last executing test programs: 12.047212579s ago: executing program 2 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.490209246s ago: executing program 3 (id=15): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x4, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0xfffffffd, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0x5, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x103, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0x8, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x1, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x9cd97d8320141b74}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r2, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 10.211913753s ago: executing program 2 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 9.863772051s ago: executing program 3 (id=19): openat$zero(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') 9.05911526s ago: executing program 2 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r5, 0x0, 0x0) 6.082921393s ago: executing program 2 (id=21): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.866236938s ago: executing program 1 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x1, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x82, 0x8, 0x8, 0xfbee}, 0x104, 0xfffffffd, 0x5, 0x5, 0x40e, 0x4, 0x5, 0x18, 0x5, 0x0, {0x6, 0xc, 0xfffffffc, 0x1000, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.863977208s ago: executing program 0 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0a00fa1b04"], 0x7) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.756592611s ago: executing program 3 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.54395597s ago: executing program 0 (id=25): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000000480)=""/115, 0x73, 0x40000000, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 4.54335474s ago: executing program 3 (id=26): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x1c2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 4.332025405s ago: executing program 3 (id=27): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x4e5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.256008417s ago: executing program 1 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.302791714s ago: executing program 3 (id=29): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) write$P9_RREAD(r2, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESOCT=r4], 0xb) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) 2.124890628s ago: executing program 0 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 1.888548854s ago: executing program 1 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.705145658s ago: executing program 0 (id=32): openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) socket$kcm(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1.567286122s ago: executing program 2 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x55d6, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54815}, 0x4880) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 734.898052ms ago: executing program 1 (id=34): socket(0x10, 0x3, 0x0) r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) inotify_init1(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 609.835105ms ago: executing program 0 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 431.240259ms ago: executing program 1 (id=36): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="0b03", 0x2}], 0x1) close(0x3) 255.280354ms ago: executing program 2 (id=37): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "6dda62fabda0bbb8edb01b0b8cac047c1ed3077e61c6f1252cf9fd910100c700", "34606a69c717386e948dc85a4b3fd4d46d43bdcfa1b48baf7183275d8589c02a", "6d5409ca8570faef475f263917c354d5fd14b963fdf347158ed5d7b61d93bcd7", "ed345380f765284e39ccb145efa1b53518232b8caf4f4ba84b1116160dc2dd98", "f7218cf92b79f6cf216324ba6323935c1747aeccb1359d6e6212450241edd9c8", "6e41072411052a470c124de2", 0x4, 0x2, 0x5396, 0x5, 0x3724}}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x260, 0x130, 0x260, 0x0, 0x98, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'xfrm0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x8, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xff, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00'}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) syz_usbip_server_init(0x1) 131.511747ms ago: executing program 0 (id=38): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0xaad80) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000010000000000000000000000000001000107144e230005000000003a00"/64, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffbfffff00000000000000001f006e4d351176cea71fffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd28, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) 0s ago: executing program 1 (id=39): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 84.578902][ T5766] cgroup: Unknown subsys name 'net' [ 84.718576][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.526388][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.660514][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.668853][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.687154][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.696475][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.697302][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.708722][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.713072][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.721656][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.734589][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.737802][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.744549][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.751009][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.759643][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.771475][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.779817][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.779955][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.794811][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.803274][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.812657][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.820457][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.828492][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.835861][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.866361][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.873892][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.381050][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 89.403794][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 89.506051][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 89.609222][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.715026][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.729285][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.737342][ T5780] bridge_slave_0: entered allmulticast mode [ 89.745625][ T5780] bridge_slave_0: entered promiscuous mode [ 89.776794][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.784220][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.791542][ T5778] bridge_slave_0: entered allmulticast mode [ 89.799180][ T5778] bridge_slave_0: entered promiscuous mode [ 89.832393][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.841902][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.849302][ T5780] bridge_slave_1: entered allmulticast mode [ 89.856415][ T5780] bridge_slave_1: entered promiscuous mode [ 89.886260][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.893555][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.901052][ T5778] bridge_slave_1: entered allmulticast mode [ 89.908079][ T5778] bridge_slave_1: entered promiscuous mode [ 89.926749][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.934772][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.942539][ T5781] bridge_slave_0: entered allmulticast mode [ 89.951122][ T5781] bridge_slave_0: entered promiscuous mode [ 89.960351][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.967618][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.975394][ T5781] bridge_slave_1: entered allmulticast mode [ 89.982938][ T5781] bridge_slave_1: entered promiscuous mode [ 90.004046][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.043739][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.063206][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.085740][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.148640][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.176090][ T5780] team0: Port device team_slave_0 added [ 90.186701][ T5780] team0: Port device team_slave_1 added [ 90.196704][ T5778] team0: Port device team_slave_0 added [ 90.206642][ T5778] team0: Port device team_slave_1 added [ 90.215617][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.294848][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.302216][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.309638][ T5779] bridge_slave_0: entered allmulticast mode [ 90.316723][ T5779] bridge_slave_0: entered promiscuous mode [ 90.328253][ T5781] team0: Port device team_slave_0 added [ 90.339632][ T5781] team0: Port device team_slave_1 added [ 90.346664][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.355133][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.383431][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.405596][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.413098][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.421031][ T5779] bridge_slave_1: entered allmulticast mode [ 90.428190][ T5779] bridge_slave_1: entered promiscuous mode [ 90.458400][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.465673][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.492063][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.503988][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.514264][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.541101][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.606021][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.613221][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.642780][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.655195][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.662802][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.689393][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.702522][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.709852][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.735964][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.750894][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.763630][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.828482][ T5780] hsr_slave_0: entered promiscuous mode [ 90.835500][ T5780] hsr_slave_1: entered promiscuous mode [ 90.871296][ T5779] team0: Port device team_slave_0 added [ 90.906702][ T5781] hsr_slave_0: entered promiscuous mode [ 90.912328][ T5794] Bluetooth: hci2: command tx timeout [ 90.912757][ T5794] Bluetooth: hci1: command tx timeout [ 90.919316][ T5791] Bluetooth: hci0: command tx timeout [ 90.927428][ T5794] Bluetooth: hci3: command tx timeout [ 90.935610][ T5781] hsr_slave_1: entered promiscuous mode [ 90.947808][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.956062][ T5781] Cannot create hsr debugfs directory [ 90.964886][ T5779] team0: Port device team_slave_1 added [ 91.014988][ T5778] hsr_slave_0: entered promiscuous mode [ 91.021539][ T5778] hsr_slave_1: entered promiscuous mode [ 91.027780][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.035452][ T5778] Cannot create hsr debugfs directory [ 91.061878][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.068919][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.095432][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.108897][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.116190][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.146749][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.380438][ T5779] hsr_slave_0: entered promiscuous mode [ 91.387727][ T5779] hsr_slave_1: entered promiscuous mode [ 91.396444][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.404776][ T5779] Cannot create hsr debugfs directory [ 91.706101][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.720211][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.753749][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.793119][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.830662][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.856819][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.867648][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.888633][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.002286][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.029876][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.072489][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.104662][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.150102][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.169670][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.197156][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.206102][ T28] cfg80211: failed to load regulatory.db [ 92.218261][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.272419][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.326866][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.356242][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.375125][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.382532][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.435426][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.442683][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.466727][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.516613][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.523839][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.573671][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.580927][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.617244][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.684923][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.742298][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.795544][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.816061][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.823364][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.881288][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.888509][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.927101][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.934379][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.944686][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.951965][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.989974][ T51] Bluetooth: hci0: command tx timeout [ 92.992910][ T5791] Bluetooth: hci1: command tx timeout [ 92.995467][ T51] Bluetooth: hci2: command tx timeout [ 93.005575][ T5794] Bluetooth: hci3: command tx timeout [ 93.285400][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.358746][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.463094][ T5780] veth0_vlan: entered promiscuous mode [ 93.523899][ T5781] veth0_vlan: entered promiscuous mode [ 93.558104][ T5780] veth1_vlan: entered promiscuous mode [ 93.599871][ T5781] veth1_vlan: entered promiscuous mode [ 93.633588][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.703916][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.740472][ T5781] veth0_macvtap: entered promiscuous mode [ 93.755331][ T5780] veth0_macvtap: entered promiscuous mode [ 93.778081][ T5781] veth1_macvtap: entered promiscuous mode [ 93.796724][ T5780] veth1_macvtap: entered promiscuous mode [ 93.854448][ T5779] veth0_vlan: entered promiscuous mode [ 93.873845][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.882483][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.896751][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.909576][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.926019][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.946584][ T5778] veth0_vlan: entered promiscuous mode [ 93.958477][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.969165][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.977919][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988558][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004106][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.016603][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.028166][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.038027][ T5779] veth1_vlan: entered promiscuous mode [ 94.064392][ T5778] veth1_vlan: entered promiscuous mode [ 94.091072][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.100965][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.110864][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.120297][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.213798][ T5779] veth0_macvtap: entered promiscuous mode [ 94.255865][ T5779] veth1_macvtap: entered promiscuous mode [ 94.286121][ T5778] veth0_macvtap: entered promiscuous mode [ 94.326933][ T5778] veth1_macvtap: entered promiscuous mode [ 94.327770][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.350884][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.352682][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.375893][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.387220][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.401109][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.413008][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.432895][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.444628][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.454593][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.465289][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.476611][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.529536][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538366][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548926][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.557996][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.590449][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.598387][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.624199][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.635748][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.646043][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.656697][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.667224][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.678641][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.690750][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.743715][ T4417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.760128][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.770986][ T4417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.779322][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.792100][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.802880][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.813012][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.825130][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.842918][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.854014][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.873422][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.926299][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.944842][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.954802][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.963757][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069689][ T5791] Bluetooth: hci1: command tx timeout [ 95.069717][ T5787] Bluetooth: hci0: command tx timeout [ 95.075394][ T51] Bluetooth: hci2: command tx timeout [ 95.082362][ T5794] Bluetooth: hci3: command tx timeout [ 95.119899][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.127835][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.318795][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.334460][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.499186][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.520794][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.613997][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.672659][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.007355][ T5870] syz.0.6[5870]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.044253][ T5865] loop3: detected capacity change from 0 to 512 [ 97.152537][ T5794] Bluetooth: hci3: command tx timeout [ 97.158038][ T5794] Bluetooth: hci0: command tx timeout [ 97.164130][ T5794] Bluetooth: hci2: command tx timeout [ 97.169692][ T5794] Bluetooth: hci1: command tx timeout [ 97.274026][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.294785][ T5870] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 97.456449][ T5876] trusted_key: syz.1.7 sent an empty control message without MSG_MORE. [ 97.970361][ T27] audit: type=1800 audit(1785812206.525:2): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 98.553783][ T5883] process 'syz.0.6' launched './file1' with NULL argv: empty string added [ 99.348500][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.261736][ T5907] capability: warning: `syz.3.10' uses deprecated v2 capabilities in a way that may be insecure [ 101.372734][ T5902] tipc: Started in network mode [ 101.378938][ T5902] tipc: Node identity ba4fc9fbb60e, cluster identity 4711 [ 101.392923][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.403894][ T5902] tipc: Enabled bearer , priority 0 [ 101.682360][ T5902] tipc: Resetting bearer [ 101.755137][ T5898] tipc: Disabling bearer [ 101.767994][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 105.639002][ C0] sched: RT throttling activated [ 106.047757][ T5935] bridge0: port 3(erspan0) entered blocking state [ 106.054859][ T5935] bridge0: port 3(erspan0) entered disabled state [ 106.061958][ T5935] erspan0: entered allmulticast mode [ 106.070103][ T5935] erspan0: entered promiscuous mode [ 106.077277][ T5935] bridge0: port 3(erspan0) entered blocking state [ 106.084227][ T5935] bridge0: port 3(erspan0) entered forwarding state [ 106.095524][ T5936] erspan0: left allmulticast mode [ 106.101566][ T5936] erspan0: left promiscuous mode [ 106.107535][ T5936] bridge0: port 3(erspan0) entered disabled state [ 106.397100][ T5943] syzkaller0: entered promiscuous mode [ 106.482662][ T5943] syzkaller0: entered allmulticast mode [ 109.169429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.579084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.325910][ T5982] tipc: Enabled bearer , priority 0 [ 111.376267][ T5982] syzkaller0: entered promiscuous mode [ 111.421178][ T5982] syzkaller0: entered allmulticast mode [ 111.580150][ T5982] tipc: Resetting bearer [ 111.610888][ T5981] tipc: Resetting bearer [ 111.673206][ T5981] tipc: Disabling bearer [ 112.007297][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 112.021098][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 112.033854][ T6001] netlink: 'syz.2.37': attribute type 18 has an invalid length. [ 112.049612][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.194514][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.38'. [ 112.218618][ T6007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.38'. [ 112.297283][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.409280][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.530678][ T23] usb 1-1: Dual-Role OTG device on HNP port [ 113.131792][ T23] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 113.144665][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.380604][ C1] ------------[ cut here ]------------ [ 113.386636][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 113.394009][ C1] WARNING: CPU: 1 PID: 23 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 113.403905][ C1] Modules linked in: [ 113.407950][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 113.415374][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.425501][ C1] Workqueue: usb_hub_wq hub_event [ 113.430643][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 113.436087][ C1] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 113.455756][ C1] RSP: 0000:ffffc900001f0790 EFLAGS: 00010046 [ 113.461979][ C1] RAX: 648b2c692b5bdf00 RBX: ffff888141ac40e0 RCX: ffff88801c245a00 [ 113.470049][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 113.478081][ C1] RBP: 0000000000000081 R08: ffffc900001f0387 R09: 1ffff9200003e070 [ 113.486134][ C1] R10: dffffc0000000000 R11: fffff5200003e071 R12: dffffc0000000000 [ 113.494166][ C1] R13: ffff888141ac410d R14: ffff888141ac40e8 R15: ffff888024f35d3a [ 113.502193][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 113.511178][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.517806][ C1] CR2: 00007fe59f5a1796 CR3: 0000000025749000 CR4: 00000000003506e0 [ 113.525831][ C1] Call Trace: [ 113.529163][ C1] [ 113.532057][ C1] hidg_set_alt+0x12a/0xa10 [ 113.536630][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 113.542076][ C1] set_config+0x735/0xff0 [ 113.546935][ C1] composite_setup+0x1df4/0x33a0 [ 113.551983][ C1] configfs_composite_setup+0xc7/0x100 [ 113.557598][ C1] dummy_timer+0x1324/0x34e0 [ 113.562281][ C1] ? mark_lock+0x94/0x320 [ 113.566674][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 113.571763][ C1] ? lock_chain_count+0x20/0x20 [ 113.576706][ C1] ? dummy_free_streams+0x520/0x520 [ 113.581980][ C1] ? dummy_free_streams+0x520/0x520 [ 113.587418][ C1] __hrtimer_run_queues+0x525/0xc10 [ 113.592707][ C1] ? hrtimer_interrupt+0x980/0x980 [ 113.597872][ C1] ? read_tsc+0x9/0x20 [ 113.602010][ C1] hrtimer_run_softirq+0x177/0x290 [ 113.607346][ C1] handle_softirqs+0x27d/0x820 [ 113.612172][ C1] ? read_tsc+0x9/0x20 [ 113.616292][ C1] ? ktime_get+0x24b/0x280 [ 113.620780][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 113.625602][ C1] ? do_softirq+0x1a0/0x1a0 [ 113.630163][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 113.635434][ C1] __irq_exit_rcu+0xd3/0x190 [ 113.640083][ C1] ? irq_exit_rcu+0x20/0x20 [ 113.644663][ C1] irq_exit_rcu+0x9/0x20 [ 113.649021][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 113.654729][ C1] [ 113.657707][ C1] [ 113.660695][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.666740][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 113.673312][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 113.693068][ C1] RSP: 0000:ffffc900001d6fe0 EFLAGS: 00000206 [ 113.699384][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 648b2c692b5bdf00 [ 113.707611][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 113.715820][ C1] RBP: ffffc900001d7070 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 113.723858][ C1] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 113.731897][ C1] R13: dffffc0000000000 R14: ffff888141ac4000 R15: 1ffff9200003adfc [ 113.739963][ C1] ? _raw_spin_unlock+0x40/0x40 [ 113.744985][ C1] ? kobject_get+0xcc/0x120 [ 113.749555][ C1] dummy_urb_enqueue+0x587/0x780 [ 113.754557][ C1] usb_hcd_submit_urb+0x318/0x1aa0 [ 113.759831][ C1] ? __init_swait_queue_head+0xa8/0x140 [ 113.765447][ C1] usb_start_wait_urb+0x140/0x580 [ 113.770549][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 113.776893][ C1] usb_control_msg+0x235/0x3e0 [ 113.781763][ C1] usb_set_configuration+0x12a8/0x2150 [ 113.787380][ C1] usb_generic_driver_probe+0x8d/0x150 [ 113.792993][ C1] usb_probe_device+0x12a/0x260 [ 113.797946][ C1] ? usb_register_device_driver+0x230/0x230 [ 113.803927][ C1] really_probe+0x247/0xae0 [ 113.808497][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 113.813761][ C1] __driver_probe_device+0x1f5/0x390 [ 113.819115][ C1] driver_probe_device+0x4f/0x420 [ 113.824210][ C1] __device_attach_driver+0x2ca/0x510 [ 113.829657][ C1] bus_for_each_drv+0x252/0x2e0 [ 113.834573][ C1] ? coredump_store+0x90/0x90 [ 113.839312][ C1] ? bus_find_device+0x300/0x300 [ 113.844329][ C1] __device_attach+0x2c1/0x420 [ 113.849173][ C1] ? device_attach+0x20/0x20 [ 113.853824][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 113.859272][ C1] bus_probe_device+0x180/0x260 [ 113.864215][ C1] device_add+0x87c/0xc40 [ 113.868614][ C1] usb_new_device+0x995/0x1550 [ 113.873441][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 113.878355][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.883626][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 113.888901][ C1] hub_event+0x29d5/0x4a80 [ 113.893555][ C1] ? hub_post_resume+0x120/0x120 [ 113.898678][ C1] ? read_lock_is_recursive+0x20/0x20 [ 113.904481][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.909757][ C1] ? process_scheduled_works+0x975/0x1600 [ 113.915552][ C1] ? process_scheduled_works+0x975/0x1600 [ 113.921349][ C1] process_scheduled_works+0xa60/0x1600 [ 113.927005][ C1] ? worker_attach_to_pool+0x370/0x370 [ 113.932560][ C1] ? assign_work+0x3cc/0x5d0 [ 113.937500][ C1] worker_thread+0xa5e/0xfe0 [ 113.942200][ C1] kthread+0x2fa/0x390 [ 113.946329][ C1] ? pr_cont_work+0x550/0x550 [ 113.951071][ C1] ? kthread_blkcg+0xd0/0xd0 [ 113.955826][ C1] ret_from_fork+0x48/0x80 [ 113.960318][ C1] ? kthread_blkcg+0xd0/0xd0 [ 113.964969][ C1] ret_from_fork_asm+0x11/0x20 [ 113.969811][ C1] [ 113.972892][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.980228][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 113.987576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.997688][ C1] Workqueue: usb_hub_wq hub_event [ 114.002789][ C1] Call Trace: [ 114.006134][ C1] [ 114.009030][ C1] dump_stack_lvl+0x18c/0x250 [ 114.013768][ C1] ? show_regs_print_info+0x20/0x20 [ 114.019025][ C1] ? load_image+0x420/0x420 [ 114.023608][ C1] panic+0x2ca/0x720 [ 114.027577][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 114.032148][ C1] ? ret_from_fork_asm+0x11/0x20 [ 114.037155][ C1] __warn+0x2e0/0x470 [ 114.041208][ C1] ? usb_ep_enable+0x263/0x440 [ 114.046030][ C1] ? usb_ep_enable+0x263/0x440 [ 114.050853][ C1] report_bug+0x2be/0x4f0 [ 114.055252][ C1] ? usb_ep_enable+0x263/0x440 [ 114.060071][ C1] ? usb_ep_enable+0x263/0x440 [ 114.064897][ C1] ? usb_ep_enable+0x265/0x440 [ 114.069771][ C1] handle_bug+0xcf/0x120 [ 114.074083][ C1] exc_invalid_op+0x1a/0x50 [ 114.078725][ C1] asm_exc_invalid_op+0x1a/0x20 [ 114.083642][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 114.089082][ C1] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 114.108750][ C1] RSP: 0000:ffffc900001f0790 EFLAGS: 00010046 [ 114.115047][ C1] RAX: 648b2c692b5bdf00 RBX: ffff888141ac40e0 RCX: ffff88801c245a00 [ 114.123088][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 114.131129][ C1] RBP: 0000000000000081 R08: ffffc900001f0387 R09: 1ffff9200003e070 [ 114.139165][ C1] R10: dffffc0000000000 R11: fffff5200003e071 R12: dffffc0000000000 [ 114.147202][ C1] R13: ffff888141ac410d R14: ffff888141ac40e8 R15: ffff888024f35d3a [ 114.155272][ C1] hidg_set_alt+0x12a/0xa10 [ 114.159855][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 114.165384][ C1] set_config+0x735/0xff0 [ 114.169818][ C1] composite_setup+0x1df4/0x33a0 [ 114.174860][ C1] configfs_composite_setup+0xc7/0x100 [ 114.180388][ C1] dummy_timer+0x1324/0x34e0 [ 114.185069][ C1] ? mark_lock+0x94/0x320 [ 114.189466][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 114.194562][ C1] ? lock_chain_count+0x20/0x20 [ 114.199493][ C1] ? dummy_free_streams+0x520/0x520 [ 114.204761][ C1] ? dummy_free_streams+0x520/0x520 [ 114.210020][ C1] __hrtimer_run_queues+0x525/0xc10 [ 114.215291][ C1] ? hrtimer_interrupt+0x980/0x980 [ 114.220457][ C1] ? read_tsc+0x9/0x20 [ 114.224595][ C1] hrtimer_run_softirq+0x177/0x290 [ 114.229767][ C1] handle_softirqs+0x27d/0x820 [ 114.234602][ C1] ? read_tsc+0x9/0x20 [ 114.238738][ C1] ? ktime_get+0x24b/0x280 [ 114.243240][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 114.248083][ C1] ? do_softirq+0x1a0/0x1a0 [ 114.252656][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 114.257931][ C1] __irq_exit_rcu+0xd3/0x190 [ 114.262592][ C1] ? irq_exit_rcu+0x20/0x20 [ 114.267280][ C1] irq_exit_rcu+0x9/0x20 [ 114.271588][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 114.277304][ C1] [ 114.280300][ C1] [ 114.283293][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.289333][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 114.295902][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 114.315665][ C1] RSP: 0000:ffffc900001d6fe0 EFLAGS: 00000206 [ 114.321993][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 648b2c692b5bdf00 [ 114.330022][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 114.338080][ C1] RBP: ffffc900001d7070 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 114.346107][ C1] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 114.354152][ C1] R13: dffffc0000000000 R14: ffff888141ac4000 R15: 1ffff9200003adfc [ 114.362469][ C1] ? _raw_spin_unlock+0x40/0x40 [ 114.367534][ C1] ? kobject_get+0xcc/0x120 [ 114.372417][ C1] dummy_urb_enqueue+0x587/0x780 [ 114.377423][ C1] usb_hcd_submit_urb+0x318/0x1aa0 [ 114.382601][ C1] ? __init_swait_queue_head+0xa8/0x140 [ 114.388209][ C1] usb_start_wait_urb+0x140/0x580 [ 114.393334][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 114.399244][ C1] usb_control_msg+0x235/0x3e0 [ 114.404100][ C1] usb_set_configuration+0x12a8/0x2150 [ 114.409659][ C1] usb_generic_driver_probe+0x8d/0x150 [ 114.415181][ C1] usb_probe_device+0x12a/0x260 [ 114.420153][ C1] ? usb_register_device_driver+0x230/0x230 [ 114.426109][ C1] really_probe+0x247/0xae0 [ 114.430722][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 114.435993][ C1] __driver_probe_device+0x1f5/0x390 [ 114.441442][ C1] driver_probe_device+0x4f/0x420 [ 114.446539][ C1] __device_attach_driver+0x2ca/0x510 [ 114.451987][ C1] bus_for_each_drv+0x252/0x2e0 [ 114.456903][ C1] ? coredump_store+0x90/0x90 [ 114.461783][ C1] ? bus_find_device+0x300/0x300 [ 114.466812][ C1] __device_attach+0x2c1/0x420 [ 114.471759][ C1] ? device_attach+0x20/0x20 [ 114.476441][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 114.481917][ C1] bus_probe_device+0x180/0x260 [ 114.486885][ C1] device_add+0x87c/0xc40 [ 114.491299][ C1] usb_new_device+0x995/0x1550 [ 114.496153][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 114.501073][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.506347][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 114.511631][ C1] hub_event+0x29d5/0x4a80 [ 114.516178][ C1] ? hub_post_resume+0x120/0x120 [ 114.521171][ C1] ? read_lock_is_recursive+0x20/0x20 [ 114.526613][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.531874][ C1] ? process_scheduled_works+0x975/0x1600 [ 114.537652][ C1] ? process_scheduled_works+0x975/0x1600 [ 114.543446][ C1] process_scheduled_works+0xa60/0x1600 [ 114.549091][ C1] ? worker_attach_to_pool+0x370/0x370 [ 114.554624][ C1] ? assign_work+0x3cc/0x5d0 [ 114.559286][ C1] worker_thread+0xa5e/0xfe0 [ 114.563959][ C1] kthread+0x2fa/0x390 [ 114.568079][ C1] ? pr_cont_work+0x550/0x550 [ 114.572822][ C1] ? kthread_blkcg+0xd0/0xd0 [ 114.577460][ C1] ret_from_fork+0x48/0x80 [ 114.581916][ C1] ? kthread_blkcg+0xd0/0xd0 [ 114.586541][ C1] ret_from_fork_asm+0x11/0x20 [ 114.591349][ C1] [ 114.594963][ C1] Kernel Offset: disabled [ 114.599384][ C1] Rebooting in 86400 seconds..