.782822][ T4860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.797344][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.804627][ T4860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.834293][ T4860] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 176.859430][ T4860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.900810][ T4860] usb 5-1: config 0 descriptor?? [ 176.940491][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.998255][ T5010] device veth0_macvtap entered promiscuous mode [ 177.040829][ T5010] device veth1_macvtap entered promiscuous mode [ 177.633800][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.659167][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.733828][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.778955][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.789166][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.800499][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.810416][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.821247][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.835344][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.861543][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.872020][ T4860] usbhid 5-1:0.0: can't add hid device: -71 [ 177.878049][ T4860] usbhid: probe of 5-1:0.0 failed with error -71 [ 177.887716][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.951035][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.962025][ T4860] usb 5-1: USB disconnect, device number 4 [ 177.973008][ T1108] usb 3-1: USB disconnect, device number 3 [ 178.012350][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.041464][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.058849][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.078856][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.102041][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.122012][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.144172][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.168659][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.200601][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.240950][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.272201][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.316096][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 178.329238][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.902235][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.910400][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.016094][ C1] [ 180.018953][ C1] ============================= [ 180.023895][ C1] WARNING: suspicious RCU usage [ 180.028762][ C1] 5.15.189-syzkaller #0 Not tainted [ 180.034043][ C1] ----------------------------- [ 180.038907][ C1] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 180.047301][ C1] [ 180.047301][ C1] other info that might help us debug this: [ 180.047301][ C1] [ 180.057587][ C1] [ 180.057587][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 180.065729][ C1] 4 locks held by syz.0.309/5383: [ 180.070778][ C1] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 180.080207][ C1] #1: ffff88801fb22148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: net_tx_action+0x6bc/0x870 [ 180.092297][ C1] #2: ffff88801fb22108 (&sch->q.lock){+.-.}-{2:2}, at: sch_direct_xmit+0x305/0x4a0 [ 180.101778][ C1] #3: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 180.111148][ C1] [ 180.111148][ C1] stack backtrace: [ 180.117136][ C1] CPU: 1 PID: 5383 Comm: syz.0.309 Not tainted 5.15.189-syzkaller #0 [ 180.125265][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.135447][ C1] Call Trace: [ 180.138868][ C1] [ 180.141757][ C1] dump_stack_lvl+0x168/0x230 [ 180.146487][ C1] ? show_regs_print_info+0x20/0x20 [ 180.152380][ C1] ? lockdep_rcu_suspicious+0x110/0x180 [ 180.158098][ C1] qdisc_lookup+0xa6/0x650 [ 180.162685][ C1] qdisc_tree_reduce_backlog+0x190/0x430 [ 180.168450][ C1] ? cake_dequeue_one+0x305/0x4e0 [ 180.173637][ C1] cake_dequeue+0x1b8f/0x4aa0 [ 180.178401][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 180.183457][ C1] ? cake_enqueue+0x7ee0/0x7ee0 [ 180.188458][ C1] qdisc_peek_dequeued+0x6e/0x1f0 [ 180.193529][ C1] tbf_dequeue+0x7d/0xce0 [ 180.197895][ C1] __qdisc_run+0x237/0x1480 [ 180.202452][ C1] qdisc_run+0x103/0x2f0 [ 180.206726][ C1] net_tx_action+0x6bc/0x870 [ 180.211434][ C1] ? process_backlog+0x780/0x780 [ 180.216407][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 180.221304][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 180.226827][ C1] handle_softirqs+0x328/0x820 [ 180.231714][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 180.236604][ C1] ? do_softirq+0x200/0x200 [ 180.241141][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 180.246410][ C1] __irq_exit_rcu+0x12f/0x220 [ 180.251137][ C1] ? irq_exit_rcu+0x20/0x20 [ 180.255806][ C1] irq_exit_rcu+0x5/0x20 [ 180.260230][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 180.266012][ C1] [ 180.268971][ C1] [ 180.272133][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 180.278172][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 180.284169][ C1] Code: be ff ff ff ff e8 ec be 54 08 85 c0 74 4a 4d 85 ff 75 66 0f 1f 44 00 00 48 89 df e8 36 29 5e 08 e8 21 71 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 99 10 fe ff 43 80 3c [ 180.306031][ C1] RSP: 0018:ffffc900030bf2c8 EFLAGS: 00000282 [ 180.312268][ C1] RAX: fbc188220dca6300 RBX: ffff8880b913a300 RCX: fbc188220dca6300 [ 180.320386][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 180.328471][ C1] RBP: 1ffff1101722760b R08: dffffc0000000000 R09: ffffed1017227461 [ 180.336469][ C1] R10: ffffed1017227461 R11: 1ffff11017227460 R12: 1ffff110172275b9 [ 180.344471][ C1] R13: dffffc0000000000 R14: ffff8880b913adc8 R15: 0000000000000000 [ 180.352495][ C1] finish_task_switch+0x12f/0x640 [ 180.357652][ C1] ? __switch_to_asm+0x34/0x60 [ 180.362537][ C1] __schedule+0x11c0/0x43b0 [ 180.367103][ C1] ? release_firmware_map_entry+0x190/0x190 [ 180.373118][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 180.379170][ C1] ? lock_chain_count+0x20/0x20 [ 180.384088][ C1] schedule+0x11b/0x1e0 [ 180.388288][ C1] schedule_timeout+0x97/0x280 [ 180.393096][ C1] ? console_conditional_schedule+0x40/0x40 [ 180.399040][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 180.404154][ C1] ? rcu_lock_release+0x9/0x20 [ 180.409267][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 180.414998][ C1] unix_wait_for_peer+0x1e5/0x2e0 [ 180.427180][ C1] ? unix_find_other+0x820/0x820 [ 180.434225][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 180.440253][ C1] ? init_wait_entry+0xd0/0xd0 [ 180.445610][ C1] ? __rwlock_init+0x140/0x140 [ 180.451275][ C1] ? skb_copy_datagram_from_iter+0x5ea/0x6a0 [ 180.458832][ C1] ? bpf_lsm_unix_may_send+0x5/0x10 [ 180.464376][ C1] unix_dgram_sendmsg+0x106f/0x1890 [ 180.470733][ C1] ? unix_dgram_poll+0x660/0x660 [ 180.476106][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 180.483285][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 180.483557][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.488552][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 180.501572][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 180.508092][ C1] ? unix_dgram_poll+0x660/0x660 [ 180.513340][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 180.518151][ C1] ? memset+0x1e/0x40 [ 180.522167][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 180.527370][ C1] ? rcu_is_watching+0x11/0xa0 [ 180.532179][ C1] ? import_iovec+0x6f/0xa0 [ 180.536741][ C1] ___sys_sendmsg+0x1f0/0x260 [ 180.538984][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.541465][ C1] ? __sys_sendmsg+0x250/0x250 [ 180.541529][ C1] ? __might_fault+0xb3/0x110 [ 180.541553][ C1] __sys_sendmmsg+0x27c/0x4a0 [ 180.541582][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 180.541612][ C1] ? __context_tracking_exit+0x4c/0x80 [ 180.574710][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 180.580741][ C1] ? lock_chain_count+0x20/0x20 [ 180.585638][ C1] ? vtime_user_exit+0x2dc/0x400 [ 180.590636][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 180.591256][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.595523][ C1] do_syscall_64+0x4c/0xa0 [ 180.595551][ C1] ? clear_bhb_loop+0x30/0x80 [ 180.595571][ C1] ? clear_bhb_loop+0x30/0x80 [ 180.595592][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.595615][ C1] RIP: 0033:0x7ff48174fbe9 [ 180.595636][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.595654][ C1] RSP: 002b:00007ff47f9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 180.655520][ C1] RAX: ffffffffffffffda RBX: 00007ff481976fa0 RCX: 00007ff48174fbe9 [ 180.663540][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 180.671555][ C1] RBP: 00007ff4817d2e19 R08: 0000000000000000 R09: 0000000000000000 [ 180.679562][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.681946][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.687740][ C1] R13: 00007ff481977038 R14: 00007ff481976fa0 R15: 00007fff27ba2058 [ 180.687777][ C1]