last executing test programs: 29.812145571s ago: executing program 0 (id=162): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="8d9ee7d9f15e817df0a261db09f2c767ec3378f81b98677c7605202d620b2462f8687b322e62a7997b4d47ef08ffff044a54dacc79fae8f460a4b8a21a33e4aa9f0c7672752f7a947b5a8322731e", 0x4e}], 0x1}, 0x200000c1) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 28.362197611s ago: executing program 0 (id=167): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0300000000000000000000011000"], 0x0, 0x4e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'pimreg1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/172, 0xac}], 0x2, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/199, 0xc7}, {0x0}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {0x0}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/126, 0x7e}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/203, 0xcb}], 0x9}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b00)=""/87, 0x57}, {&(0x7f0000002b80)=""/226, 0xe2}, {0x0}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x6, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)) 26.667468254s ago: executing program 4 (id=169): syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0xa, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000000), 0x6b) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[], 0x0) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32) 26.665554059s ago: executing program 2 (id=170): syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905820920"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000c40)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/34, 0x22) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="0000000000feff00", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) 26.664558327s ago: executing program 0 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x40, &(0x7f0000000400)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES64=r5, @ANYRES64, @ANYBLOB="4f9767b65793e5"]) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}, {0x11c, 0xf, 0x9e, 0xffffffff}]}) (async, rerun: 64) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) (async, rerun: 64) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) (async, rerun: 64) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 25.608345593s ago: executing program 2 (id=176): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000380)=0x14) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 25.217524786s ago: executing program 4 (id=177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="8d9ee7d9f15e817df0a261db09f2c767ec3378f81b98677c7605202d620b2462f8687b322e62a7997b4d47ef08ffff044a54dacc79fae8f460a4b8a21a33e4aa9f0c7672752f7a947b5a8322731e", 0x4e}], 0x1}, 0x200000c1) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 24.413390731s ago: executing program 1 (id=179): syz_emit_ethernet(0x34, &(0x7f0000000080)={@link_local, @link_local, @void, {@arp={0x806, @generic={0x300, 0xf5, 0x6, 0xc, 0x3, @multicast, "9f6ba3e80dd5debd7848ee9c", @empty, "97bba78d278b"}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0x2d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r5}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r7, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x1d, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7d, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6f, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x5b, 0x0, @opaque="edf1df4edc119cb3d0b8ad66bf21898f56dea225ccb2d8ed7e491f7a300b0b38fe69e2910f6158f4cf4d2bf792d3758d8173e85e1bf7fa7eeba490c2cf30bb231e806bfabcabdc0213d969b0b9434fa01623fc"}}}}}, 0x0) 24.293059526s ago: executing program 2 (id=180): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='8', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20004001}}], 0x1, 0x4040091) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 24.205506911s ago: executing program 3 (id=181): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xd, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed0000103afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000180000fd00000000000000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = io_uring_setup(0x719b, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x109}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f0000000000)="f74d", 0x2) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x20000080) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfa}}]}, 0x6c}}, 0x0) 23.326742813s ago: executing program 2 (id=182): openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x1, 0x152) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{0x40, 0x0, 0x0, 0x13}, 'syz0\x00', 0x15}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0xffffff37, 0x8, 0x13, 0x1, 0x22}, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4ea0, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x3, 0x32}, 0x9c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x400000cb, 0xfff8, 0x300, 0x1ff, 0x89}, 0x9c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 22.739402066s ago: executing program 3 (id=183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) userfaultfd(0x80001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 22.277606796s ago: executing program 0 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@private2, 0x0}, &(0x7f00000001c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000080)='GPL\x00', 0xab42, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x1b, r4, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xf, 0x8, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x6, 0x4}, {0x3, 0x3, 0x8, 0x1}, {0x4, 0x4, 0xb, 0x6}, {0x0, 0x3, 0xc, 0x5}], 0x10, 0xdd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 22.113016541s ago: executing program 3 (id=185): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000057c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) inotify_init() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010003704000000451b2fc02f287eb1948ea1a9edac6f00ff4f3445b000000078e48df1c947277ea826aa9b8620d4b4a535a9d72a078f65860fe056da72a26c82cf18bcffaf814ab194a1fb7cb8abf5bb03a56b1ed3a87bf6f02f1c1ec9047a2ce8d69bdbd9b7b343245ad1cfe7a50c5acdb491bd2263ffffffff3d90e83447b2118f4ff92630e0c8de8eef57658ae44ae55b5bcaafef19fd10a21a80945eac8d8815ee88e940d9218963883ea27379dcda371c5878fe865714393dbb115f4512b8ee09545e6e5ec70e2d1f611b086afe12a6725ebcc49bbf13572ff64b1fe24fa92bc2bb19117e74e60066fc4db0ef", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000a2140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000500)="d745d95b52de617f9fd73938f82a68a3a18edea8b1b64d85781ac25c5c4ae1fea98b039f6a2d067b334d58ea04bafbb101696619fe0ca39c8d455eaef19f6fee64b159002687decd58182985f6c952569761b8bbeea68950be02b83711ef157689476b9e10fabe49ff6012595738d8a6731f325e9e55eea7836b723907aac7650d0b1dd4294492eac65506c691ea1ff69de4ccac0f421b442bb71725ae4fec90f0b7e17226556c2c6a559388b3f686e0c14594cc2d8d82f19556e9944e9d58e7ff3dfb9589715ad6e5cf142a1fbe36ae36a1", 0xd2}, {&(0x7f0000000040)="ee1baf60c458003b085e2e66316cb0c42b7c14f69b7c20e220bb4ae8721c2bdd7d6ea69179bcc095b8a83994bb3a005dc4a76201c2a64aeab36e", 0x3a}, {&(0x7f00000000c0)="edff06ed648153547c6fe1d05500272e6fcb66c232ee1d8acaf8cea374e98e0e12127fc007791e9fcf2702c0b9aa324c1afabbf9885b47820162535dbe4296e0a84a3042a5a8d1d344115b91a42b0d4ba4dc15c07670", 0x56}, {&(0x7f0000000200)="85eba2ad38d96b6945274d8aa77e471224e8a731ffd654e710ec8dac533267b558149505222fbcfb36d239e7ac6a5bb3b35419ff0d7e8624a5ce99a6a382cd2b9102898708e968b667ca3b8fa9e87cb4d99a6be5f23520b3f3933cba", 0x5c}, {&(0x7f0000000600)="5f547ea3fc99d8c79d1dce8246316be4e1bad34a81f2c8481f32863a5518fd10b3f2dfd223dcfa846346d0c41ec928cc251161f1480276380acb3d827b3619ef35805b54cbff698a075ae3ad5d2928384dcbced0f247a1442db59b152fc23146db85d4075b915f56866430b73746ac2090ae1af78cdaa44990a115e1365174af0c0a1ea7c6d33b45fd70248f9a1c88acdfc207df2f96876f3bfa2891c2457f0b0b3c3cc43545baecf356936346ee8bb927", 0xb1}], 0x5, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6fc}}], 0x18}}], 0x1, 0x80) 22.034170524s ago: executing program 0 (id=186): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="71150000000300000000000000000100626174616476000004bbbbbbbbbb0000"], 0x40}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x14, 0x46, 0x2d, 0x8, 0x1ac7, 0x1, 0x31a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xae, 0x9, 0x40, 0xc, [{{0x9, 0x4, 0xcd, 0x8, 0x1, 0xbb, 0x83, 0x29, 0x10, [], [{{0x9, 0x5, 0x97f80edbd55801bd, 0x0, 0x3ff, 0x4, 0x40, 0x8}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0204"]}, {0x5a, &(0x7f0000000080)=@string={0x5a, 0x3, "cce20f67c1c75408815e682a31df16210082250ca9af6f4679f5064eb3a858fe304aa2b9d70b94299310ca1060a3e1d41b73bc6660981a41465d63ea68d29940e82f1b18965f584d06e656c6551ca6f8d344c8d5830f22e3"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x82c}}]}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) syz_usb_control_io$printer(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 21.813891625s ago: executing program 1 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x6, 0xfffffffc) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x1, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) r4 = dup(r3) r5 = syz_io_uring_setup(0x10e, &(0x7f0000001480)={0x0, 0x4008d2dc, 0x400, 0xfffffffd, 0xd6, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x9b75afb5ec72a6b8) 21.397327758s ago: executing program 2 (id=188): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000001c0)=0x2) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x2a, 0xbe, 0x1, 0x5, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000280)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x20008045) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 21.391703412s ago: executing program 1 (id=189): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x1, {0xffffffffffffffff}, {0xee00}, 0x8001, 0xffffffff}) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r3, r2}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0040000c0002007e6c383032313100"], 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x8000000, 0xfc, &(0x7f0000000480)=""/252}, {0x1, 0xf, &(0x7f0000000240)=""/15}]}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000003c0)={0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x10, 0xb, {}, {0x5, 0x8, 0x0, 0xb, 0x3, 0x10, "6e4f3cf2"}, 0x101, 0x1, {0x0}, 0x6}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 21.333354117s ago: executing program 4 (id=190): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syslog(0x2, 0xffffffffffffffff, 0x4b) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 21.263940799s ago: executing program 4 (id=191): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 20.43745202s ago: executing program 3 (id=192): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000380)=0x14) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 20.240698276s ago: executing program 4 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtaction={0x164, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x150, 0x1, [@m_skbmod={0x14c, 0x8, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfff, 0x6, 0x4, 0x5, 0x61}, 0x2}}]}, {0xfb, 0x6, "9e3432df36c8b7f0f6e565bc3539692832186ad5721f1daec77e65cf34cf75475a4c22f5e3b3b7b42528fb8b24bf7ff01c5f3e122a04c3a4005d6699b1c9214abddccd2868129d8071b540676651dcd2b726b80c81e527758e2284f28f04e37308295d22ddb184425962095609baf72e42d38d7bb47e127cba5803da6845050fe4b224e33b2f55c4973749675c33aab337776672ac8f2ccf7a61f45bf5c62600945b957283e83f57e54e1239c5eeef24fd6eb040dca46c976e3006982dda8c821d8af5f735af24409a7b45d2aa2ff7b11c0f9af0f36d9003215b4769ff3437ad898f8e216854514e882cfdc3bc31ecc4f392ba58e35bba"}, {0xc}, {0xc, 0x8, {0x2, 0x4a53ef52045dc47e}}}}]}]}, 0x164}, 0x1, 0x500}, 0x8000) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 19.504107744s ago: executing program 3 (id=194): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) lseek(r0, 0x9, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000100)={0x20000001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7f, 0x4, {0x0}, {0xee00}, 0x8, 0x1ff}) sched_setscheduler(r5, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 18.945311127s ago: executing program 1 (id=195): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000500)=ANY=[@ANYBLOB="0001", @ANYRES32]) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x1, 0x0, 0x200003fc, 0x0, 0x32}, 0x9c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000000000009417374c0753eeae96bd9e18f9587e932f070752c2c50eea5fdca27e4863715d8e194873c541b0cfaea02c6bfa194501071d4daab110115d45b1fb417134001299a8eea3e6c57e9cca3eff66b32eb46b34bf7683c2bf618a43b96a14413bffde2aeff86dd0ff627558a3e618e1f38aa82dd6270e530a6fc479c1f067314eba672d45b696d9b7ac3a0480090ddbcbd1bde3e96fb9047af9d5e71e594155e16bc0168ebd006dca90ab4f621a074a1dab8a6add5cd62575f63973bb1b78e96290a65c8ba2f2f07d997759dfc5f8c19f037675b5c5b60b1abd0000000002e0d0d3a9e66b0c9cae1036f660906723dc54b4a07d12529aacb1"], 0xc, 0xfffffffffffffffe) r5 = add_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = dup(r6) getsockopt$inet6_buf(r7, 0x29, 0x32, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000500)=@v1={0x1000000, [{0xa6b5, 0xa}]}, 0xc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802eff"], 0x20}], 0x1}, 0x300) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)="1f", 0x1, 0x48600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 18.46818905s ago: executing program 3 (id=196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) userfaultfd(0x80001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 18.061265525s ago: executing program 0 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) pwritev(r4, 0x0, 0x0, 0x80000000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) memfd_create(0x0, 0xe) (async) socket(0x2b, 0x1, 0x0) (async) r5 = syz_io_uring_setup(0x5bb2, &(0x7f00000006c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000007e7bb8dec2e1febc2c9d58fc0000000000000008060000000000000000000000000000007f000001000000000000000000000000fc0100000000000000000000000000000002000002ffffffff000000000000000007001900000000000a"], 0xb8}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, 0x0, 0x0, 0xc}, 0x94) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000019080102000000000000000007000005"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040010) 17.648937405s ago: executing program 2 (id=198): openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x583001) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x700, 0x10, 0x4, 0x4, {{0x11, 0x4, 0x0, 0x2c, 0x44, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xc1, [@broadcast, @multicast2, @broadcast]}, @generic={0x86, 0x9, "68d08cb2ae11ff"}, @lsrr={0x83, 0x13, 0x61, [@dev={0xac, 0x14, 0x14, 0x2e}, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x18, 0xa}, {0x10}, {0x1, 0x9}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048c84}, 0x44) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r5, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000000240)) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/178], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001800bb7e28bd8003fe00fd06000900"/28], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x20000000) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r8 = syz_open_dev$hidraw(0x0, 0x0, 0x14a042) r9 = dup(r8) ioctl$HIDIOCGUSAGES(r9, 0xd01c4813, &(0x7f0000000900)={{0x2, 0x100, 0x8, 0x6, 0x8b, 0x3}, 0x38, [0x10001, 0x9e0, 0x2, 0x3, 0x5, 0x8, 0x3, 0xffff9ebb, 0x3, 0x32, 0x200, 0x7, 0x80000000, 0xffffffff, 0x58e, 0x2, 0x5, 0x400, 0x5, 0x6, 0xa0f3, 0x3, 0x5, 0x891, 0x5, 0x5, 0x75d, 0x5, 0x3, 0x4, 0x7, 0x8, 0x7, 0x200, 0x1, 0x436b, 0x8001, 0x4, 0x1, 0x4a61, 0xe, 0x9646, 0x9188, 0x1, 0x7, 0x8, 0xd, 0x4, 0xeb2b, 0x1e6, 0x9, 0x1, 0x3, 0xffff, 0x5, 0x7, 0x80, 0x8, 0x2, 0x400, 0x400, 0x772, 0x5, 0xae9, 0xf, 0x43, 0x4, 0x7, 0x7, 0xe3d2, 0x0, 0xd95, 0x9e5, 0x0, 0x7, 0x3, 0xcc22, 0x5, 0x6, 0x1, 0x0, 0x0, 0xb203, 0x4, 0x6, 0x3, 0x80000001, 0x101, 0x2, 0xcf8, 0x39e3, 0x2, 0x100, 0x6884, 0x10000, 0x6c, 0x0, 0x10, 0x8001, 0x8000, 0x100, 0x1c0000, 0x1b8, 0x200, 0x2, 0x5, 0x64d, 0x9, 0x9, 0x3, 0xe6, 0x9, 0x9, 0xfffffffa, 0xfffffffc, 0x5, 0x2d6a, 0x53, 0x8, 0x1, 0x9, 0xffffffff, 0x2, 0x9, 0x9, 0x8, 0x49ee, 0x0, 0x5, 0xfffffff7, 0x1, 0x5, 0xc00, 0x9, 0x400, 0x200, 0x7, 0x1, 0x5, 0x6, 0xcca2, 0x0, 0x2, 0x400, 0x3, 0x4d, 0x5, 0x1369ff6c, 0x1, 0x5, 0x0, 0x7, 0xfffffffd, 0x1000, 0x2800, 0x59, 0x32, 0x1, 0x7, 0x3, 0x4, 0x0, 0xffffffc0, 0x7, 0xa9d4, 0xa9, 0xfffffffc, 0x7bb5, 0x1, 0x40, 0x3, 0x2, 0x0, 0x8, 0x7ff, 0x6, 0x8, 0x3, 0x9, 0x5, 0x100, 0xffff, 0x7, 0x1, 0x6, 0xffffd117, 0x200, 0xfffff800, 0xb, 0x6, 0x1, 0x10, 0x17f, 0x1, 0x9, 0x15, 0x8, 0x3, 0xfffffbff, 0x57e, 0x7ff, 0x4, 0x200, 0x0, 0x6, 0x7, 0x101, 0x5, 0x7, 0x6, 0x7, 0x139, 0x3, 0x8, 0xfffffffc, 0x401, 0x44, 0x80000001, 0x47f, 0xb, 0x9, 0x80, 0xfffffffc, 0x6, 0x8, 0x0, 0x3, 0x5, 0xffffffff, 0x6, 0x7, 0x6, 0x1, 0x5, 0x6, 0x1, 0x3, 0x7f, 0x0, 0x5, 0x7, 0x6, 0x3, 0xfff, 0x8000, 0x80, 0x2, 0x7, 0x0, 0x0, 0x8, 0x1, 0x9, 0xffffffff, 0x80000001, 0x8, 0x6, 0x9, 0x7, 0x1, 0xfc01, 0x9, 0x40, 0x5, 0x9, 0xc, 0x4, 0x1, 0x0, 0x7b20, 0x2, 0x7, 0x9, 0x401, 0x3, 0x7, 0x0, 0x80, 0xffff, 0x679, 0x3, 0x800, 0x2, 0x29e1f798, 0x9, 0x40, 0xffff, 0x5, 0x4, 0xfffff61e, 0x6, 0xffffffff, 0xf, 0x8, 0x3, 0x0, 0x5, 0x7fffffff, 0x81, 0x1, 0x7, 0x4e, 0x6, 0x0, 0x100, 0x7, 0x5, 0x0, 0x1, 0xc, 0x4, 0x8, 0x2, 0x4, 0x2, 0x6, 0x9c15, 0x9, 0x1, 0x2, 0x3e3, 0xfffffffe, 0x40, 0xb5, 0x40, 0xfffffe01, 0x2, 0x3, 0x8, 0x2, 0x42, 0x6000000, 0x7, 0x6, 0xbe, 0x8, 0x1, 0x6, 0x9, 0x7ff, 0x793, 0x40, 0x1, 0x2, 0x691b89e0, 0x0, 0xd016, 0x7335, 0x401, 0x3, 0x2, 0x7, 0x8001, 0x8, 0x4, 0x4, 0x6, 0x890, 0x85a, 0x1000, 0x1, 0x1000, 0x1, 0x7fff, 0x4, 0xb, 0x8, 0x7f, 0x2, 0x10, 0x4, 0x6, 0x0, 0x0, 0x2, 0x9, 0xca3, 0x400, 0xd87a, 0x9, 0xfffffff0, 0x2, 0x3, 0xd20, 0x6, 0x9, 0x9, 0x5c7f, 0x3, 0x8, 0x4, 0x7, 0xfffffffb, 0x3, 0xa, 0x4, 0x0, 0x5, 0x1, 0x400, 0x7fffffff, 0x101, 0xf, 0xcf56, 0x4, 0x8001, 0xfff, 0x81, 0x401, 0x8, 0x9, 0x1, 0x7, 0x5, 0x2, 0x8, 0x3a, 0x5, 0x81, 0x8, 0x100, 0x6, 0x200, 0xbbd, 0x9, 0x8, 0x1000, 0x4d347dc9, 0x9, 0x12, 0x22, 0x80000000, 0xff, 0x3, 0x7, 0x8255, 0x7, 0x8, 0x2, 0x6, 0xe, 0x5, 0x1, 0x9, 0x2, 0x3, 0x0, 0x7fffffff, 0x7, 0x70f, 0x8, 0xfffff8d0, 0x1, 0x1, 0x5, 0xfffffffb, 0x6, 0x6, 0x3, 0x1, 0x800, 0xc0000000, 0x14, 0x647, 0x1ff, 0x100000, 0x3, 0xf5f, 0x2, 0x0, 0x1, 0x3ff, 0x8, 0x0, 0x4, 0x89, 0x7, 0x2, 0x4, 0x200, 0x5, 0x100, 0xbf5b, 0x6c, 0x2, 0x3f2, 0xfffffff8, 0xebf1, 0xfffffff7, 0x7, 0x2, 0x4, 0x7fffffff, 0x800, 0x0, 0x6, 0xdc2e, 0x6, 0x3000, 0x6, 0x966, 0x4, 0x80000001, 0x40, 0x4, 0x0, 0x5, 0x40000000, 0x0, 0x1b4, 0x3, 0x81, 0x1ff, 0x3ff, 0x0, 0xff, 0xfff, 0x8, 0x80000000, 0x9, 0x3, 0x10000, 0x1ff, 0x6, 0x5, 0x7fff, 0xfffffff7, 0x5, 0x5, 0x6, 0x1, 0x5, 0x3ff, 0xafa, 0x0, 0x1, 0x4, 0xf8, 0x1ff, 0x0, 0x2, 0xa, 0x91700000, 0x7, 0x100, 0xe, 0x0, 0x400, 0x9, 0x8, 0xff, 0xff, 0x2, 0x9, 0x3, 0x5, 0x8, 0xa, 0x1, 0xd, 0x40, 0x3, 0x2, 0x8000, 0xf31, 0x2, 0x3800, 0x1, 0x6, 0xfffffff8, 0x35, 0x7, 0x3ff, 0x80, 0x8, 0x28, 0xd9, 0x0, 0xff, 0x825, 0x0, 0xffffffe5, 0x3, 0x2, 0x8b, 0x0, 0x0, 0x9, 0x8, 0x6, 0x5, 0x4, 0x4, 0x11a, 0x4, 0xdf1, 0x6, 0x0, 0xfffff7e7, 0x7f, 0x1, 0x101, 0x0, 0x5, 0x3, 0x1ff, 0x2, 0x1, 0x3, 0x8, 0x4, 0x6, 0x6, 0x5, 0x0, 0xb, 0xa, 0xda, 0x1, 0x8bd3, 0x3, 0x8eb, 0x3, 0x8, 0x4, 0x730e, 0x1, 0x8001, 0x8, 0xb, 0x7, 0x800, 0xe, 0x27a, 0x8001, 0x8000, 0x1, 0x0, 0x4, 0x80, 0x800, 0xfffffcce, 0x1, 0x1, 0x5, 0x8, 0x7, 0x9, 0x1, 0x5, 0x2, 0xd, 0x7, 0xe46, 0x5, 0x81, 0x1, 0xfffffffe, 0x401, 0x5, 0x7476, 0x80, 0x8, 0xfffffffa, 0x6, 0x3cd1d30c, 0x6, 0x9, 0x8, 0x2, 0x80000001, 0x715, 0x0, 0x6, 0x5, 0xfffffffe, 0x10000, 0x800, 0x1, 0x3, 0x6371, 0x5, 0x27, 0x6, 0xffff, 0x8, 0x8, 0x2, 0x33, 0x10000, 0xe, 0x6, 0xf, 0x40, 0x62, 0x4, 0x0, 0x0, 0x8001, 0x404000, 0x0, 0x5, 0xa76, 0x0, 0x133, 0x6, 0xfffffff5, 0x80000001, 0x5, 0x2, 0x1e84, 0x2, 0xd683, 0xffff7fff, 0x1a, 0x0, 0x4, 0x9, 0x8, 0xf30, 0x1000, 0xffff, 0x1, 0x5, 0x7, 0x5, 0x70, 0xdd6, 0x2, 0x5, 0x3, 0x3, 0xd768, 0x6, 0x80000001, 0x4, 0x9, 0x400, 0x6, 0x5, 0x3, 0x7, 0x6, 0x1, 0xfffffe01, 0x1, 0x56a, 0x8, 0x1, 0x6, 0x7, 0x4, 0x5, 0xffff3373, 0x1000, 0x1, 0x7, 0x0, 0xde, 0x6, 0x7, 0x6, 0x3ff, 0x0, 0x0, 0x3f, 0x7f, 0x676, 0x7fffffff, 0xeef2, 0x4, 0x7, 0xf, 0x6b89, 0x3, 0x3, 0x0, 0x58, 0xe09, 0x7, 0xfff, 0x100, 0x80000001, 0x3, 0x5ed13e6, 0x6, 0x240e, 0x23530000, 0x7, 0x800, 0x4, 0x0, 0x7, 0x80, 0x2, 0x3, 0x10001, 0xd21, 0x40b, 0x5, 0x5, 0xa, 0x9, 0x9, 0x3, 0x0, 0xb, 0x5162, 0x400, 0x9, 0x55, 0x4, 0x1, 0x3, 0x5, 0x1, 0x3, 0x3, 0x4, 0x7, 0x7, 0x81, 0x7fffffff, 0x6, 0x1, 0x9, 0x3, 0x0, 0x8, 0xb, 0x3, 0xd9, 0xfff, 0xffffffff, 0x67c5, 0x8, 0x6, 0x7, 0x3, 0x3, 0x8, 0x3, 0x5, 0x1, 0x7, 0x80000001, 0x2, 0x6, 0x40000000, 0x2, 0xffffffff, 0x0, 0x5, 0x8, 0x5, 0x9, 0x0, 0x4, 0x1f, 0x400, 0x8748, 0x1, 0x80000001, 0x10, 0xe, 0x541f, 0x400, 0x95c0, 0x3, 0x6, 0x66193156, 0x5, 0xa45, 0x4, 0xa, 0x5, 0x8001, 0x4, 0x0, 0x13286ba2, 0x5, 0x7, 0xb6, 0x431b3201, 0x2, 0x6, 0x8000, 0x4, 0xa161, 0x1, 0x6, 0x8, 0x20f, 0x1, 0x2, 0x7, 0x3, 0xfff, 0x101, 0x6, 0xc, 0xfffff623, 0x7, 0xdc1, 0x281, 0x8, 0x113, 0x401, 0xfffffffe, 0x163, 0x369, 0x4107, 0x7fff, 0x3, 0x80, 0xa2, 0x2, 0x4, 0xfffffff7, 0x5, 0x3, 0x1000, 0xe, 0x2, 0xbe, 0x7f, 0xffffffd2, 0x800, 0x2, 0x1, 0xfffffff9, 0xf6, 0xe0, 0x2, 0x6, 0x8001, 0x3, 0x979b, 0x8, 0x0, 0x3, 0x2, 0x6, 0x5b, 0xf, 0x1, 0x7, 0x0, 0x6, 0x86, 0x6, 0x9, 0x7ff, 0x4, 0xf, 0x6, 0x1, 0x5, 0x1, 0x4, 0x2a45, 0xe, 0x2, 0xfffffffc, 0x0, 0xffff, 0x7f, 0x9, 0x4, 0x0, 0xfffffffa, 0x0, 0x1, 0x3f, 0x2, 0x2, 0x4, 0x1, 0x9b04, 0x8, 0x1, 0x26a70f05, 0x8, 0x9, 0xb71, 0x4, 0x9, 0x4a, 0x2, 0x10, 0x0, 0xfffffffb, 0x7, 0x7, 0x1bf, 0xba9, 0x1, 0x1, 0x9, 0x9, 0xf95, 0x1, 0x3, 0x6, 0xffffffff, 0x8, 0x79721913, 0xfff, 0x5c0, 0x0, 0xc4b, 0x3, 0x10, 0x400, 0x6, 0x3, 0x6, 0x6776, 0x400, 0x4, 0x47, 0x70, 0x1, 0x3]}) 17.554715414s ago: executing program 1 (id=199): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)="1a1f426bbae5", 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8000, 0x101, 0x7, 0x8000000000000000, 0x9}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x47) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRES64, @ANYRES16]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000100), 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/73, 0x49) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') (async) syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x800, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) (async) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, &(0x7f00000001c0)) (async) pread64(r5, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) 17.407004815s ago: executing program 4 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xea}, 'port0\x00', 0x5a, 0x131477, 0xb, 0x3, 0x1, 0x0, 0x0, 0x0, 0x2, 0xc}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000300)={0x800080, 0x810000, 0x1, 0x5, 0xfd, 0xe}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtfilter={0x3dc, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3a8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_MATCHALL_ACT={0x37c, 0x2, [@m_tunnel_key={0x104, 0x9f, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x60, 0x6, "a88ebc91cdfe762a0b4e14087af8da00beb7679109902e96a44b2561ed72837b93117f268af89c25b9562b7c74a7d9184aab147f65585edbd97925661dc1a87a1427f6b8af28625bd9c195e087e0bda31e83bccd1a0d5b01852540ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1c0, 0xe, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x20000002, 0xc00000, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbe5, 0x62ffe7f1, 0xffffffffffffffff, 0x2, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff0000, 0xd6d, 0x20000000, 0x1a84, 0xc35}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe, 0x9, 0xfffffffffffffff4, 0xf4c, 0xfffffffa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xc000000, 0x20000000, 0x0, 0x6}, 0x183c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x46e, 0x3, 0xb, 0x7, 0x40}, 0xcfd}}]}, {0xe5, 0x6, "49531c2c257a8ef6ffe8f0561ef4e56e8ad26f7a53e9ce288f5af30e831b95a45e7b9d4fe6186a68ed7bc8cc59904fafe458500eafbcf0a80d813edb6b92e8cd7c34a12de30597bd5299111b6f3bf22fb89a06d1a69b4c517d7764af8ef79769a5c9c9c1888957d41b392716f9c0e4b3b406c1ab84dc5e1507f20973d79efaf9eb6cb6eece1bec6d621cdeb0c6cca9d1dba5125aece55b4b82cde5452e36a92f5029abb03cad29a603f7fd400ccad09c0659d80581f21cc5ca1bf7b8016bd9e8d5f0e42935ea0578826b5fb3d5c4e1ef907fcf2518b13db08899306d46ecfa89e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xb4, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x85, 0x6, "e9081537cd7e47acdd99e1f3c7ae034666d57286346d4c101bb57387ad2a53ad589cdd1a32114f7189002a538c6f487721c8d3da95b10433390725b5e7a4ca5c0d079316d5a88c57e126076fbd671e61ea7b601050fa2cc7453cb5f566137784e19fa439145290f35501f7a24fcdafcbb46ec96331e44d895e45d46e0ff4b29f4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 17.182510983s ago: executing program 1 (id=201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="8d9ee7d9f15e817df0a261db09f2c767ec3378f81b98677c7605202d620b2462f8687b322e62a7997b4d47ef08ffff044a54dacc79fae8f460a4b8a21a33e4aa9f0c7672752f7a947b5a8322731e48", 0x4f}], 0x1}, 0x200000c1) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 32 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) pwritev(r4, 0x0, 0x0, 0x80000000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) memfd_create(0x0, 0xe) (async) socket(0x2b, 0x1, 0x0) (async) r5 = syz_io_uring_setup(0x5bb2, &(0x7f00000006c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000007e7bb8dec2e1febc2c9d58fc0000000000000008060000000000000000000000000000007f000001000000000000000000000000fc0100000000000000000000000000000002000002ffffffff000000000000000007001900000000000a"], 0xb8}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, 0x0, 0x0, 0xc}, 0x94) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000019080102000000000000000007000005"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040010) kernel console output (not intermixed with test programs): 42] bridge_slave_1: entered allmulticast mode [ 68.262286][ T5842] bridge_slave_1: entered promiscuous mode [ 68.294495][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 68.317276][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.329511][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.385867][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.393566][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.400845][ T5840] bridge_slave_0: entered allmulticast mode [ 68.407865][ T5840] bridge_slave_0: entered promiscuous mode [ 68.415996][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.423210][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.430314][ T5840] bridge_slave_1: entered allmulticast mode [ 68.438012][ T5840] bridge_slave_1: entered promiscuous mode [ 68.486320][ T5842] team0: Port device team_slave_0 added [ 68.492105][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.500681][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.508452][ T5857] bridge_slave_0: entered allmulticast mode [ 68.515188][ T5857] bridge_slave_0: entered promiscuous mode [ 68.542448][ T5842] team0: Port device team_slave_1 added [ 68.548590][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.556141][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.563305][ T5857] bridge_slave_1: entered allmulticast mode [ 68.569915][ T5857] bridge_slave_1: entered promiscuous mode [ 68.581660][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.590959][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.598374][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.605613][ T5848] bridge_slave_0: entered allmulticast mode [ 68.612470][ T5848] bridge_slave_0: entered promiscuous mode [ 68.648930][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.658184][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.665611][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.673091][ T5848] bridge_slave_1: entered allmulticast mode [ 68.679781][ T5848] bridge_slave_1: entered promiscuous mode [ 68.701370][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.708818][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.734771][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.748713][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.763302][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.807086][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.814157][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.840519][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.869049][ T5840] team0: Port device team_slave_0 added [ 68.877264][ T5840] team0: Port device team_slave_1 added [ 68.884856][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.907899][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.915352][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.922957][ T5851] bridge_slave_0: entered allmulticast mode [ 68.929611][ T5851] bridge_slave_0: entered promiscuous mode [ 68.947809][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.966507][ T5857] team0: Port device team_slave_0 added [ 68.981548][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.988730][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.996506][ T5851] bridge_slave_1: entered allmulticast mode [ 69.003552][ T5851] bridge_slave_1: entered promiscuous mode [ 69.030284][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.038785][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.065177][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.084683][ T5857] team0: Port device team_slave_1 added [ 69.104336][ T5842] hsr_slave_0: entered promiscuous mode [ 69.110558][ T5842] hsr_slave_1: entered promiscuous mode [ 69.135502][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.142494][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.168676][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.199018][ T5848] team0: Port device team_slave_0 added [ 69.210546][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.223156][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.237251][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.244531][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.271121][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.284035][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.290985][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.317001][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.329502][ T5848] team0: Port device team_slave_1 added [ 69.383995][ T5851] team0: Port device team_slave_0 added [ 69.391228][ T5851] team0: Port device team_slave_1 added [ 69.399719][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.407008][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.435960][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.448405][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.456050][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.482459][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.556114][ T5857] hsr_slave_0: entered promiscuous mode [ 69.562423][ T5857] hsr_slave_1: entered promiscuous mode [ 69.568406][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 69.574644][ T5857] Cannot create hsr debugfs directory [ 69.588808][ T5840] hsr_slave_0: entered promiscuous mode [ 69.594948][ T5849] Bluetooth: hci1: command tx timeout [ 69.595096][ T5849] Bluetooth: hci0: command tx timeout [ 69.601365][ T5840] hsr_slave_1: entered promiscuous mode [ 69.606284][ T5849] Bluetooth: hci2: command tx timeout [ 69.618251][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 69.624049][ T5840] Cannot create hsr debugfs directory [ 69.630098][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.637184][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.663186][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.674245][ T5849] Bluetooth: hci4: command tx timeout [ 69.674250][ T5855] Bluetooth: hci3: command tx timeout [ 69.676899][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.693650][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.720144][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.798381][ T5848] hsr_slave_0: entered promiscuous mode [ 69.805323][ T5848] hsr_slave_1: entered promiscuous mode [ 69.811342][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 69.817490][ T5848] Cannot create hsr debugfs directory [ 69.914855][ T5851] hsr_slave_0: entered promiscuous mode [ 69.920996][ T5851] hsr_slave_1: entered promiscuous mode [ 69.927179][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 69.933737][ T5851] Cannot create hsr debugfs directory [ 70.100719][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.131175][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.176197][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.200402][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.273782][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.284021][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.295654][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.315627][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.354389][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.376600][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.388237][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.399417][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.471850][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.490764][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.513869][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.529800][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.546703][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.620662][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.631291][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.651717][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.659018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.669033][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.678114][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.697483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.704582][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.720202][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.740479][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.801377][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.826024][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.851400][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.858627][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.874313][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.909543][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.917153][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.926120][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 70.926133][ T30] audit: type=1400 audit(1754965001.484:86): avc: denied { sys_module } for pid=5842 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.946190][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.960604][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.963906][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.974569][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.019926][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.027100][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.129282][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.178240][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.200859][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.221057][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.278142][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.285300][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.311133][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.337378][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.344506][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.387651][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.394812][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.410998][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.418121][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.457900][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.496936][ T5842] veth0_vlan: entered promiscuous mode [ 71.538547][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.568531][ T5842] veth1_vlan: entered promiscuous mode [ 71.673004][ T5849] Bluetooth: hci2: command tx timeout [ 71.673011][ T5855] Bluetooth: hci1: command tx timeout [ 71.682522][ T5855] Bluetooth: hci0: command tx timeout [ 71.711981][ T5842] veth0_macvtap: entered promiscuous mode [ 71.734912][ T5842] veth1_macvtap: entered promiscuous mode [ 71.753148][ T5855] Bluetooth: hci4: command tx timeout [ 71.758579][ T5855] Bluetooth: hci3: command tx timeout [ 71.801604][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.820127][ T5840] veth0_vlan: entered promiscuous mode [ 71.841295][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.859870][ T5840] veth1_vlan: entered promiscuous mode [ 71.891533][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.929778][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.961924][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.970965][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.005269][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.038276][ T5840] veth0_macvtap: entered promiscuous mode [ 72.060611][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.091183][ T5840] veth1_macvtap: entered promiscuous mode [ 72.099797][ T5857] veth0_vlan: entered promiscuous mode [ 72.128621][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.140193][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.157205][ T5857] veth1_vlan: entered promiscuous mode [ 72.177434][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.189824][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.199333][ T5848] veth0_vlan: entered promiscuous mode [ 72.230462][ T5848] veth1_vlan: entered promiscuous mode [ 72.244936][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.253737][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.255363][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.271948][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.287143][ T5851] veth0_vlan: entered promiscuous mode [ 72.296555][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.310619][ T30] audit: type=1400 audit(1754965002.864:87): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.FIfjdV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.326675][ T5848] veth0_macvtap: entered promiscuous mode [ 72.346530][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.352760][ T30] audit: type=1400 audit(1754965002.894:88): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.389608][ T30] audit: type=1400 audit(1754965002.894:89): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.FIfjdV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.418526][ T30] audit: type=1400 audit(1754965002.894:90): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.418858][ T5851] veth1_vlan: entered promiscuous mode [ 72.440796][ T30] audit: type=1400 audit(1754965002.894:91): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.FIfjdV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.451931][ T5857] veth0_macvtap: entered promiscuous mode [ 72.480733][ T30] audit: type=1400 audit(1754965002.944:92): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.FIfjdV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.513452][ T5848] veth1_macvtap: entered promiscuous mode [ 72.515607][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.542793][ T30] audit: type=1400 audit(1754965002.944:93): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.544475][ T5857] veth1_macvtap: entered promiscuous mode [ 72.567285][ T30] audit: type=1400 audit(1754965002.944:94): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.577805][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.600769][ T30] audit: type=1400 audit(1754965002.954:95): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=7278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.667293][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.701150][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.728534][ T3000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.744499][ T5851] veth0_macvtap: entered promiscuous mode [ 72.769757][ T3000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.778903][ T3000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.790755][ T3000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.868609][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.879613][ T5851] veth1_macvtap: entered promiscuous mode [ 72.924824][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.949055][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.969433][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.986676][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999038][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.108871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.455801][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.472870][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.504288][ T5967] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 73.564277][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.586056][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.595145][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.645352][ T750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.670402][ T750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.714590][ T750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.732086][ T750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.752818][ T5849] Bluetooth: hci0: command tx timeout [ 73.758255][ T5849] Bluetooth: hci1: command tx timeout [ 73.764467][ T5849] Bluetooth: hci2: command tx timeout [ 73.784200][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.832450][ T5855] Bluetooth: hci3: command tx timeout [ 73.834833][ T5849] Bluetooth: hci4: command tx timeout [ 73.854452][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.887447][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.936213][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.997189][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.998619][ T5974] Zero length message leads to an empty skb [ 74.012909][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.066967][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.082100][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.117841][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.202999][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.217570][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.222464][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.237759][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.335901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.678649][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.698478][ T5982] bridge_slave_1: left allmulticast mode [ 74.704649][ T5982] bridge_slave_1: left promiscuous mode [ 74.710655][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.733071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.733578][ T5982] bridge_slave_0: left allmulticast mode [ 74.741784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.747974][ T5982] bridge_slave_0: left promiscuous mode [ 74.756449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.760995][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.850350][ T5987] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 74.860936][ T5987] SELinux: failed to load policy [ 74.930516][ T5994] vivid-001: ================= START STATUS ================= [ 74.939316][ T5994] vivid-001: Radio HW Seek Mode: Bounded [ 74.945957][ T5994] vivid-001: Radio Programmable HW Seek: false [ 74.953944][ T5994] vivid-001: RDS Rx I/O Mode: Block I/O [ 74.960004][ T5994] vivid-001: Generate RBDS Instead of RDS: false [ 74.966470][ T5994] vivid-001: RDS Reception: true [ 74.971483][ T5994] vivid-001: RDS Program Type: 0 inactive [ 74.977345][ T5994] vivid-001: RDS PS Name: inactive [ 74.987854][ T5994] vivid-001: RDS Radio Text: inactive [ 74.993513][ T5994] vivid-001: RDS Traffic Announcement: false inactive [ 75.000408][ T5994] vivid-001: RDS Traffic Program: false inactive [ 75.007048][ T5994] vivid-001: RDS Music: false inactive [ 75.012702][ T5994] vivid-001: ================== END STATUS ================== [ 75.089439][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.257489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.359480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.368066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.462298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.470572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.807747][ T5999] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 75.808114][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.827520][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.837685][ T5849] Bluetooth: hci2: command tx timeout [ 75.839346][ T5855] Bluetooth: hci1: command tx timeout [ 75.843289][ T5849] Bluetooth: hci0: command tx timeout [ 75.860871][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.1.10 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 75.860894][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.860904][ T5999] Call Trace: [ 75.860909][ T5999] [ 75.860916][ T5999] dump_stack_lvl+0x16c/0x1f0 [ 75.860937][ T5999] sysfs_warn_dup+0x7f/0xa0 [ 75.860958][ T5999] sysfs_create_dir_ns+0x24b/0x2b0 [ 75.860987][ T5999] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 75.861007][ T5999] ? find_held_lock+0x2b/0x80 [ 75.861030][ T5999] ? do_raw_spin_unlock+0x172/0x230 [ 75.861051][ T5999] kobject_add_internal+0x2c4/0x9b0 [ 75.861074][ T5999] kobject_init_and_add+0x11b/0x190 [ 75.861094][ T5999] ? __pfx_kobject_init_and_add+0x10/0x10 [ 75.861127][ T5999] lookup_or_create_module_kobject.part.0+0xbe/0x170 [ 75.861154][ T5999] lookup_or_create_module_kobject+0x41/0x60 [ 75.861177][ T5999] module_add_driver+0x23a/0x420 [ 75.861204][ T5999] bus_add_driver+0x32e/0x690 [ 75.861231][ T5999] driver_register+0x15c/0x4b0 [ 75.861250][ T5999] usb_gadget_register_driver_owner+0x132/0x330 [ 75.861278][ T5999] raw_ioctl+0x17d0/0x2c30 [ 75.861300][ T5999] ? __pfx_raw_ioctl+0x10/0x10 [ 75.861317][ T5999] ? selinux_file_ioctl+0x180/0x270 [ 75.861340][ T5999] ? selinux_file_ioctl+0xb4/0x270 [ 75.861362][ T5999] ? __pfx_raw_ioctl+0x10/0x10 [ 75.861379][ T5999] __x64_sys_ioctl+0x18b/0x210 [ 75.861407][ T5999] do_syscall_64+0xcd/0x4c0 [ 75.861426][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.861444][ T5999] RIP: 0033:0x7f47e198e7eb [ 75.861458][ T5999] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 75.861474][ T5999] RSP: 002b:00007f47e2797f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.861491][ T5999] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f47e198e7eb [ 75.861502][ T5999] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 75.861513][ T5999] RBP: 00007f47e2798fe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 75.861523][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.861533][ T5999] R13: 00007f47e2797fb0 R14: 0000200000000040 R15: 00007f47e1ce0b88 [ 75.861555][ T5999] [ 75.861576][ T5999] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 75.914408][ T5858] Bluetooth: hci4: command tx timeout [ 75.922786][ T5858] Bluetooth: hci3: command tx timeout [ 76.260060][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.269982][ T5999] Adding module 'raw_gadget' to sysfs failed (-17), the system may be unstable. [ 76.316167][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 76.340460][ T6004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6004 comm=syz.4.5 [ 76.444215][ T6005] SELinux: failed to load policy [ 76.497369][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.663779][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 76.670078][ T30] audit: type=1400 audit(1754965007.034:147): avc: denied { create } for pid=6000 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.827401][ T43] usb 2-1: device descriptor read/64, error -32 [ 76.874820][ T30] audit: type=1400 audit(1754965007.094:148): avc: denied { ioctl } for pid=6000 comm="syz.2.11" path="socket:[7865]" dev="sockfs" ino=7865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.901999][ T30] audit: type=1400 audit(1754965007.124:149): avc: denied { create } for pid=6000 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 76.921519][ T30] audit: type=1400 audit(1754965007.184:150): avc: denied { setopt } for pid=6000 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 76.941003][ T30] audit: type=1400 audit(1754965007.194:151): avc: denied { node_bind } for pid=6000 comm="syz.2.11" saddr=::ffff:0.0.0.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.059581][ T30] audit: type=1400 audit(1754965007.614:152): avc: denied { read write } for pid=6006 comm="syz.2.12" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.159526][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.206737][ T6007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.523466][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 77.534065][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.833443][ T30] audit: type=1400 audit(1754965007.614:153): avc: denied { open } for pid=6006 comm="syz.2.12" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.856651][ T30] audit: type=1400 audit(1754965007.614:154): avc: denied { setopt } for pid=6006 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.878068][ T30] audit: type=1400 audit(1754965007.614:155): avc: denied { getopt } for pid=6006 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.142564][ T43] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 78.145185][ T6007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.151627][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.167330][ T6013] block device autoloading is deprecated and will be removed. [ 78.181719][ T43] usb 2-1: Product: syz [ 78.207939][ T43] usb 2-1: Manufacturer: syz [ 78.239928][ T43] usb 2-1: SerialNumber: syz [ 78.253668][ T30] audit: type=1400 audit(1754965007.614:156): avc: denied { bind } for pid=6006 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.303152][ T6013] capability: warning: `syz.3.13' uses 32-bit capabilities (legacy support in use) [ 78.480170][ T43] usb 2-1: config 0 descriptor?? [ 78.518900][ T43] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 78.531073][ T43] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 78.751300][ T43] usb 2-1: USB disconnect, device number 3 [ 78.906150][ T6007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.049249][ T6007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.197381][ T64] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.227593][ T64] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.259868][ T64] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.303364][ T64] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.331470][ T6044] netlink: 'syz.0.22': attribute type 9 has an invalid length. [ 80.334934][ T6040] Bluetooth: MGMT ver 1.23 [ 80.472543][ T5958] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.672432][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 80.691878][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.704451][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.717210][ T5958] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 80.728296][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.768384][ T5958] usb 5-1: config 0 descriptor?? [ 81.205379][ T10] cfg80211: failed to load regulatory.db [ 81.225119][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.233584][ T5958] usbhid 5-1:0.0: can't add hid device: -32 [ 81.240274][ T5958] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 81.251656][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.670888][ T6066] netlink: 14 bytes leftover after parsing attributes in process `syz.0.28'. [ 81.849598][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.878591][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.891969][ T6066] bond0 (unregistering): Released all slaves [ 81.897969][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 81.897983][ T30] audit: type=1400 audit(1754965012.454:202): avc: denied { create } for pid=6071 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.000684][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.010111][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.120419][ T6034] ALSA: mixer_oss: invalid OSS volume '' [ 82.156347][ T5958] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.232301][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.752756][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 82.761020][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.771967][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.784124][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.797083][ T5958] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.806282][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.814346][ T5922] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.824359][ T5958] usb 3-1: config 0 descriptor?? [ 82.842302][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 82.856019][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 82.926557][ T43] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 82.942376][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.950448][ T43] usb 2-1: Product: syz [ 82.959048][ T43] usb 2-1: Manufacturer: syz [ 82.964016][ T43] usb 2-1: SerialNumber: syz [ 82.970291][ T43] usb 2-1: config 0 descriptor?? [ 82.978389][ T43] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 82.987955][ T43] usb 2-1: Detected FT232R [ 83.012410][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 83.019264][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.034219][ T5922] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 83.044362][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.053496][ T5922] usb 4-1: Product: syz [ 83.057907][ T5922] usb 4-1: Manufacturer: syz [ 83.062903][ T5922] usb 4-1: SerialNumber: syz [ 83.070806][ T5922] usb 4-1: config 0 descriptor?? [ 83.078238][ T6078] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 83.183389][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 83.191875][ T30] audit: type=1400 audit(1754965013.744:203): avc: denied { getopt } for pid=6071 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.248694][ T5901] usb 5-1: USB disconnect, device number 2 [ 83.341051][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.389305][ T30] audit: type=1400 audit(1754965013.934:204): avc: denied { create } for pid=6086 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.636387][ T43] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 83.646836][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.655204][ T30] audit: type=1400 audit(1754965013.964:205): avc: denied { ioctl } for pid=6086 comm="syz.4.34" path="socket:[8170]" dev="sockfs" ino=8170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.724821][ T6089] vxfs: WRONG superblock magic 00000000 at 1 [ 83.733566][ T6089] vxfs: WRONG superblock magic 00000000 at 8 [ 83.738626][ T30] audit: type=1400 audit(1754965013.964:206): avc: denied { connect } for pid=6086 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.763559][ T6089] vxfs: can't find superblock. [ 83.918380][ T5901] usb 4-1: USB disconnect, device number 2 [ 84.057505][ T30] audit: type=1400 audit(1754965013.964:207): avc: denied { write } for pid=6086 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.139324][ T5958] usbhid 3-1:0.0: can't add hid device: -71 [ 84.156355][ T5958] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 84.195753][ T5958] usb 3-1: USB disconnect, device number 2 [ 84.239962][ T5962] usb 2-1: USB disconnect, device number 4 [ 84.257509][ T5962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.280988][ T5962] ftdi_sio 2-1:0.0: device disconnected [ 84.383620][ T30] audit: type=1400 audit(1754965014.944:208): avc: denied { mount } for pid=6097 comm="syz.0.36" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.392096][ T6099] ======================================================= [ 84.392096][ T6099] WARNING: The mand mount option has been deprecated and [ 84.392096][ T6099] and is ignored by this kernel. Remove the mand [ 84.392096][ T6099] option from the mount to silence this warning. [ 84.392096][ T6099] ======================================================= [ 84.405612][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.415542][ T30] audit: type=1400 audit(1754965014.944:209): avc: denied { remount } for pid=6097 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.444466][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.470491][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.486049][ T6099] tracefs: Unknown parameter 'my7' [ 84.503950][ T30] audit: type=1400 audit(1754965015.064:210): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.605236][ T30] audit: type=1400 audit(1754965015.164:211): avc: denied { write } for pid=6109 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.626917][ T5901] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 84.667986][ T6110] delete_channel: no stack [ 84.785653][ T5901] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.916328][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.975619][ T5901] usb 5-1: Product: syz [ 84.979827][ T5901] usb 5-1: Manufacturer: syz [ 85.031161][ T5901] usb 5-1: SerialNumber: syz [ 85.075561][ T5901] usb 5-1: config 0 descriptor?? [ 85.077908][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 85.320257][ T5901] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 85.642360][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.866409][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 85.883787][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.902392][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.993920][ T6138] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 86.017708][ T6138] cramfs: wrong magic [ 86.031458][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.043103][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.263044][ T10] usb 2-1: config 0 descriptor?? [ 86.277879][ T10] hub 2-1:0.0: USB hub found [ 86.522727][ T10] hub 2-1:0.0: 1 port detected [ 86.528832][ T5901] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 86.552608][ T5901] usb 5-1: USB disconnect, device number 3 [ 86.581117][ T6141] wireguard0: entered promiscuous mode [ 86.599215][ T6141] wireguard0: entered allmulticast mode [ 86.766683][ T6147] sctp: [Deprecated]: syz.2.48 (pid 6147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.766683][ T6147] Use struct sctp_sack_info instead [ 86.843528][ T6151] 9pnet_fd: Insufficient options for proto=fd [ 86.906946][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 86.906961][ T30] audit: type=1400 audit(1754965017.464:222): avc: denied { ioctl } for pid=6152 comm="syz.0.50" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.089754][ T30] audit: type=1400 audit(1754965017.644:223): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.109834][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.292308][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 87.300945][ T30] audit: type=1400 audit(1754965017.854:224): avc: denied { setopt } for pid=6154 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.334019][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.585163][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.720789][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.775769][ T30] audit: type=1400 audit(1754965018.334:225): avc: denied { unlink } for pid=5851 comm="syz-executor" name="file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.798284][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.824158][ T9] hub 2-1:0.0: activate --> -90 [ 87.841597][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.969754][ T6162] netlink: 'syz.4.55': attribute type 9 has an invalid length. [ 88.030425][ T30] audit: type=1400 audit(1754965018.484:226): avc: denied { mount } for pid=6160 comm="syz.3.54" name="/" dev="ramfs" ino=8707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.062393][ T24] usb 3-1: config 0 descriptor?? [ 88.074223][ T24] hub 3-1:0.0: USB hub found [ 88.292278][ T24] hub 3-1:0.0: 1 port detected [ 88.376208][ T30] audit: type=1400 audit(1754965018.924:227): avc: denied { write } for pid=6166 comm="syz.3.56" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.398816][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.604214][ T5901] usb 2-1: USB disconnect, device number 5 [ 88.675228][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 88.684174][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 88.729600][ T30] audit: type=1400 audit(1754965019.284:228): avc: denied { write } for pid=6169 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 88.997627][ T24] hub 3-1:0.0: activate --> -90 [ 89.425549][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.502792][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.653669][ T5962] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 89.653911][ T5901] usb 3-1: USB disconnect, device number 3 [ 89.660614][ T5962] usb 3-1-port1: connect-debounce failed [ 89.807325][ T30] audit: type=1400 audit(1754965020.364:229): avc: denied { ioctl } for pid=6184 comm="syz.3.61" path="socket:[9394]" dev="sockfs" ino=9394 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.831825][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.877448][ T30] audit: type=1400 audit(1754965020.434:230): avc: denied { name_bind } for pid=6184 comm="syz.3.61" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 89.898961][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.916048][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.61'. [ 89.982282][ T5962] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.112603][ T5962] usb 1-1: device descriptor read/64, error -71 [ 90.372947][ T5962] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.134407][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 91.170296][ T6214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.200811][ T5962] usb 1-1: device descriptor read/64, error -71 [ 91.577542][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.579793][ T5962] usb usb1-port1: attempt power cycle [ 91.748547][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.751057][ T6222] loop3: detected capacity change from 0 to 1 [ 91.762240][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.776621][ T5860] Dev loop3: unable to read RDB block 1 [ 91.784723][ T5860] loop3: unable to read partition table [ 91.790676][ T5860] loop3: partition table beyond EOD, truncated [ 91.797253][ T5901] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 91.809059][ T6222] Dev loop3: unable to read RDB block 1 [ 91.809844][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.818269][ T6222] loop3: unable to read partition table [ 91.836172][ T5901] usb 5-1: config 0 descriptor?? [ 91.861731][ T6222] loop3: partition table beyond EOD, truncated [ 91.871842][ T6222] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 91.942383][ T5962] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.972794][ T5962] usb 1-1: device descriptor read/8, error -71 [ 91.989460][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 91.989475][ T30] audit: type=1400 audit(1754965022.544:235): avc: denied { mounton } for pid=6228 comm="syz.3.72" path="/14/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.064089][ T30] audit: type=1400 audit(1754965022.614:236): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.222381][ T5962] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.245234][ T5962] usb 1-1: device descriptor read/8, error -71 [ 92.322279][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.352576][ T5962] usb usb1-port1: unable to enumerate USB device [ 92.435676][ T6240] fuse: Unknown parameter ' HID v0.00 Device [syz1] on syz0 [ 128.441696][ T30] audit: type=1400 audit(1754965058.004:317): avc: denied { getattr } for pid=5512 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.515696][ T6741] overlayfs: failed to resolve './file0': -2 [ 128.553598][ C0] net_ratelimit: 10 callbacks suppressed [ 128.553618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.571646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 128.583917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.596238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 128.608542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.620647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 128.633094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.645369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 128.657600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.669784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 128.693991][ T30] audit: type=1400 audit(1754965058.554:318): avc: denied { read open } for pid=6733 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.719374][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.010053][ T30] audit: type=1400 audit(1754965058.554:319): avc: denied { getattr } for pid=6733 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.035280][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.159037][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.173685][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.562307][ C0] net_ratelimit: 17613 callbacks suppressed [ 133.562326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 133.580546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.592809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 133.605067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.617171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 133.629404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.641702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 133.653985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.666260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 133.678530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.542186][ C0] sched: DL replenish lagged too much [ 138.572247][ C0] net_ratelimit: 21651 callbacks suppressed [ 138.572267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.590470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 138.602717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.614965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 138.627252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.639581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 138.651845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.664117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 138.676369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.688645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 143.582301][ C1] net_ratelimit: 29700 callbacks suppressed [ 143.582321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.582319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.582601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 143.588533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.600503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.613002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.624379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 143.636325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.648228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.660744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.592216][ C1] net_ratelimit: 26205 callbacks suppressed [ 148.592236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.592434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 148.598439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.610246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.622929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.634378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 148.646179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.657954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.670530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.682516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 153.602282][ C0] net_ratelimit: 21512 callbacks suppressed [ 153.602303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 153.602338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.608452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.620508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.642387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 153.644734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.656159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.668251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.680171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 153.692968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.612203][ C0] net_ratelimit: 19845 callbacks suppressed [ 158.612222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 158.612420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.622252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.630940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.642389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 158.654222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.666338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.678790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.690367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 158.702282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.622199][ C1] net_ratelimit: 19863 callbacks suppressed [ 163.622218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.622255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.628946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.640424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 163.652267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.664139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.676754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.688265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 163.700118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.711885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.632354][ C1] net_ratelimit: 19910 callbacks suppressed [ 168.632367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.642259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.651228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.663111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 168.675002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.686911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.699386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.710808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 168.722653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.734570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.642239][ C1] net_ratelimit: 19929 callbacks suppressed [ 173.642259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.642311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 173.649057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.662249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.672465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.684353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 173.696706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.708178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.720219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.732132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 178.652272][ C0] net_ratelimit: 19832 callbacks suppressed [ 178.652291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.652493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.658560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 178.670422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.682355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.695627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.706590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 178.718474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.730269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.742832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.662271][ C1] net_ratelimit: 19828 callbacks suppressed [ 183.662284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.672471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 183.681012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.692376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.704373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.716444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 183.728887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.740408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.752317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.764209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 188.672320][ C0] net_ratelimit: 19803 callbacks suppressed [ 188.672341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 188.672375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.678721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.690772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.702652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 188.715000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.726569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.738517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.750430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 188.770559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.682383][ C1] net_ratelimit: 19924 callbacks suppressed [ 193.682402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.682499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 193.688607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.700455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.712987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.724478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 193.736308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.748163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.760634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.772307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 198.692813][ C1] net_ratelimit: 16268 callbacks suppressed [ 198.692833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.702361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 198.711488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.722842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.735394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.746881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 198.759213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.770609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.783064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.794520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 203.702332][ C1] net_ratelimit: 16088 callbacks suppressed [ 203.702348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 203.702352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.702585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.709118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.720677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 203.732934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.744353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.756872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.768353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 203.780610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.712205][ C0] net_ratelimit: 16296 callbacks suppressed [ 208.712224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 208.712798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.722262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.730981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.742442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 208.754742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.766156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.778818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.790246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 208.802542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.722481][ C1] net_ratelimit: 20373 callbacks suppressed [ 213.722499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.732240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.740761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.752844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 213.765207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.776697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.789090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.800523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 213.812378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.824290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.732233][ C1] net_ratelimit: 20584 callbacks suppressed [ 218.732236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.732252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.738500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 218.750313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.762396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.774822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.786402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 218.798726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.810159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.822232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.742357][ C1] net_ratelimit: 20552 callbacks suppressed [ 223.742378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.742397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.749065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.760530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 223.772464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.784284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.796278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.808329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 223.820664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.832114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.752288][ C1] net_ratelimit: 20490 callbacks suppressed [ 228.752304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.754406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 228.758939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.770444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.782911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.794342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 228.806185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.818038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.829991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.842111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 233.762359][ C0] net_ratelimit: 20674 callbacks suppressed [ 233.762368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.762379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 233.762620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.769020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.780601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 233.792986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.804484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.816375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.828366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 233.840154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.772515][ C1] net_ratelimit: 20780 callbacks suppressed [ 238.772528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.782283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 238.790592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.802490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.814433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.826393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 238.838761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.850239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.862601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.874076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 243.782256][ C1] net_ratelimit: 20395 callbacks suppressed [ 243.782271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 243.782275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.782519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.788402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.800869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.812439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 243.824877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.836383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.848294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.860298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 248.792292][ C1] net_ratelimit: 20521 callbacks suppressed [ 248.792307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.802366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 248.810422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.822322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.834294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.846227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 248.858728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.870171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.882809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.894225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 249.562136][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 249.569190][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6737/1:b..l [ 249.577353][ C1] rcu: (detected by 1, t=10503 jiffies, g=13241, q=1351 ncpus=2) [ 249.585165][ C1] task:syz.2.198 state:R running task stack:27656 pid:6737 tgid:6737 ppid:5848 task_flags:0x40044c flags:0x00004004 [ 249.599427][ C1] Call Trace: [ 249.602711][ C1] [ 249.605651][ C1] __schedule+0x1190/0x5de0 [ 249.610157][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 249.615091][ C1] ? __pfx___schedule+0x10/0x10 [ 249.619950][ C1] ? lock_acquire+0x179/0x350 [ 249.624647][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 249.630036][ C1] preempt_schedule_common+0x44/0xc0 [ 249.635314][ C1] preempt_schedule_thunk+0x16/0x30 [ 249.640530][ C1] _raw_spin_unlock+0x3e/0x50 [ 249.645211][ C1] unmap_page_range+0xf77/0x42c0 [ 249.650159][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 249.655606][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 249.660542][ C1] ? uprobe_munmap+0x20/0x5c0 [ 249.665215][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 249.671460][ C1] unmap_vmas+0x218/0x470 [ 249.675789][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 249.680664][ C1] exit_mmap+0x1b9/0xb90 [ 249.684913][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 249.689752][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 249.694712][ C1] __mmput+0x12a/0x410 [ 249.698816][ C1] mmput+0x62/0x70 [ 249.702539][ C1] do_exit+0x7c7/0x2bf0 [ 249.706706][ C1] ? __pfx_do_exit+0x10/0x10 [ 249.711309][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 249.716326][ C1] ? find_held_lock+0x2b/0x80 [ 249.721019][ C1] do_group_exit+0xd3/0x2a0 [ 249.725536][ C1] get_signal+0x2673/0x26d0 [ 249.730050][ C1] ? __pfx_get_signal+0x10/0x10 [ 249.734882][ C1] ? vm_mmap_pgoff+0x103/0x470 [ 249.739651][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 249.745200][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 249.751367][ C1] ? ksys_mmap_pgoff+0x85/0x5c0 [ 249.756214][ C1] ? xfd_validate_state+0x61/0x180 [ 249.761376][ C1] exit_to_user_mode_loop+0x84/0x110 [ 249.766654][ C1] do_syscall_64+0x3f6/0x4c0 [ 249.771243][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.777141][ C1] RIP: 0033:0x7f9572d8ec23 [ 249.781551][ C1] RSP: 002b:00007ffff681cbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 249.789941][ C1] RAX: 00007f9573b7d000 RBX: 00007f95717f76c0 RCX: 00007f9572d8ec23 [ 249.797910][ C1] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 249.805970][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 249.813936][ C1] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffff681cd20 [ 249.821906][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 249.829871][ C1] [ 249.832872][ C1] rcu: rcu_preempt kthread starved for 9587 jiffies! g13241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 249.844145][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 249.854188][ C1] rcu: RCU grace-period kthread stack dump: [ 249.860062][ C1] task:rcu_preempt state:I stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 249.871977][ C1] Call Trace: [ 249.875245][ C1] [ 249.878170][ C1] __schedule+0x1190/0x5de0 [ 249.882677][ C1] ? find_held_lock+0x2b/0x80 [ 249.887361][ C1] ? __pfx___schedule+0x10/0x10 [ 249.892212][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 249.897165][ C1] preempt_schedule_irq+0x51/0x90 [ 249.902189][ C1] irqentry_exit+0x36/0x90 [ 249.906601][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.912572][ C1] RIP: 0010:rcu_gp_fqs_loop+0x1b8/0xb00 [ 249.918109][ C1] Code: 4c 8d ac 24 80 00 00 00 48 c7 84 24 80 00 00 00 00 00 00 00 48 83 e8 58 48 89 84 24 88 00 00 00 48 89 84 24 90 00 00 00 eb 35 <0f> bf 2d 09 25 bb 0c 89 e8 a8 02 75 42 48 8b 05 ac 1f bb 0c 48 85 [ 249.937731][ C1] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000246 [ 249.943797][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 249.951758][ C1] RDX: 0000000000000001 RSI: ffffffff8de4f0f5 RDI: 0000000000000001 [ 249.959723][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 249.967689][ C1] R10: ffffffff90ab3597 R11: 0000000000000000 R12: ffffffff8e211200 [ 249.975655][ C1] R13: ffffc90000157d28 R14: 0000000000000000 R15: 0000000000000000 [ 249.983635][ C1] ? rcu_gp_fqs_loop+0x201/0xb00 [ 249.988574][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 249.993853][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 249.999047][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 250.003960][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 250.008807][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.014616][ C1] rcu_gp_kthread+0x270/0x380 [ 250.019279][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 250.024450][ C1] ? rcu_is_watching+0x12/0xc0 [ 250.029209][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.034404][ C1] ? __kthread_parkme+0x19e/0x250 [ 250.039425][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 250.044597][ C1] kthread+0x3c5/0x780 [ 250.048673][ C1] ? __pfx_kthread+0x10/0x10 [ 250.053257][ C1] ? rcu_is_watching+0x12/0xc0 [ 250.058034][ C1] ? __pfx_kthread+0x10/0x10 [ 250.062617][ C1] ret_from_fork+0x5d7/0x6f0 [ 250.067197][ C1] ? __pfx_kthread+0x10/0x10 [ 250.071778][ C1] ret_from_fork_asm+0x1a/0x30 [ 250.076546][ C1] [ 250.079554][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 250.085860][ C1] Sending NMI from CPU 1 to CPUs 0: [ 250.091056][ C0] NMI backtrace for cpu 0 [ 250.091067][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 250.091084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.091092][ C0] RIP: 0010:dev_get_by_index_rcu+0x6/0x140 [ 250.091115][ C0] Code: 00 b1 b5 f8 e9 02 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 55 <41> 54 41 89 f4 55 53 48 89 fb e8 6b 58 4f f8 48 8d bb 08 03 00 00 [ 250.091128][ C0] RSP: 0018:ffffc90000007688 EFLAGS: 00000246 [ 250.091141][ C0] RAX: 0000000000000007 RBX: ffff888151db3500 RCX: ffffffff8a6ff5d9 [ 250.091149][ C0] RDX: 0000000000000000 RSI: 000000000000001c RDI: ffff8880253a0000 [ 250.091158][ C0] RBP: ffff888151db4e10 R08: 0000000000000001 R09: 0000000000000000 [ 250.091167][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888151db4e10 [ 250.091176][ C0] R13: 0000000000000001 R14: ffff888151db3510 R15: ffffffff8cf70d40 [ 250.091185][ C0] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 250.091199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.091209][ C0] CR2: 00002000003b6030 CR3: 0000000030241000 CR4: 00000000003526f0 [ 250.091218][ C0] Call Trace: [ 250.091222][ C0] [ 250.091228][ C0] br_nf_pre_routing_finish_ipv6+0x232/0xfb0 [ 250.091249][ C0] ? nf_hook_slow+0x132/0x200 [ 250.091263][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 250.091279][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 250.091294][ C0] ? lock_acquire+0x179/0x350 [ 250.091316][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 250.091332][ C0] ? net_generic+0xea/0x2a0 [ 250.091348][ C0] br_nf_pre_routing+0x860/0x15b0 [ 250.091365][ C0] br_handle_frame+0xad5/0x14b0 [ 250.091381][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 250.091398][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 250.091415][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 250.091428][ C0] __netif_receive_skb_core.constprop.0+0xa25/0x48c0 [ 250.091449][ C0] ? kasan_quarantine_put+0xd0/0x240 [ 250.091465][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 250.091480][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 250.091500][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 250.091517][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 250.091532][ C0] ? ip6_mc_input+0x4f2/0xeb0 [ 250.091546][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 250.091562][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 250.091583][ C0] ? process_backlog+0x3f0/0x15e0 [ 250.091601][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 250.091619][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 250.091645][ C0] ? lock_acquire+0x179/0x350 [ 250.091666][ C0] ? process_backlog+0x3f0/0x15e0 [ 250.091684][ C0] __netif_receive_skb+0x1d/0x160 [ 250.091704][ C0] process_backlog+0x442/0x15e0 [ 250.091725][ C0] __napi_poll.constprop.0+0xba/0x550 [ 250.091744][ C0] ? rcu_is_watching+0x12/0xc0 [ 250.091762][ C0] net_rx_action+0xa9f/0xfe0 [ 250.091784][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 250.091803][ C0] ? rcu_is_watching+0x12/0xc0 [ 250.091818][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.091831][ C0] ? tmigr_handle_remote+0x132/0x380 [ 250.091851][ C0] ? run_timer_base+0x121/0x190 [ 250.091873][ C0] handle_softirqs+0x216/0x8e0 [ 250.091891][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 250.091909][ C0] __irq_exit_rcu+0x109/0x170 [ 250.091924][ C0] irq_exit_rcu+0x9/0x30 [ 250.091939][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 250.091959][ C0] [ 250.091964][ C0] [ 250.091969][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.091984][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 250.092003][ C0] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 250.092016][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 250.092026][ C0] RAX: 0000000000bb4037 RBX: 0000000000000000 RCX: ffffffff8b934c29 [ 250.092035][ C0] RDX: 0000000000000000 RSI: ffffffff8de4f0f5 RDI: ffffffff8c162400 [ 250.092044][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 250.092052][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 250.092061][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab3590 R15: 0000000000000000 [ 250.092072][ C0] ? ct_kernel_exit+0x139/0x190 [ 250.092089][ C0] default_idle+0x13/0x20 [ 250.092103][ C0] default_idle_call+0x6d/0xb0 [ 250.092118][ C0] do_idle+0x391/0x510 [ 250.092137][ C0] ? __pfx_do_idle+0x10/0x10 [ 250.092152][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 250.092169][ C0] cpu_startup_entry+0x4f/0x60 [ 250.092185][ C0] rest_init+0x16b/0x2b0 [ 250.092200][ C0] ? acpi_subsystem_init+0x133/0x180 [ 250.092219][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 250.092239][ C0] start_kernel+0x3ee/0x4d0 [ 250.092258][ C0] x86_64_start_reservations+0x18/0x30 [ 250.092277][ C0] x86_64_start_kernel+0x130/0x190 [ 250.092295][ C0] common_startup_64+0x13e/0x148 [ 250.092314][ C0] [ 251.624393][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.639555][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.802148][ C0] net_ratelimit: 22116 callbacks suppressed [ 253.802170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 253.802685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.808294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.820366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.832256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 253.844081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.856012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.868496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.880032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 253.892461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.812184][ C1] net_ratelimit: 25968 callbacks suppressed [ 258.812204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.812203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 258.818437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.830270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.842317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.854370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0) [ 258.866701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.878061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.890656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.902084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:35:67:67:e7:05, vlan:0)