last executing test programs: 1h30m16.543120649s ago: executing program 1 (id=2): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xdc, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xac, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8000}]}]}]}}]}, 0xdc}}, 0x0) 1h29m58.944472926s ago: executing program 1 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r1, r2, 0x1, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1h29m52.889707868s ago: executing program 1 (id=5): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fddbdf252100000008"], 0x24}}, 0x40084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 1h29m47.285474053s ago: executing program 1 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() read$dsp(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r3, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x7, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x3, {"5a916300000000000014000000005600"}, 0x7fffffffffff7ffd, 0x7fff, 0x3}}}, 0x118) 1h29m0.128272262s ago: executing program 32 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() read$dsp(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r3, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x7, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x3, {"5a916300000000000014000000005600"}, 0x7fffffffffff7ffd, 0x7fff, 0x3}}}, 0x118) 1h8m10.592621211s ago: executing program 2 (id=188): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x20f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x82, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0xee, {0x9, 0x21, 0xfff0, 0x0, 0x1, {0x22, 0xd1a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x8, 0xc}}}}}]}}]}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1h7m57.286857329s ago: executing program 2 (id=191): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x101, {0x3, 0x7, 0x0, '\x00', {0x1ff, 0x1, 0x4, 0x800, r2, 0x0, 0x0, '\x00', 0x9, 0xffffffffffff8001, 0x100000080, 0x3, {0x8003, 0x8}, {0x4000000000006, 0x5}, {0x0, 0x9}, {0x200000008, 0xa00}, 0x8000, 0xa, 0x0, 0x3}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 1h7m50.323940957s ago: executing program 2 (id=193): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x2, {0x0, 0xf0, 0x4}, 0x7d}, 0x18) 1h7m22.40315464s ago: executing program 2 (id=196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1h7m19.409583532s ago: executing program 2 (id=198): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1h7m5.144385273s ago: executing program 2 (id=200): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x2, {0x0, 0xf0, 0x4}, 0x7d}, 0x18) 1h6m18.922379102s ago: executing program 33 (id=200): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x2, {0x0, 0xf0, 0x4}, 0x7d}, 0x18) 38m22.259623968s ago: executing program 3 (id=459): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 38m17.488350925s ago: executing program 3 (id=461): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 38m7.917987376s ago: executing program 3 (id=464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f0000000380)="1c", 0x1, 0x48015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 37m45.102944395s ago: executing program 3 (id=466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x1, 0x3, 0x207, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 37m39.429433038s ago: executing program 3 (id=468): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 37m31.142266353s ago: executing program 3 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) 36m43.290314799s ago: executing program 34 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) 17m36.662275046s ago: executing program 0 (id=620): r0 = socket(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) mmap(&(0x7f0000029000/0x800000)=nil, 0x800000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) sendto(r0, 0x0, 0x0, 0x20005, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) bind$inet6(r2, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) listen(r2, 0x10000f) 17m25.893558969s ago: executing program 0 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f0000001640)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 17m18.132123417s ago: executing program 0 (id=625): epoll_create1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004680)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) 16m51.365734678s ago: executing program 0 (id=628): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f0000000040)=0x2, 0x4) 16m45.270956949s ago: executing program 0 (id=630): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 16m39.267018705s ago: executing program 0 (id=632): epoll_create1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004680)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) 15m53.196339028s ago: executing program 35 (id=632): epoll_create1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004680)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) 6m23.604411821s ago: executing program 4 (id=697): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r2, 0x4) 6m5.032852818s ago: executing program 4 (id=699): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f0000001640)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 5m39.311223486s ago: executing program 4 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000000400)=""/146, 0xffffff47) 5m6.093551059s ago: executing program 4 (id=703): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r2, 0x4) 4m53.836228661s ago: executing program 4 (id=705): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f0000001640)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m30.367823363s ago: executing program 4 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000000400)=""/146, 0xffffff47) 3m30.104506287s ago: executing program 36 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000000400)=""/146, 0xffffff47) 1m43.540409622s ago: executing program 5 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 1m4.898668129s ago: executing program 5 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x58, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 47.256207543s ago: executing program 5 (id=718): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r1, 0x4) 35.095248965s ago: executing program 5 (id=719): r0 = epoll_create1(0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0xe, &(0x7f00000000c0)={[0x30000]}, 0x8) 24.449890717s ago: executing program 5 (id=720): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000100020603000000000000000000000000000c000300686173683a6970000900020073797a3000000000050004"], 0x50}}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) mlockall(0x3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 0s ago: executing program 5 (id=721): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(0xffffffffffffffff) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31615' (ED25519) to the list of known hosts. syzkaller login: [ 478.156619][ T3227] cgroup: Unknown subsys name 'net' [ 478.918074][ T3227] cgroup: Unknown subsys name 'cpuset' [ 479.091442][ T3227] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 556.400140][ T3227] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 717.326430][ T3234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.152198][ T3234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.268528][ T3236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.106860][ T3236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.546346][ T3234] hsr_slave_0: entered promiscuous mode [ 733.615899][ T3234] hsr_slave_1: entered promiscuous mode [ 735.669336][ T3236] hsr_slave_0: entered promiscuous mode [ 735.707199][ T3236] hsr_slave_1: entered promiscuous mode [ 735.883248][ T3236] debugfs: 'hsr0' already exists in 'hsr' [ 735.887948][ T3236] Cannot create hsr debugfs directory [ 745.060434][ T3234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 745.240792][ T3234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 745.555664][ T3234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 745.700131][ T3234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 747.902552][ T3236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 748.071343][ T3236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 748.279007][ T3236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.749996][ T3236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.510585][ T3234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.719351][ T3236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.021532][ T3234] veth0_vlan: entered promiscuous mode [ 814.844695][ T3234] veth1_vlan: entered promiscuous mode [ 816.280999][ T3234] veth0_macvtap: entered promiscuous mode [ 816.593261][ T3234] veth1_macvtap: entered promiscuous mode [ 817.662475][ T3236] veth0_vlan: entered promiscuous mode [ 818.749154][ T3236] veth1_vlan: entered promiscuous mode [ 819.762212][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.786982][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.790434][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.793409][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.230304][ T3236] veth0_macvtap: entered promiscuous mode [ 822.737752][ T3236] veth1_macvtap: entered promiscuous mode [ 825.953193][ T3385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.960675][ T3385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.962183][ T3385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.026592][ T3385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.140596][ T3234] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 857.791637][ T3869] syzkaller0: entered promiscuous mode [ 857.796636][ T3869] syzkaller0: entered allmulticast mode [ 859.591446][ T3876] netlink: 'syz.1.5': attribute type 29 has an invalid length. [ 859.670964][ T3876] netlink: 'syz.1.5': attribute type 29 has an invalid length. [ 860.277342][ T3876] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5'. [ 864.940059][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 865.296211][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 865.798493][ T55] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 865.801735][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.827992][ T55] usb 1-1: Product: syz [ 865.837628][ T55] usb 1-1: Manufacturer: syz [ 865.838979][ T55] usb 1-1: SerialNumber: syz [ 866.382742][ T55] usb 1-1: config 0 descriptor?? [ 879.922300][ T3888] usb 1-1: USB disconnect, device number 2 [ 883.887638][ T3903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 967.381695][ T3492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.093424][ T3492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.382470][ T3492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.527704][ T3492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.687669][ T3986] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 998.172398][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.061451][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.350225][ T3492] bond0 (unregistering): Released all slaves [ 1003.148559][ T3492] hsr_slave_0: left promiscuous mode [ 1003.292771][ T3492] hsr_slave_1: left promiscuous mode [ 1004.198445][ T3492] veth1_macvtap: left promiscuous mode [ 1004.205255][ T3492] veth0_macvtap: left promiscuous mode [ 1004.241270][ T3492] veth1_vlan: left promiscuous mode [ 1004.280354][ T3492] veth0_vlan: left promiscuous mode [ 1047.433572][ T3930] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1047.737037][ T3930] usb 1-1: Using ep0 maxpacket: 16 [ 1047.856661][ T3930] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1047.859037][ T3930] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.860935][ T3930] usb 1-1: config 1 has no interface number 0 [ 1047.891549][ T3930] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1047.916207][ T3930] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1047.920036][ T3930] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1048.081857][ T3930] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1048.106018][ T3930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.107988][ T3930] usb 1-1: Product: syz [ 1048.109331][ T3930] usb 1-1: Manufacturer: syz [ 1048.110705][ T3930] usb 1-1: SerialNumber: syz [ 1048.904107][ T4027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1049.867226][ T3930] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 1051.432918][ T3930] usb 1-1: USB disconnect, device number 3 [ 1061.828925][ T3922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.076881][ T3922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.418483][ T3922] hsr_slave_0: entered promiscuous mode [ 1085.520529][ T3922] hsr_slave_1: entered promiscuous mode [ 1085.642105][ T3922] debugfs: 'hsr0' already exists in 'hsr' [ 1085.668009][ T3922] Cannot create hsr debugfs directory [ 1104.263607][ T3922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1104.531790][ T3922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1104.983132][ T3922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1105.231781][ T3922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1129.978376][ T3922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.681318][ T3922] veth0_vlan: entered promiscuous mode [ 1241.668435][ T3922] veth1_vlan: entered promiscuous mode [ 1246.019736][ T3922] veth0_macvtap: entered promiscuous mode [ 1247.048306][ T3922] veth1_macvtap: entered promiscuous mode [ 1254.478628][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.586565][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.598415][ T3492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.601010][ T3492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.669742][ T4418] fuse: Bad value for 'fd' [ 1347.410963][ T4445] fuse: Bad value for 'fd' [ 1405.898378][ T4479] netlink: 532 bytes leftover after parsing attributes in process `syz.2.64'. [ 1451.661426][ T4502] netlink: 532 bytes leftover after parsing attributes in process `syz.0.70'. [ 1481.183417][ T4516] netlink: 532 bytes leftover after parsing attributes in process `syz.0.76'. [ 1485.664937][ T4520] Zero length message leads to an empty skb [ 1522.950075][ T4560] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 1523.689335][ T4559] syzkaller1: entered promiscuous mode [ 1523.690711][ T4559] syzkaller1: entered allmulticast mode [ 1540.922179][ T4578] syzkaller1: entered promiscuous mode [ 1540.923558][ T4578] syzkaller1: entered allmulticast mode [ 1646.613119][ T4632] syzkaller1: entered promiscuous mode [ 1646.636836][ T4632] syzkaller1: entered allmulticast mode [ 1657.882996][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 1708.576964][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 1763.269500][ T4678] netlink: 'syz.2.118': attribute type 29 has an invalid length. [ 1763.781415][ T4678] netlink: 'syz.2.118': attribute type 29 has an invalid length. [ 1764.597933][ T4678] netlink: 500 bytes leftover after parsing attributes in process `syz.2.118'. [ 1767.038646][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 1773.640305][ T4682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 1796.210523][ T4691] netlink: 'syz.0.124': attribute type 29 has an invalid length. [ 1796.359785][ T4691] netlink: 'syz.0.124': attribute type 29 has an invalid length. [ 1796.477990][ T4691] netlink: 500 bytes leftover after parsing attributes in process `syz.0.124'. [ 1800.713198][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 1864.379705][ T4735] netlink: 52 bytes leftover after parsing attributes in process `syz.2.138'. [ 1870.708645][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.813819][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.423488][ T4779] fuse: Bad value for 'group_id' [ 1970.426881][ T4779] fuse: Bad value for 'group_id' [ 2022.878951][ C1] vkms_vblank_simulate: vblank timer overrun [ 2087.824623][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.890845][ T4833] ptrace attach of "/syz-executor exec"[3922] was attempted by ""[4833] [ 2093.398292][ T3930] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2093.827905][ T3930] usb 1-1: Using ep0 maxpacket: 32 [ 2094.276579][ T3930] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2094.384598][ T3930] usb 1-1: config 1 interface 0 altsetting 110 endpoint 0x81 has an invalid bInterval 58, changing to 9 [ 2094.387022][ T3930] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2094.761551][ T3930] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 2094.763459][ T3930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.780493][ T3930] usb 1-1: Product: syz [ 2094.802998][ T3930] usb 1-1: Manufacturer: syz [ 2094.807811][ T3930] usb 1-1: SerialNumber: syz [ 2097.771598][ T3930] usbhid 1-1:1.0: can't add hid device: -71 [ 2097.782317][ T3930] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2097.932177][ T3930] usb 1-1: USB disconnect, device number 4 [ 2163.026487][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.092368][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.887888][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.938422][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.609796][ T4938] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2176.516422][ T4941] fuse: Bad value for 'fd' [ 2211.242824][ T4955] fuse: Unknown parameter 'grou00000000000000000000' [ 2242.317828][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 2242.320926][ T4986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'. [ 2255.620835][ T4990] fuse: Unknown parameter 'grou00000000000000000000' [ 2300.586744][ T5003] fuse: Unknown parameter 'grou00000000000000000000' [ 2314.140012][ T3800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2316.469172][ T3800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.982342][ T3800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.440856][ T3800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2330.398673][ T5034] fuse: Unknown parameter 'group_i00000000000000000000' [ 2336.107679][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2336.270926][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2336.372156][ T3800] bond0 (unregistering): Released all slaves [ 2337.841480][ T3800] hsr_slave_0: left promiscuous mode [ 2337.978103][ T3800] hsr_slave_1: left promiscuous mode [ 2338.562893][ T3800] veth1_macvtap: left promiscuous mode [ 2338.572471][ T3800] veth0_macvtap: left promiscuous mode [ 2338.590402][ T3800] veth1_vlan: left promiscuous mode [ 2338.593156][ T3800] veth0_vlan: left promiscuous mode [ 2354.441347][ T5043] fuse: Unknown parameter 'group_i00000000000000000000' [ 2369.347796][ T5054] netlink: 68 bytes leftover after parsing attributes in process `syz.0.219'. [ 2393.981411][ T5121] netlink: 68 bytes leftover after parsing attributes in process `syz.0.223'. [ 2415.580925][ T4999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2415.806795][ T4999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2431.057070][ T5247] netlink: 68 bytes leftover after parsing attributes in process `syz.0.227'. [ 2441.343320][ T4999] hsr_slave_0: entered promiscuous mode [ 2441.402462][ T4999] hsr_slave_1: entered promiscuous mode [ 2441.451667][ T4999] debugfs: 'hsr0' already exists in 'hsr' [ 2441.453483][ T4999] Cannot create hsr debugfs directory [ 2460.489946][ T4999] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2460.838896][ T4999] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2461.212201][ T4999] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2461.891746][ T4999] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2493.590585][ T4999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2622.306583][ T3930] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 2622.958953][ T3930] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2623.768278][ T3930] usb 1-1: not running at top speed; connect to a high speed hub [ 2623.869856][ T3930] usb 1-1: config 2 has an invalid interface number: 166 but max is 0 [ 2623.872873][ T3930] usb 1-1: config 2 has no interface number 0 [ 2623.897351][ T3930] usb 1-1: config 2 interface 166 altsetting 248 endpoint 0x8B has invalid maxpacket 23653, setting to 64 [ 2623.900700][ T3930] usb 1-1: config 2 interface 166 has no altsetting 0 [ 2624.312434][ T3930] usb 1-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=79.66 [ 2624.321760][ T3930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.349802][ T3930] usb 1-1: Product: syz [ 2624.351680][ T3930] usb 1-1: Manufacturer: syz [ 2624.353182][ T3930] usb 1-1: SerialNumber: syz [ 2625.347682][ T5472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2628.349274][ T3930] option 1-1:2.166: GSM modem (1-port) converter detected [ 2628.743185][ T3930] usb 1-1: USB disconnect, device number 5 [ 2629.062972][ T3930] option 1-1:2.166: device disconnected [ 2646.876596][ T4999] veth0_vlan: entered promiscuous mode [ 2647.919472][ T4999] veth1_vlan: entered promiscuous mode [ 2652.624630][ T4999] veth0_macvtap: entered promiscuous mode [ 2653.319602][ T4999] veth1_macvtap: entered promiscuous mode [ 2657.997891][ T4819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2658.091184][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2658.216338][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2658.325213][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2692.887300][ T5525] fuse: Bad value for 'fd' [ 2704.090880][ T5533] fuse: Unknown parameter 'group_i00000000000000000000' [ 2711.186674][ T5539] fuse: Invalid rootmode [ 2751.711050][ T5552] fuse: Invalid rootmode [ 2796.013645][ T5572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.268'. [ 2950.707929][ T5622] input: syz1 as /devices/virtual/input/input0 [ 3056.680333][ T5655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3129.150156][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 3166.652402][ T5705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 3203.892676][ T5724] fuse: Bad value for 'fd' [ 3227.198043][ T5741] fuse: Invalid rootmode [ 3245.131018][ T5753] netlink: 532 bytes leftover after parsing attributes in process `syz.3.330'. [ 3261.669247][ T5758] fuse: Invalid rootmode [ 3279.070254][ T5771] fuse: Invalid rootmode [ 3279.173567][ T5770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3322.897793][ T5786] syzkaller0: entered promiscuous mode [ 3322.899080][ T5786] syzkaller0: entered allmulticast mode [ 3323.120314][ T5786] syzkaller0: tun_net_xmit 14 [ 3365.893530][ T5807] binder: BC_ATTEMPT_ACQUIRE not supported [ 3365.918214][ T5807] binder: 5806:5807 ioctl c0306201 2000000001c0 returned -22 [ 3380.787141][ T5814] Illegal XDP return value 4294967294 on prog (id 48) dev N/A, expect packet loss! [ 3413.947160][ T5827] fuse: Bad value for 'rootmode' [ 3434.397940][ T5843] fuse: Unknown parameter 'use00000000000000000000' [ 3439.151759][ T5847] binder_alloc: 5846: binder_alloc_buf size 4120 failed, no address space [ 3439.191553][ T5847] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 3450.401346][ T5857] fuse: Unknown parameter 'use00000000000000000000' [ 3488.509951][ T5881] fuse: Unknown parameter 'use00000000000000000000' [ 3489.426085][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 3723.445363][ T6021] tap0: tun_chr_ioctl cmd 1074025677 [ 3723.453150][ T6021] tap0: linktype set to 0 [ 3732.715514][ T6031] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 3833.840052][ T31] audit: type=1326 audit(3832.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.442" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x0 [ 3837.577159][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 3890.020770][ T6126] netlink: 68 bytes leftover after parsing attributes in process `syz.3.452'. [ 3957.401397][ T6157] capability: warning: `syz.0.462' uses deprecated v2 capabilities in a way that may be insecure [ 4100.368230][ T895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 4100.851725][ T895] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 4100.853386][ T895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4100.866021][ T895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4100.867498][ T895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 4100.869262][ T895] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 4100.870536][ T895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4101.482745][ T895] usb 1-1: config 0 descriptor?? [ 4104.739281][ T895] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 4105.366185][ T895] usb 1-1: USB disconnect, device number 6 [ 4156.221295][ T6193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4156.446485][ T6193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4159.671882][ T6377] netlink: 68 bytes leftover after parsing attributes in process `syz.0.484'. [ 4181.758997][ T6193] hsr_slave_0: entered promiscuous mode [ 4181.812427][ T6193] hsr_slave_1: entered promiscuous mode [ 4181.868376][ T6193] debugfs: 'hsr0' already exists in 'hsr' [ 4181.870258][ T6193] Cannot create hsr debugfs directory [ 4182.943354][ T6442] netlink: 532 bytes leftover after parsing attributes in process `syz.0.488'. [ 4195.811220][ T6193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 4195.957238][ T6193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 4196.176105][ T6193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 4201.502270][ T6193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 4258.497380][ T6193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4260.795748][ T6547] netlink: 532 bytes leftover after parsing attributes in process `syz.0.492'. [ 4304.282296][ T6566] netlink: 532 bytes leftover after parsing attributes in process `syz.0.496'. [ 4330.218035][ T895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 4330.681988][ T895] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 4330.736156][ T895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4330.738732][ T895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4330.740755][ T895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 4330.743466][ T895] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 4330.766854][ T895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4331.109469][ T895] usb 1-1: config 0 descriptor?? [ 4334.635588][ T895] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 4334.830851][ T895] usb 1-1: USB disconnect, device number 7 [ 4347.419527][ T6621] netlink: 68 bytes leftover after parsing attributes in process `syz.0.502'. [ 4376.671811][ T6193] veth0_vlan: entered promiscuous mode [ 4378.311931][ T6193] veth1_vlan: entered promiscuous mode [ 4380.492213][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.504'. [ 4380.707825][ T6193] veth0_macvtap: entered promiscuous mode [ 4380.861180][ T6193] veth1_macvtap: entered promiscuous mode [ 4383.618885][ T6631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4383.741687][ T6631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4383.767937][ T6631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4383.770617][ T6631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4437.556973][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'. [ 4455.809626][ T6655] netlink: 'syz.0.509': attribute type 29 has an invalid length. [ 4456.031075][ T6656] netlink: 'syz.0.509': attribute type 29 has an invalid length. [ 4456.882684][ T6655] netlink: 532 bytes leftover after parsing attributes in process `syz.0.509'. [ 4477.059183][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 4488.659111][ T6672] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 4489.200810][ T6672] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 4489.931176][ T6672] netlink: 532 bytes leftover after parsing attributes in process `syz.0.515'. [ 4512.255606][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4512.338732][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4525.309714][ T6693] netlink: 'syz.0.520': attribute type 29 has an invalid length. [ 4525.693342][ T6693] netlink: 'syz.0.520': attribute type 29 has an invalid length. [ 4527.100735][ T6694] netlink: 532 bytes leftover after parsing attributes in process `syz.0.520'. [ 4562.743161][ T6715] process 'syz.0.528' launched './file1' with NULL argv: empty string added [ 4819.888569][ T4401] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 4820.246129][ T4401] usb 1-1: Using ep0 maxpacket: 32 [ 4820.558728][ T4401] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 4820.839146][ T4401] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 4820.841458][ T4401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4820.843331][ T4401] usb 1-1: Product: syz [ 4820.882082][ T4401] usb 1-1: Manufacturer: syz [ 4820.882926][ T4401] usb 1-1: SerialNumber: syz [ 4821.158972][ T4401] usb 1-1: config 0 descriptor?? [ 4821.239560][ T6802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4821.602628][ T4401] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 4824.761532][ T4401] usb 1-1: USB disconnect, device number 8 [ 4899.721240][ T6853] input: syz1 as /devices/virtual/input/input7 [ 4915.456643][ T6868] netlink: 76 bytes leftover after parsing attributes in process `syz.4.561'. [ 4915.459483][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 4925.829584][ T6872] input: syz1 as /devices/virtual/input/input8 [ 5051.018048][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 5070.219640][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 5170.006165][ T7022] raw_sendmsg: syz.4.610 forgot to set AF_INET. Fix it! [ 5342.983432][ T6842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5345.399726][ T6842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5347.403249][ T6842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5349.629621][ T6842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5371.372904][ T6842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5371.828718][ T6842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5372.181922][ T6842] bond0 (unregistering): Released all slaves [ 5374.235241][ T6842] hsr_slave_0: left promiscuous mode [ 5374.572270][ T6842] hsr_slave_1: left promiscuous mode [ 5375.381645][ T6842] veth1_macvtap: left promiscuous mode [ 5375.397378][ T6842] veth0_macvtap: left promiscuous mode [ 5375.433437][ T6842] veth1_vlan: left promiscuous mode [ 5375.452446][ T6842] veth0_vlan: left promiscuous mode [ 5451.185919][ T7114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5451.447883][ T7114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5489.950074][ T7114] hsr_slave_0: entered promiscuous mode [ 5490.028659][ T7114] hsr_slave_1: entered promiscuous mode [ 5513.261575][ T7114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 5513.952016][ T7114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 5515.214890][ T7114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 5516.419741][ T7114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 5532.251726][ T7483] fuse: Unknown parameter 'group_id00000000000000000000' [ 5553.700396][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5597.183273][ T7523] fuse: Bad value for 'user_id' [ 5597.215637][ T7523] fuse: Bad value for 'user_id' [ 5639.953435][ T7557] fuse: Bad value for 'user_id' [ 5640.049434][ T7557] fuse: Bad value for 'user_id' [ 5686.453038][ T7586] fuse: Bad value for 'user_id' [ 5686.457559][ T7586] fuse: Bad value for 'user_id' [ 5703.866955][ T7114] veth0_vlan: entered promiscuous mode [ 5706.570419][ T7114] veth1_vlan: entered promiscuous mode [ 5711.683270][ T7114] veth0_macvtap: entered promiscuous mode [ 5712.836140][ T7114] veth1_macvtap: entered promiscuous mode [ 5721.065768][ T5306] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5721.070734][ T5306] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5721.073523][ T5306] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5721.427934][ T5306] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5741.161562][ T7606] fuse: Bad value for 'fd' [ 5778.666928][ T7622] fuse: Bad value for 'fd' [ 5808.408336][ T7638] fuse: Bad value for 'fd' [ 5828.571364][ T7646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.692'. [ 5884.997638][ T7673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.698'. [ 5946.159445][ T7693] netlink: 220 bytes leftover after parsing attributes in process `syz.5.702'. [ 5960.760311][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.5.704'. [ 5978.278976][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 6133.249441][ T7111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6135.782622][ T7111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6138.732769][ T7111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6140.930746][ T7111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6192.411215][ T7111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6192.947188][ T7111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6193.426832][ T7111] bond0 (unregistering): Released all slaves [ 6198.155278][ T7111] hsr_slave_0: left promiscuous mode [ 6198.328743][ T7111] hsr_slave_1: left promiscuous mode [ 6199.796679][ T7111] veth1_macvtap: left promiscuous mode [ 6199.799422][ T7111] veth0_macvtap: left promiscuous mode [ 6199.871336][ T7111] veth1_vlan: left promiscuous mode [ 6199.918609][ T7111] veth0_vlan: left promiscuous mode [ 6255.060508][ T7795] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 6255.062934][ T7795] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7795, name: syz.5.721 [ 6255.072758][ T7795] preempt_count: 1, expected: 0 [ 6255.077066][ T7795] RCU nest depth: 0, expected: 0 [ 6255.078641][ T7795] 2 locks held by syz.5.721/7795: [ 6255.079901][ T7795] #0: ffffaf801d4fe0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0x7e/0x98 [ 6255.087601][ T7795] #1: ffffaf801d4fe998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0x12e/0xbde [ 6255.091057][ T7795] Preemption disabled at: [ 6255.091377][ T7795] [] hook_sb_delete+0x12e/0xbde [ 6255.094025][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.5.721 Not tainted syzkaller #0 PREEMPT [ 6255.094504][ T7795] Hardware name: riscv-virtio,qemu (DT) [ 6255.094927][ T7795] Call Trace: [ 6255.095375][ T7795] [] dump_backtrace+0x2e/0x3c [ 6255.096035][ T7795] [] show_stack+0x30/0x3c [ 6255.096527][ T7795] [] dump_stack_lvl+0x12a/0x1a2 [ 6255.097155][ T7795] [] dump_stack+0x1c/0x24 [ 6255.097540][ T7795] [] __might_resched+0x59c/0x5f8 [ 6255.097939][ T7795] [] __might_sleep+0x86/0xca [ 6255.098284][ T7795] [] iput+0x3c/0xb22 [ 6255.098665][ T7795] [] hook_sb_delete+0x86e/0xbde [ 6255.099020][ T7795] [] security_sb_delete+0xac/0x184 [ 6255.099417][ T7795] [] generic_shutdown_super+0xba/0x37c [ 6255.099890][ T7795] [] kill_litter_super+0x74/0xb0 [ 6255.100356][ T7795] [] deactivate_locked_super+0xd8/0x19c [ 6255.100759][ T7795] [] deactivate_super+0x84/0x98 [ 6255.101189][ T7795] [] cleanup_mnt+0x1dc/0x3e6 [ 6255.101536][ T7795] [] __cleanup_mnt+0x1c/0x26 [ 6255.101931][ T7795] [] task_work_run+0x16a/0x25e [ 6255.102213][ T7795] [] exit_to_user_mode_loop+0x110/0x142 [ 6255.102511][ T7795] [] do_trap_ecall_u+0x3f8/0x53a [ 6255.102864][ T7795] [] handle_exception+0x15e/0x16a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6280.302891][ T7111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6283.321202][ T7111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6284.882738][ T7111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0