last executing test programs: 47m56.483132695s ago: executing program 0 (id=28): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') readv(r0, &(0x7f0000000280), 0x2) 47m52.879901431s ago: executing program 0 (id=29): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x22200, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0xc1, 0x3, 0x8}, 0x80000000}}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0xffffffffffffff74, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@local, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40020000) 47m38.602774642s ago: executing program 0 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000bb020a0002"], 0x28}}, 0x0) 47m33.118954612s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x40004}}, [], {{0x7, 0x1, 0x2, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 47m30.600658294s ago: executing program 0 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) io_uring_enter(0xffffffffffffffff, 0xde5, 0x0, 0x0, 0x0, 0x0) 47m28.094844436s ago: executing program 0 (id=35): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x2, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4e, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a35f200180600fe8000000000000000000000f00500bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002"], 0x0) 46m41.955108263s ago: executing program 32 (id=35): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x2, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4e, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a35f200180600fe8000000000000000000000f00500bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002"], 0x0) 45m43.381437059s ago: executing program 1 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000094839fea28c8931e8503e83bc0dfc8ca8706000000ccb338bd8bfb29c093"], 0x0}, 0x0) 45m25.940516881s ago: executing program 1 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 45m19.554091558s ago: executing program 1 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x228, 0x20a, 0x278, 0x228, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x36}, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[0x4e22], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d4], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 45m13.182900324s ago: executing program 1 (id=53): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 45m7.802872895s ago: executing program 1 (id=54): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xf0}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 44m54.519822606s ago: executing program 1 (id=55): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 44m8.054559785s ago: executing program 33 (id=55): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 42m49.818830965s ago: executing program 2 (id=63): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') read$FUSE(r4, &(0x7f00000039c0)={0x2020}, 0x205d) 42m35.316036868s ago: executing program 2 (id=64): r0 = syz_clone(0x840000, 0x0, 0x7, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000060000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) ptrace(0x10, r0) 42m29.877081774s ago: executing program 2 (id=65): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/fdt', 0x0, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="181fffffff0000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000002700)=0x1, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 42m12.160359346s ago: executing program 2 (id=66): r0 = syz_io_uring_setup(0x4fe9, &(0x7f0000001640)={0x0, 0xe71, 0x40, 0x2, 0x297}, &(0x7f00000016c0), &(0x7f0000001700)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001740)=[@ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_sqe_op={0x1, 0x12}, @ioring_restriction_sqe_flags_required={0x3, 0x8}], 0x3) 42m3.344949894s ago: executing program 2 (id=67): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6021a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket(0x5, 0x4, 0xfffff43f) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 41m43.803119053s ago: executing program 2 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 40m57.246753278s ago: executing program 34 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 27m46.136115196s ago: executing program 4 (id=212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27m41.636585408s ago: executing program 4 (id=214): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 27m36.841058254s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) 27m24.473090075s ago: executing program 4 (id=218): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='D', 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 27m16.726078116s ago: executing program 4 (id=221): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x3f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@abs={0x0, 0x0, 0x4a21}, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000400)={r5}) r6 = socket(0x10, 0x3, 0x0) write(r6, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 27m4.053557331s ago: executing program 4 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 26m17.207523278s ago: executing program 35 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 21m28.383004536s ago: executing program 5 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x24, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x24}}, 0x1884) 21m20.007740803s ago: executing program 5 (id=297): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4207, r0, 0x0, 0x0) 21m16.436100275s ago: executing program 5 (id=299): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xc4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x7e) 21m12.912607984s ago: executing program 5 (id=301): io_setup(0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x8) 21m9.256829352s ago: executing program 5 (id=303): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x9a42]) 21m3.485671892s ago: executing program 5 (id=305): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 20m16.515025609s ago: executing program 36 (id=305): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 9m0.147808122s ago: executing program 6 (id=460): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) 8m56.123472725s ago: executing program 6 (id=461): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m39.938358026s ago: executing program 3 (id=463): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000280)="5717c757b31b64", 0x7}], 0x1) 8m36.748005968s ago: executing program 6 (id=464): syz_emit_ethernet(0x0, 0x0, 0x0) 8m31.597275784s ago: executing program 3 (id=465): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) 8m31.396628529s ago: executing program 6 (id=466): openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 8m24.168123686s ago: executing program 3 (id=467): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f00000016c0)=""/167, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 8m22.176099231s ago: executing program 6 (id=468): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0xf00, 0x0, &(0x7f0000000380), 0x10) 8m15.938292146s ago: executing program 6 (id=469): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000700)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x4, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x0, 0x200, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}}}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100010000000000000000000202000014000200"], 0x28}}, 0x0) 8m6.581968169s ago: executing program 3 (id=470): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001780)="84b6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001880)='4', 0x1}], 0x1}}], 0x2, 0xc081) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 7m58.974583594s ago: executing program 3 (id=471): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) open_by_handle_at(r0, 0x0, 0x400) 7m53.379611652s ago: executing program 3 (id=472): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 7m28.601630229s ago: executing program 37 (id=469): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000700)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x4, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x0, 0x200, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}}}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100010000000000000000000202000014000200"], 0x28}}, 0x0) 7m4.718925641s ago: executing program 38 (id=472): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 57.336010858s ago: executing program 7 (id=473): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 51.766132564s ago: executing program 7 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}]}}]}, 0x40}}, 0x48) 45.093454151s ago: executing program 7 (id=476): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f00000003c0)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 36.718657982s ago: executing program 7 (id=477): unshare(0x68040200) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 34.848378808s ago: executing program 8 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x8090) 29.516695567s ago: executing program 8 (id=478): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 20.927250103s ago: executing program 7 (id=479): unshare(0x68040200) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 17.535517361s ago: executing program 8 (id=480): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f00000003c0)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 4.902898563s ago: executing program 8 (id=481): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "ec299cd9"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 0s ago: executing program 7 (id=482): syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x2, [], [0x0, 0x4, 0x0, 0x2], [0x0, 0x100], [0x400000000000, 0xfffffffff]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000001c0)='hfs\x00', 0x110002, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x3, 0x0, 0xff02, 0x20008, 0x0, 0x0, 0x0, 0x4000000000000, 0xfeff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) close(r7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000000000007910469b89618f57e947a8a28cb800000000000500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59642' (ED25519) to the list of known hosts. syzkaller login: [ 356.751973][ T3168] cgroup: Unknown subsys name 'net' [ 357.146029][ T3168] cgroup: Unknown subsys name 'cpuset' [ 357.252546][ T3168] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 411.801715][ T3168] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 471.850994][ T3181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.970681][ T3181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.139621][ T3179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.238794][ T3179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.788535][ T3181] hsr_slave_0: entered promiscuous mode [ 481.833302][ T3181] hsr_slave_1: entered promiscuous mode [ 485.723706][ T3179] hsr_slave_0: entered promiscuous mode [ 485.748066][ T3179] hsr_slave_1: entered promiscuous mode [ 485.777789][ T3179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.781207][ T3179] Cannot create hsr debugfs directory [ 489.120290][ T3181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 489.338303][ T3181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 489.482697][ T3181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 489.758313][ T3181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 492.831864][ T3179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 492.892866][ T3179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 492.945533][ T3179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.012982][ T3179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 500.963596][ T3181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.310308][ T3179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.712157][ T3179] veth0_vlan: entered promiscuous mode [ 543.048187][ T3179] veth1_vlan: entered promiscuous mode [ 544.500048][ T3179] veth0_macvtap: entered promiscuous mode [ 544.742056][ T3179] veth1_macvtap: entered promiscuous mode [ 545.245763][ T3181] veth0_vlan: entered promiscuous mode [ 546.055134][ T3181] veth1_vlan: entered promiscuous mode [ 546.637358][ T3179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.640831][ T3179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.642829][ T3179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.656750][ T3179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.396940][ T3181] veth0_macvtap: entered promiscuous mode [ 549.121926][ T3181] veth1_macvtap: entered promiscuous mode [ 550.001416][ T3179] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 551.432632][ T3181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.439732][ T3181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.442039][ T3181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.456445][ T3181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.121649][ T3875] netlink: 444 bytes leftover after parsing attributes in process `syz.0.4'. [ 656.548315][ T902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 657.311695][ T902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.326639][ T902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.330121][ T902] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 657.332164][ T902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.559772][ T902] usb 2-1: config 0 descriptor?? [ 660.187948][ T902] usb 2-1: string descriptor 0 read error: -22 [ 660.713651][ T902] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input0 [ 661.147373][ T902] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input1 [ 661.408785][ T902] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input2 [ 661.628369][ T902] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input3 [ 661.992701][ T902] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 662.252784][ T902] usb 2-1: USB disconnect, device number 2 [ 672.409516][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 673.397407][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 673.688282][ T8] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 673.690639][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.692481][ T8] usb 2-1: Product: syz [ 673.703272][ T8] usb 2-1: Manufacturer: syz [ 673.719473][ T8] usb 2-1: SerialNumber: syz [ 673.831471][ T8] usb 2-1: config 0 descriptor?? [ 673.951281][ T8] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 677.268887][ T902] usb 2-1: USB disconnect, device number 3 [ 685.946198][ T4020] xt_hashlimit: size too large, truncated to 1048576 [ 720.348968][ T3869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 720.656931][ T3869] usb 2-1: Using ep0 maxpacket: 8 [ 720.755093][ T3869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.757750][ T3869] usb 2-1: config 0 has no interfaces? [ 720.759884][ T3869] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 720.762236][ T3869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.970496][ T3869] usb 2-1: config 0 descriptor?? [ 722.099670][ T8] usb 2-1: USB disconnect, device number 4 [ 779.913647][ T4046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.131326][ T4046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.770771][ T1806] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 792.766893][ T1806] usb 2-1: Using ep0 maxpacket: 16 [ 792.878506][ T1806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.880461][ T1806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.881968][ T1806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 792.883590][ T1806] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 792.886768][ T1806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.939607][ T1806] usb 2-1: config 0 descriptor?? [ 795.206369][ T1806] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 795.462506][ T1806] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 795.465667][ T1806] microsoft 0003:045E:07DA.0002: no inputs found [ 795.467373][ T1806] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 796.568987][ T1806] usb 2-1: USB disconnect, device number 5 [ 798.716642][ T4046] hsr_slave_0: entered promiscuous mode [ 798.810257][ T4046] hsr_slave_1: entered promiscuous mode [ 798.857977][ T4046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.859976][ T4046] Cannot create hsr debugfs directory [ 805.593257][ T4046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 805.703755][ T4046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 805.863061][ T4046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 805.941789][ T4046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 809.665660][ T4394] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 816.292984][ T4400] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 825.051367][ T4046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.390988][ T3869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 826.169204][ T3869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.171756][ T3869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.174061][ T3869] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 826.239416][ T3869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.508855][ T3869] usb 2-1: config 0 descriptor?? [ 828.073130][ T3869] usb 2-1: string descriptor 0 read error: -22 [ 828.800462][ T3869] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input5 [ 830.006061][ T3869] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 830.097818][ T3869] usb 2-1: USB disconnect, device number 6 [ 876.171477][ T26] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.261587][ T26] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.019574][ T26] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.743162][ T26] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.258072][ T26] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.513412][ T26] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.610784][ T26] bond0 (unregistering): Released all slaves [ 892.697614][ T26] hsr_slave_0: left promiscuous mode [ 892.841363][ T26] hsr_slave_1: left promiscuous mode [ 893.290148][ T26] veth1_macvtap: left promiscuous mode [ 893.318797][ T26] veth0_macvtap: left promiscuous mode [ 893.323842][ T26] veth1_vlan: left promiscuous mode [ 893.374097][ T26] veth0_vlan: left promiscuous mode [ 911.432324][ T4046] veth0_vlan: entered promiscuous mode [ 912.241377][ T4046] veth1_vlan: entered promiscuous mode [ 914.832080][ T4046] veth0_macvtap: entered promiscuous mode [ 915.222484][ T4046] veth1_macvtap: entered promiscuous mode [ 917.568861][ T4046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.571331][ T4046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.573426][ T4046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.646731][ T4046] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.547122][ T4483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.327782][ T4483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.041029][ T4483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.913374][ T4483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.807622][ T4483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.089096][ T4483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.279711][ T4483] bond0 (unregistering): Released all slaves [ 942.049121][ T4483] hsr_slave_0: left promiscuous mode [ 942.083102][ T4483] hsr_slave_1: left promiscuous mode [ 942.218782][ T4483] veth1_macvtap: left promiscuous mode [ 942.221934][ T4483] veth0_macvtap: left promiscuous mode [ 942.242543][ T4483] veth1_vlan: left promiscuous mode [ 942.258840][ T4483] veth0_vlan: left promiscuous mode [ 944.809892][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.881117][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.238338][ T4480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.351153][ T4480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.819075][ T4480] hsr_slave_0: entered promiscuous mode [ 988.896840][ T4480] hsr_slave_1: entered promiscuous mode [ 999.820927][ T4480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1000.359217][ T4480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1001.938471][ T4480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1002.181387][ T4480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1013.303206][ T4872] lo: entered allmulticast mode [ 1014.031630][ T4872] tunl0: entered allmulticast mode [ 1014.356403][ T4872] gre0: entered allmulticast mode [ 1014.542487][ T4874] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1014.903518][ T4872] gretap0: entered allmulticast mode [ 1015.127310][ T4872] erspan0: entered allmulticast mode [ 1015.394163][ T4872] ip_vti0: entered allmulticast mode [ 1015.631586][ T4872] ip6_vti0: entered allmulticast mode [ 1016.020403][ T4872] sit0: entered allmulticast mode [ 1016.434245][ T4872] ip6tnl0: entered allmulticast mode [ 1016.570227][ T4872] ip6gre0: entered allmulticast mode [ 1016.798433][ T4872] syz_tun: entered allmulticast mode [ 1016.967474][ T4872] ip6gretap0: entered allmulticast mode [ 1017.278902][ T4872] vcan0: entered allmulticast mode [ 1017.492579][ T4872] bond0: entered allmulticast mode [ 1017.508433][ T4872] bond_slave_0: entered allmulticast mode [ 1017.510754][ T4872] bond_slave_1: entered allmulticast mode [ 1017.748768][ T4872] dummy0: entered allmulticast mode [ 1017.870822][ T4872] nlmon0: entered allmulticast mode [ 1018.037566][ T4872] vxcan0: entered allmulticast mode [ 1018.088901][ T4872] vxcan1: entered allmulticast mode [ 1018.177545][ T4872] veth0: entered allmulticast mode [ 1018.308582][ T4872] veth1: entered allmulticast mode [ 1018.767020][ T4872] wg0: entered allmulticast mode [ 1019.018432][ T4872] wg1: entered allmulticast mode [ 1019.230439][ T4872] wg2: entered allmulticast mode [ 1019.363313][ T4872] veth0_to_bridge: entered allmulticast mode [ 1019.681013][ T4872] bridge_slave_0: entered allmulticast mode [ 1019.810085][ T4872] veth1_to_bridge: entered allmulticast mode [ 1019.920789][ T4872] bridge_slave_1: entered allmulticast mode [ 1020.027617][ T4872] veth0_to_bond: entered allmulticast mode [ 1020.309391][ T4872] veth1_to_bond: entered allmulticast mode [ 1020.638079][ T4872] veth0_to_team: entered allmulticast mode [ 1020.803069][ T4872] team_slave_0: entered allmulticast mode [ 1020.918269][ T4872] veth1_to_team: entered allmulticast mode [ 1021.030994][ T4872] team_slave_1: entered allmulticast mode [ 1021.062412][ T4872] veth0_to_batadv: entered allmulticast mode [ 1021.269173][ T4872] batadv_slave_0: entered allmulticast mode [ 1021.497636][ T4872] veth1_to_batadv: entered allmulticast mode [ 1021.703232][ T4872] batadv_slave_1: entered allmulticast mode [ 1021.936669][ T4872] xfrm0: entered allmulticast mode [ 1022.159139][ T4872] veth0_to_hsr: entered allmulticast mode [ 1022.483196][ T4872] hsr_slave_0: entered allmulticast mode [ 1022.649700][ T4872] veth1_to_hsr: entered allmulticast mode [ 1023.000049][ T4872] hsr_slave_1: entered allmulticast mode [ 1023.212000][ T4872] hsr0: entered allmulticast mode [ 1023.443834][ T4872] veth1_virt_wifi: entered allmulticast mode [ 1023.663226][ T4872] veth0_virt_wifi: entered allmulticast mode [ 1023.962914][ T4872] veth1_vlan: entered allmulticast mode [ 1024.183038][ T4872] veth0_vlan: entered allmulticast mode [ 1024.727791][ T4872] vlan0: entered allmulticast mode [ 1024.731307][ T4872] vlan1: entered allmulticast mode [ 1024.766956][ T4872] macvlan0: entered allmulticast mode [ 1024.960924][ T4872] macvlan1: entered allmulticast mode [ 1025.207193][ T4872] ipvlan0: entered allmulticast mode [ 1025.212822][ T4872] ipvlan1: entered allmulticast mode [ 1025.259152][ T4872] veth1_macvtap: entered allmulticast mode [ 1025.462208][ T4872] veth0_macvtap: entered allmulticast mode [ 1025.659470][ T4872] macvtap0: entered allmulticast mode [ 1025.839838][ T4872] macsec0: entered allmulticast mode [ 1025.980835][ T4872] geneve0: entered allmulticast mode [ 1026.086005][ T4872] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.087917][ T4872] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.089369][ T4872] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.090849][ T4872] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.098151][ T4872] geneve1: entered allmulticast mode [ 1026.197494][ T4872] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1026.418754][ T4872] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1026.523941][ T4872] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1026.641363][ T4872] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1033.923088][ T4480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.503684][ T4480] veth0_vlan: entered promiscuous mode [ 1089.962451][ T4480] veth1_vlan: entered promiscuous mode [ 1092.109447][ T4480] veth0_macvtap: entered promiscuous mode [ 1092.619009][ T4480] veth1_macvtap: entered promiscuous mode [ 1095.209937][ T4480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.212621][ T4480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.246577][ T4480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.248979][ T4480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.993691][ T26] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.152408][ T26] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.237104][ T26] bond0 (unregistering): Released all slaves [ 1117.522419][ T26] hsr_slave_0: left promiscuous mode [ 1117.628372][ T26] hsr_slave_1: left promiscuous mode [ 1154.750004][ T4940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.866150][ T4940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.301250][ T4940] hsr_slave_0: entered promiscuous mode [ 1179.343958][ T4940] hsr_slave_1: entered promiscuous mode [ 1179.387359][ T4940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.389061][ T4940] Cannot create hsr debugfs directory [ 1187.720547][ T4940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1187.862361][ T4940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1188.262704][ T4940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1188.553316][ T4940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1203.292282][ T4940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.043657][ T4940] veth0_vlan: entered promiscuous mode [ 1270.518969][ T4940] veth1_vlan: entered promiscuous mode [ 1272.472504][ T4940] veth0_macvtap: entered promiscuous mode [ 1272.971223][ T4940] veth1_macvtap: entered promiscuous mode [ 1275.650136][ T4940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.652560][ T4940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.670015][ T4940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.672293][ T4940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.559809][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.709318][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.081693][ T5470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 1308.259835][ T5472] syz.4.92 uses obsolete (PF_INET,SOCK_PACKET) [ 1310.224045][ T5466] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65 [ 1347.268190][ T5507] Zero length message leads to an empty skb [ 1352.943142][ T36] audit: type=1326 audit(1350.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1352.948649][ T36] audit: type=1326 audit(1350.960:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1352.952305][ T36] audit: type=1326 audit(1351.100:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1352.959096][ T36] audit: type=1326 audit(1351.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1352.962436][ T36] audit: type=1326 audit(1351.130:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1352.968310][ T36] audit: type=1326 audit(1351.130:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1352.973023][ T36] audit: type=1326 audit(1351.140:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1352.978682][ T36] audit: type=1326 audit(1351.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.3.101" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1369.992593][ T5532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.060382][ T5532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.366929][ T5575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.399946][ T5575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.460676][ T5587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1468.308154][ T5594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.373146][ T5594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.132830][ T5614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 1527.530182][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.588243][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.921617][ T5678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.147'. [ 1568.963099][ T26] bond0: (slave bond_slave_0): interface is now down [ 1568.972661][ T26] bond0: (slave bond_slave_1): interface is now down [ 1569.028777][ T26] bond0: (slave bond_slave_0): interface is now down [ 1569.030423][ T26] bond0: (slave bond_slave_1): interface is now down [ 1569.056226][ T26] bond0: (slave bond_slave_0): interface is now down [ 1569.057504][ T26] bond0: (slave bond_slave_1): interface is now down [ 1569.096360][ T26] bond0: (slave bond_slave_0): interface is now down [ 1569.097765][ T26] bond0: (slave bond_slave_1): interface is now down [ 1569.135001][ T26] bond0: (slave bond_slave_0): interface is now down [ 1569.136278][ T26] bond0: (slave bond_slave_1): interface is now down [ 1569.179305][ T26] bond0: (slave bond_slave_0): interface is now down [ 1569.180636][ T26] bond0: (slave bond_slave_1): interface is now down [ 1569.225722][ T26] bond0: (slave bond_slave_0): interface is now down [ 1569.227694][ T26] bond0: (slave bond_slave_1): interface is now down [ 1569.315561][ T26] bond0: now running without any active interface! [ 1656.240991][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1760.131450][ T5788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.190819][ T5788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.806242][ T5788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.919389][ T5788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.460214][ T5805] syz_tun: entered promiscuous mode [ 1795.463624][ T5805] macsec1: entered promiscuous mode [ 1795.518319][ T5805] macsec1: entered allmulticast mode [ 1795.519850][ T5805] syz_tun: entered allmulticast mode [ 1795.732076][ T5805] syz_tun: left allmulticast mode [ 1795.738445][ T5805] syz_tun: left promiscuous mode [ 1839.537278][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.853054][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.049790][ T5866] netlink: 'syz.3.206': attribute type 4 has an invalid length. [ 1866.743445][ T36] audit: type=1326 audit(1865.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz.3.211" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1866.752373][ T36] audit: type=1326 audit(1865.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz.3.211" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1866.776639][ T36] audit: type=1326 audit(1865.650:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz.3.211" exe="/syz-executor" sig=0 arch=c00000f3 syscall=174 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1866.782834][ T36] audit: type=1326 audit(1865.680:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz.3.211" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1866.822247][ T36] audit: type=1326 audit(1865.690:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz.3.211" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1887.819306][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.867447][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.703386][ T5951] bridge_slave_0: entered allmulticast mode [ 1967.803040][ T5982] x_tables: duplicate underflow at hook 3 [ 1969.191144][ T4483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1971.231113][ T4483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.226866][ T4483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.149440][ T4483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.629012][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 1987.968200][ T4483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1988.162715][ T4483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1988.308474][ T4483] bond0 (unregistering): Released all slaves [ 1991.317532][ T4483] hsr_slave_0: left promiscuous mode [ 1991.455846][ T4483] hsr_slave_1: left promiscuous mode [ 1991.893269][ T4483] veth1_macvtap: left promiscuous mode [ 1991.897415][ T4483] veth0_macvtap: left promiscuous mode [ 1991.900369][ T4483] veth1_vlan: left promiscuous mode [ 1991.902514][ T4483] veth0_vlan: left promiscuous mode [ 1998.449519][ T6043] sctp: [Deprecated]: syz.3.240 (pid 6043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1998.449519][ T6043] Use struct sctp_sack_info instead [ 2031.099529][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2031.344255][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.722681][ T5974] hsr_slave_0: entered promiscuous mode [ 2059.778880][ T5974] hsr_slave_1: entered promiscuous mode [ 2059.815559][ T5974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2059.817050][ T5974] Cannot create hsr debugfs directory [ 2071.828902][ T5974] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2072.069795][ T5974] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2072.432185][ T5974] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2072.682939][ T5974] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2088.372599][ T6391] netlink: 128 bytes leftover after parsing attributes in process `syz.3.255'. [ 2088.388419][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.255'. [ 2090.227006][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2136.677501][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.748447][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.158471][ T6466] bridge_slave_1: entered promiscuous mode [ 2147.691003][ T6463] bridge_slave_1: left promiscuous mode [ 2170.825002][ T5974] veth0_vlan: entered promiscuous mode [ 2171.457967][ T5974] veth1_vlan: entered promiscuous mode [ 2173.833950][ T5974] veth0_macvtap: entered promiscuous mode [ 2174.058435][ T5974] veth1_macvtap: entered promiscuous mode [ 2174.945367][ T5974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.948811][ T5974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.950397][ T5974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.952002][ T5974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2235.745840][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 2364.804148][ T4483] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.320090][ T4483] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2367.871204][ T4483] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.559724][ T4483] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.590970][ T4483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2378.053392][ T4483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2378.283723][ T4483] bond0 (unregistering): Released all slaves [ 2379.631658][ T4483] hsr_slave_0: left promiscuous mode [ 2379.681746][ T4483] hsr_slave_1: left promiscuous mode [ 2379.857642][ T4483] veth1_macvtap: left promiscuous mode [ 2379.859430][ T4483] veth0_macvtap: left promiscuous mode [ 2379.863359][ T4483] veth1_vlan: left promiscuous mode [ 2379.870715][ T4483] veth0_vlan: left promiscuous mode [ 2397.982473][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2398.382494][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2419.143937][ T6614] hsr_slave_0: entered promiscuous mode [ 2419.253272][ T6614] hsr_slave_1: entered promiscuous mode [ 2419.436399][ T6614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2419.457005][ T6614] Cannot create hsr debugfs directory [ 2426.706109][ T6614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2426.813116][ T6614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2427.158815][ T6614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2427.331064][ T6614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2436.547350][ T6614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2510.552775][ T6614] veth0_vlan: entered promiscuous mode [ 2511.708942][ T6614] veth1_vlan: entered promiscuous mode [ 2514.550789][ T6614] veth0_macvtap: entered promiscuous mode [ 2515.183305][ T6614] veth1_macvtap: entered promiscuous mode [ 2516.931424][ T6614] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2516.955853][ T6614] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2516.957528][ T6614] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2516.959539][ T6614] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.281574][ T7188] process 'syz.3.352' launched './file1' with NULL argv: empty string added [ 2676.386084][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.440892][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2687.460341][ T7263] pimreg: entered allmulticast mode [ 2779.375321][ T7359] mmap: syz.6.408 (7359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2790.008272][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2790.113756][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2804.168003][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.417'. [ 2804.293626][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.6.417'. [ 2817.371381][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2817.443144][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2821.605220][ T7398] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2839.640350][ T7412] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2844.247839][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2844.337323][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2943.742872][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2943.964244][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.868038][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.432216][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3158.845797][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3159.011121][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3247.404067][ T7544] hsr_slave_0: entered promiscuous mode [ 3247.610105][ T7544] hsr_slave_1: entered promiscuous mode [ 3247.798188][ T7544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3247.800277][ T7544] Cannot create hsr debugfs directory [ 3272.758704][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3273.161745][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3298.219164][ T7544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3303.420148][ T7544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3303.908150][ T7544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3304.281852][ T7544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3318.403231][ T7620] hsr_slave_0: entered promiscuous mode [ 3318.563206][ T7620] hsr_slave_1: entered promiscuous mode [ 3318.857468][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3318.859578][ T7620] Cannot create hsr debugfs directory [ 3336.705770][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3338.782330][ T7620] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3339.415733][ T7620] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3339.909094][ T7620] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3340.273050][ T7620] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3364.091443][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3435.940151][ T7544] veth0_vlan: entered promiscuous mode [ 3436.698112][ T7544] veth1_vlan: entered promiscuous mode [ 3438.459773][ T7544] veth0_macvtap: entered promiscuous mode [ 3438.719979][ T7544] veth1_macvtap: entered promiscuous mode [ 3441.481324][ T7544] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3441.482845][ T7544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3441.502856][ T7544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3441.530022][ T7544] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3480.158538][ T7620] veth0_vlan: entered promiscuous mode [ 3480.838396][ T7620] veth1_vlan: entered promiscuous mode [ 3484.751892][ T7620] veth0_macvtap: entered promiscuous mode [ 3485.318661][ T7620] veth1_macvtap: entered promiscuous mode [ 3488.068543][ T7620] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3488.070343][ T7620] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3488.072049][ T7620] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3488.073576][ T7620] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3530.529829][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3530.671783][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3534.377771][ T37] INFO: task syz.3.472:7538 blocked for more than 430 seconds. [ 3534.412448][ T37] Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 3534.413912][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3534.439353][ T37] task:syz.3.472 state:D stack:0 pid:7538 tgid:7536 ppid:4480 flags:0x00000006 [ 3534.443738][ T37] Call Trace: SYZFAIL: failed to recv rpc [ 3534.501721][ T37] [] __schedule+0xd5a/0x3886 [ 3534.528580][ T37] [] schedule+0xc4/0x324 [ 3534.529924][ T37] [] schedule_timeout+0x1e2/0x296 [ 3534.531021][ T37] [] __wait_for_common+0x1ca/0x4b6 [ 3534.532464][ T37] [] wait_for_completion+0x1a/0x22 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3534.534098][ T37] [] rcu_barrier+0x2dc/0x6cc [ 3534.626514][ T37] [] netdev_run_todo+0x294/0x105e [ 3534.628861][ T37] [] rtnl_unlock+0x14/0x1c [ 3534.630673][ T37] [] vlan_ioctl_handler+0x22c/0x956 [ 3534.632216][ T37] [] sock_ioctl+0x1f6/0x61a [ 3534.633400][ T37] [] __riscv_sys_ioctl+0x182/0x1e6 [ 3534.689165][ T37] [] syscall_handler+0x94/0x118 [ 3534.691572][ T37] [] do_trap_ecall_u+0x1aa/0x216 [ 3534.693704][ T37] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3534.797850][ T37] [ 3534.797850][ T37] Showing all locks held in the system: [ 3534.799718][ T37] 1 lock held by khungtaskd/37: [ 3534.801066][ T37] #0: ffffffff87fcc100 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x68/0x2d6 [ 3534.860367][ T37] 2 locks held by kworker/1:2/902: [ 3534.862392][ T37] 1 lock held by klogd/2971: [ 3534.863447][ T37] 2 locks held by getty/3138: [ 3534.898127][ T37] #0: ff60000017f2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 3534.901888][ T37] #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd7c/0x129a [ 3534.945064][ T37] 1 lock held by syz-executor/3168: [ 3534.946221][ T37] 2 locks held by kworker/1:3/3821: [ 3534.960695][ T37] 2 locks held by kworker/1:0/4958: [ 3534.962602][ T37] 2 locks held by kworker/1:4/7069: [ 3534.963506][ T37] 3 locks held by kworker/0:6/7110: [ 3535.006182][ T37] 2 locks held by kworker/1:5/7486: [ 3535.008061][ T37] 3 locks held by syz.6.469/7529: [ 3535.025203][ T37] 2 locks held by syz.3.472/7538: [ 3535.026887][ T37] #0: ffffffff89381ea8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x1dc/0x61a [ 3535.030998][ T37] #1: ffffffff87fdc6c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x56/0x6cc [ 3535.113133][ T37] 4 locks held by kworker/1:6/7543: [ 3535.125546][ T37] 2 locks held by kworker/1:7/7918: [ 3535.126803][ T37] 3 locks held by kworker/1:8/7970: [ 3535.128054][ T37] 4 locks held by kworker/u8:1/8122: [ 3535.129190][ T37] #0: ff60000011e81948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x848/0x1dae [ 3535.131996][ T37] #1: ff20000000de7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x870/0x1dae [ 3535.210632][ T37] #2: ffffffff89397670 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xda/0x984 [ 3535.245960][ T37] #3: ffffffff87fdc6c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x56/0x6cc [ 3535.249621][ T37] 1 lock held by syz.7.482/8314: [ 3535.250638][ T37] [ 3535.251325][ T37] ============================================= [ 3535.251325][ T37] [ 3535.252614][ T37] NMI backtrace for cpu 0 [ 3535.253487][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 3535.254852][ T37] Hardware name: riscv-virtio,qemu (DT) [ 3535.255566][ T37] Call Trace: [ 3535.256124][ T37] [] dump_backtrace+0x2e/0x3c [ 3535.257054][ T37] [] show_stack+0x34/0x40 [ 3535.258224][ T37] [] dump_stack_lvl+0x122/0x196 [ 3535.259858][ T37] [] dump_stack+0x1c/0x24 [ 3535.260897][ T37] [] nmi_cpu_backtrace+0x39c/0x39e [ 3535.261837][ T37] [] nmi_trigger_cpumask_backtrace+0x2b6/0x456 [ 3535.262824][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 3535.263860][ T37] [] watchdog+0xcfa/0x1178 [ 3535.264786][ T37] [] kthread+0x28c/0x3a6 [ 3535.265645][ T37] [] ret_from_fork+0xe/0x18 [ 3535.269936][ T37] Sending NMI from CPU 0 to CPUs 1: [ 3535.272060][ C1] NMI backtrace for cpu 1 [ 3535.273242][ C1] CPU: 1 UID: 0 PID: 7543 Comm: kworker/1:6 Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 3535.274296][ C1] Hardware name: riscv-virtio,qemu (DT) [ 3535.275245][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 3535.276605][ C1] epc : _raw_spin_unlock_irqrestore+0x36/0xd6 [ 3535.278161][ C1] ra : _raw_spin_unlock_irqrestore+0x86/0xd6 [ 3535.279689][ C1] epc : ffffffff85ffb7aa ra : ffffffff85ffb7fa sp : ff200000000168d0 [ 3535.281231][ C1] gp : ffffffff897bea80 tp : ff60000019fe3480 t0 : ff60000019fe3fa0 [ 3535.282709][ C1] t1 : fffffffef214fc63 t2 : 0000000000000001 s0 : ff200000000168f0 [ 3535.284250][ C1] s1 : 0000000000000002 a0 : 0000000000000001 a1 : ffffffff8643e620 [ 3535.285782][ C1] a2 : 0000000000000003 a3 : 0000000000000102 a4 : 0000000000000001 [ 3535.287246][ C1] a5 : 0000000000000000 a6 : ff60000019fe3fe8 a7 : 1fec0000033fc7fd [ 3535.288832][ C1] s2 : ffffffff90a7e318 s3 : ff200000000169a0 s4 : 0000000000000027 [ 3535.291038][ C1] s5 : ffffffff90a7e318 s6 : ff60000031339440 s7 : 1fe4000000002d20 [ 3535.292483][ C1] s8 : ffffffff86451260 s9 : ffffffff90a7e310 s10: 0000000200000022 [ 3535.293929][ C1] s11: 1fec00000646a485 t3 : 1fec00000527a934 t4 : fffffffef214fc63 [ 3535.295586][ C1] t5 : fffffffef214fc64 t6 : 1fec0000033fc811 [ 3535.297162][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 3535.299123][ C1] [] _raw_spin_unlock_irqrestore+0x36/0xd6 [ 3535.301081][ C1] [] debug_object_activate+0x298/0x378 [ 3535.303001][ C1] [] __call_rcu_common.constprop.0+0x3c/0x934 [ 3535.305296][ C1] [] call_rcu+0xc/0x14 [ 3535.306913][ C1] [] kmem_cache_free+0x43e/0x5f4 [ 3535.308710][ C1] [] nf_conntrack_free+0x10c/0x4a4 [ 3535.310451][ C1] [] nf_ct_destroy+0x176/0x272 [ 3535.312088][ C1] [] nf_conntrack_in+0x728/0x1b28 [ 3535.313713][ C1] [] ipv4_conntrack_local+0xf6/0x200 [ 3535.315524][ C1] [] nf_hook_slow+0xb8/0x1ec [ 3535.317338][ C1] [] __ip_local_out+0x498/0x9ce [ 3535.319186][ C1] [] ip_local_out+0x2e/0x1a8 [ 3535.320959][ C1] [] synproxy_send_tcp.isra.0+0x3de/0x5d2 [ 3535.322580][ C1] [] synproxy_send_client_synack+0x940/0xc9a [ 3535.324372][ C1] [] nft_synproxy_do_eval+0x8ac/0xa52 [ 3535.326082][ C1] [] nft_synproxy_eval+0x28/0x36 [ 3535.327630][ C1] [] nft_do_chain+0x328/0x1598 [ 3535.329262][ C1] [] nft_do_chain_inet+0x180/0x316 [ 3535.330825][ C1] [] nf_hook_slow+0xb8/0x1ec [ 3535.332448][ C1] [] ip_local_deliver+0x2ea/0x568 [ 3535.334156][ C1] [] ip_rcv_finish+0x1b0/0x2d2 [ 3535.335687][ C1] [] ip_rcv+0xd6/0x44e [ 3535.337179][ C1] [] __netif_receive_skb_one_core+0x106/0x16e [ 3535.338956][ C1] [] __netif_receive_skb+0x2c/0x144 [ 3535.340614][ C1] [] process_backlog+0x4fc/0x1cbc [ 3535.342018][ C1] [] __napi_poll.constprop.0+0xaa/0x4b8 [ 3535.342982][ C1] [] net_rx_action+0xa12/0xf10 [ 3535.343938][ C1] [] handle_softirqs+0x4a6/0x10de [ 3535.344873][ C1] [] __do_softirq+0x12/0x1a [ 3535.345827][ C1] [] ___do_softirq+0x18/0x20 [ 3535.346663][ C1] [] call_on_irq_stack+0x32/0x40 [ 3535.546357][ T8315] capability: warning: `syz.7.482' uses deprecated v2 capabilities in a way that may be insecure [ 3535.931218][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 3535.932675][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 3535.934423][ T37] Hardware name: riscv-virtio,qemu (DT) [ 3535.935129][ T37] Call Trace: [ 3535.935703][ T37] [] dump_backtrace+0x2e/0x3c [ 3535.936741][ T37] [] show_stack+0x34/0x40 [ 3535.937637][ T37] [] dump_stack_lvl+0x108/0x196 [ 3535.938683][ T37] [] dump_stack+0x1c/0x24 [ 3535.939569][ T37] [] panic+0x388/0x86c [ 3535.940334][ T37] [] watchdog+0x78a/0x1178 [ 3535.941169][ T37] [] kthread+0x28c/0x3a6 [ 3535.942112][ T37] [] ret_from_fork+0xe/0x18 [ 3535.943380][ T37] SMP: stopping secondary CPUs [ 3535.947673][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:43:17 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff853ecd4e mhartid 0000000000000000 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000200 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff85ffc980 vstvec 0000000000000000 mepc ffffffff8001fb16 sepc ffffffff800c535a vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a07c9000000bd0c2 x0/zero 0000000000000000 x1/ra ffffffff853ecd4e x2/sp ff20000000006810 x3/gp ffffffff897bea80 x4/tp ff600000142a1a40 x5/t0 ff600000142a2560 x6/t1 ffebffff0385ec48 x7/t2 000000000000000e x8/s0 ff20000000006aa0 x9/s1 ff6000001ad9b300 x10/a0 0000000000000000 x11/a1 ffffffff8643e8a0 x12/a2 0000000000f00000 x13/a3 ffffffff8534cb6a x14/a4 0000000000000000 x15/a5 ff600000142a1a40 x16/a6 0000000000f00000 x17/a7 1fec0000028544bf x18/s2 ff6000003b58db40 x19/s3 ffffffff871f1920 x20/s4 ff6000003b477800 x21/s5 0000000000000000 x22/s6 ff6000001ad9bab8 x23/s7 0000000000000000 x24/s8 ff6000006ec37018 x25/s9 0000000000000000 x26/s10 ff20000000006a20 x27/s11 0000000002e2b892 x28/t3 ffffffff81a676ee x29/t4 ffebffff0385ec48 x30/t5 ffebffff0385ec49 x31/t6 1fec0000028544dd f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff852a5d58 mhartid 0000000000000001 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff85ffc980 vstvec 0000000000000000 mepc ffffffff80249f5c sepc ffffffff816ff274 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a072c000000b29e4 x0/zero 0000000000000000 x1/ra ffffffff84c94f92 x2/sp ff200000001a6d30 x3/gp ffffffff897bea80 x4/tp ff60000012aa0000 x5/t0 ff60000012aa0b20 x6/t1 ff60000012aa0b70 x7/t2 0000000000000006 x8/s0 ff200000001a6d30 x9/s1 ff600000136988c0 x10/a0 ff6000003bbff8c0 x11/a1 0000000000000000 x12/a2 0000000000000006 x13/a3 ff6000003bbff9c0 x14/a4 0000000000000078 x15/a5 0000000000000820 x16/a6 ffffffff808db38c x17/a7 0000000056e543b7 x18/s2 ff200000001a69c0 x19/s3 ff60000012aa0000 x20/s4 ffffffffffffffff x21/s5 0000000000000000 x22/s6 ffffffff80010394 x23/s7 dfffffff00000000 x24/s8 dfffffff00000000 x25/s9 ffffffff85ffc980 x26/s10 0000000000007fff x27/s11 ff200000001a6920 x28/t3 1fec000002554163 x29/t4 000000000000000f x30/t5 8374b928a67c3bc0 x31/t6 1fec000002554172 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000