last executing test programs: 20m0.429257594s ago: executing program 0 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x650) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xb, 0x80000) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) munlock(&(0x7f000068d000/0x2000)=nil, 0x2000) 19m57.726968959s ago: executing program 0 (id=1253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x3, 0xff, 0x0, 0xf84, 0x28, 0x0, 0xfa, 0x5, 0x40, 0x2, 0x3, 0x0, 0x10, 0x2, 0x8, 0x4, 0x1, 0x0, '\x00', 0x5, 0x7}) 19m56.501674306s ago: executing program 0 (id=1258): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) rename(&(0x7f0000000000)='./cgroup\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19m54.777714494s ago: executing program 0 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) lseek(r0, 0xfffffffffffffffe, 0x0) 19m54.604914103s ago: executing program 0 (id=1264): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x101180, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffdfffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x20, 0x1, 0x80003ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x100026d, 0x0, r0}}], 0x1, 0x0, 0x0) 19m54.287758606s ago: executing program 0 (id=1268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8, 0x3, 0x7, 0x6, 0x0, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x3, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x7ffffffc, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x108, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4006, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0x2, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0xe, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 19m39.172689296s ago: executing program 32 (id=1268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8, 0x3, 0x7, 0x6, 0x0, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x3, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x7ffffffc, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x108, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4006, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0x2, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0xe, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 14m13.559563125s ago: executing program 4 (id=2174): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) 14m13.040372124s ago: executing program 4 (id=2170): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010601"], 0x1c}}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) unshare(0x40000000) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000180)={0x16, 0x110, 0xfa00, {r6, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r6}}, 0x120) ioctl$FIONREAD(r1, 0x541b, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 14m12.849370664s ago: executing program 4 (id=2171): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000010) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 14m12.654487013s ago: executing program 4 (id=2172): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(r7, r7) ioprio_get$pid(0x2, r7) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r6, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 14m12.533991617s ago: executing program 4 (id=2173): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c) close(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 14m12.291578264s ago: executing program 4 (id=2175): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x64}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pwrite64(r6, 0x0, 0x0, 0x6) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14m12.291387702s ago: executing program 33 (id=2175): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x64}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pwrite64(r6, 0x0, 0x0, 0x6) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m40.078303135s ago: executing program 2 (id=3147): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x40000, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x6) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000300)=[{0x0, 0x3, {0x0, 0xf0, 0x2}, {0x0, 0xff, 0x2}, 0xfd, 0xfd}, {0x3, 0x2, {0x0, 0x1, 0x90f7f52367c09d88}, {0x1}, 0xbbde8cd29cca84b1, 0x1}, {0x2, 0x3, {0x1, 0x0, 0x3}, {0x1, 0x0, 0x2}, 0xff, 0xfd}], 0x54) 5m34.767858055s ago: executing program 2 (id=3154): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) pipe2$watch_queue(&(0x7f0000000280), 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) setrlimit(0xa, &(0x7f0000000340)={0x7fffffff, 0x81}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) 5m30.244027066s ago: executing program 2 (id=3158): ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/52) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) socket(0x200000000000011, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, 0x0, 0x8000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 5m29.085937066s ago: executing program 2 (id=3160): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x0) socket$unix(0x1, 0x1, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000100)='./file0/file0\x00') r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r4, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r3) 5m25.863780377s ago: executing program 2 (id=3167): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x7fff8013}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3367"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) r2 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x94000) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8000000}]}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4014f50b, &(0x7f00000000c0)={0x0, 0x0, 0x1}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000280)={r8, 0x4d, "84c27669d60074b39b6c53a4bb17b94e4cdf2f3a180c8b6c923daa271dd9739d7400146fc4f86432535653a138430fe923ba412f27273cd099f398a8c17ebae21ed177a1aa7ce606dd8987827c"}, &(0x7f0000000340)=0x55) 5m24.610729607s ago: executing program 2 (id=3172): r0 = syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 5m8.150317907s ago: executing program 34 (id=3172): r0 = syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 24.97311913s ago: executing program 3 (id=3590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0), 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc01c5869, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)={0xf1}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r6}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21.760771335s ago: executing program 6 (id=3594): socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003000300000000000000140000001100"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x9, 0x0, 0x0, 0x9, 0xfe, 0x10d0, 0x5, 0xf, 0x2, 0xfffffffe, 'syz0\x00'}) shutdown(r0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r2 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000180)={0x7fffffffffffffff, 0x10001}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xaa, 0xffff, 0x8, 0xa, 0xfffffb3a}, 0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 21.13151881s ago: executing program 3 (id=3596): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) munlockall() setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000280)={0x81, "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"}) r2 = socket(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000040000000000000000060a090400000000000000000200000024000480200001800b00f81f6c6f6f6b75700000100002800900010073797a31000000000900010073797a30000000000900020073797a32000000001400000011000100"/117], 0x78}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f0000000040)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r4, 0x40086806, 0x21) ioctl$BLKTRACESETUP(r4, 0x6801, 0x0) fdatasync(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '\x00'}, &(0x7f0000000640)=""/4096, 0x1000) 20.744322971s ago: executing program 5 (id=3597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000280)=""/207) r2 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x3, 0x5004) sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff0100000000000000000000000000010a01010200000000000000000000000000000005000000000a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000001000000000000000000009276bfbd3c92846fdfa7d3ceffffac1e0101ff020000000000000000000000000001fc0200000000000000000000000000003c000000008000000a000a00"], 0xa0}}, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x62, 0x0, 0x0) 18.655150525s ago: executing program 5 (id=3598): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x2044040) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x1c}, 0x1, 0xffffffff00000003}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}}, 0x40040c4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001600)=@newae={0x48, 0x1e, 0x1, 0x70bd29, 0x25dfdbfb, {{@in=@multicast1, 0x4d5, 0x2, 0x2b}, @in6=@rand_addr=' \x01\x00', 0xf, 0x3507}, [@etimer_thresh={0x8, 0xc, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000084}, 0x8000) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000000)={0x4, 0x5, 0x623, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 17.877937558s ago: executing program 6 (id=3599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) syz_clone3(&(0x7f0000000700)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x26}, &(0x7f0000000280)=""/15, 0xf, &(0x7f00000002c0)=""/78, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, r2, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[0xffffffffffffffff, 0xd, 0xffffffffffff6def], &(0x7f0000000100)=[0x4], 0x400, 0x3, 0x1, r3}}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x2c02) read(r6, &(0x7f0000000440)=""/247, 0x26) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) r7 = getpid() r8 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000003c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x80, 0x0}, 0x200040a5) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1}, 0x40000010) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r1, 0x4, r1}, 0x10) 17.624076246s ago: executing program 1 (id=3600): r0 = gettid() r1 = epoll_create(0x20003fd) r2 = eventfd(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xb, &(0x7f00000002c0)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x12}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x5}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x2}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lseek(r3, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000080)={r1, r2, 0x1}) 17.193237143s ago: executing program 3 (id=3601): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) munlockall() setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000280)={0x81, "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"}) r2 = socket(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000040000000000000000060a090400000000000000000200000024000480200001800b00f81f6c6f6f6b75700000100002800900010073797a31000000000900010073797a30000000000900020073797a32000000001400000011000100"/117], 0x78}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086806, 0x21) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4, 0x1b) fdatasync(r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '\x00'}, &(0x7f0000000640)=""/4096, 0x1000) 14.40548361s ago: executing program 5 (id=3602): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1c9) socket$inet_smc(0x2b, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000436c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000002c0)="440f20c03501000000440f22c066baf80cb82d9eb08aef66bafc0cecc402350d50a0b9860100000f3266baf80cb874293c8eef66bafc0cedc744240039010000c74424026cad04c7ff2c24263e440f83db0000008fe998986439b8410f78829f3a0000d9f7", 0x65}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\''], 0x2a) close(r5) lstat64(&(0x7f00000000c0)='./cgroup\x00', 0x0) write(r4, &(0x7f0000000180)='pi3usb30532 0x59\x00', 0x10) 14.281578292s ago: executing program 1 (id=3603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 11.950554234s ago: executing program 1 (id=3604): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)={0x124, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) 11.868467892s ago: executing program 6 (id=3605): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x120, &(0x7f0000000000)=[{&(0x7f0000000500)={0x114, 0x37, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getrusage(0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x214, 0x0, 0x13c, 0x324, 0x13c, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x4e21], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0xfc}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff}, {}, 0x300}}}, {{@uncond, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/185, 0xb9}, {&(0x7f00000000c0)=""/141, 0x8d}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/77, 0x4d}], 0x4, 0x7, 0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) preadv2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000340)=""/11, 0x66}, {&(0x7f0000000400)=""/118, 0x76}, {&(0x7f00000006c0)=""/103, 0x14}, {&(0x7f0000000740)=""/115, 0x6b}], 0x4, 0x5, 0x5b, 0x10) 11.762241962s ago: executing program 5 (id=3606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 10.321810413s ago: executing program 3 (id=3607): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400191809004beafd0d3602010100000000000000000000a2bc56030000000fdd32aa4da87f2af1e264147f89004e002050da742dac0000000101ff0502000300020000", 0x48}], 0x1) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) syz_ublk_setup_io_uring(0x90b, &(0x7f0000000240)={0x0, 0x9aba, 0x1234, 0x1, 0xfc, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 9.929478901s ago: executing program 1 (id=3608): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x6, [[0x1, 0x0, 0x0, 0xfffffffe, 0x1, 0x7, 0x400001], [0x0, 0x2, 0x0, 0xfffff7fd, 0x0, 0xde75], [0x0, 0x0, 0x1, 0x0, 0x4d, 0x2, 0x3, 0x24]], '\x00', [{0x5, 0x1000, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}, {0x0, 0x200}, {0x10000001, 0x10000000}, {0x800, 0x2000000}, {0x36, 0x3}, {0x80000001, 0x81}, {0x0, 0x1000}, {0x4df, 0x1}, {0x3fc, 0x1}, {0x80000, 0x73d}, {0x7, 0xfffffffd}], '\x00', 0x8, 0x0, 0x0, 0x1000000}) r1 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x9, 0x6, @random="f2be6749b289"}, 0x14) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000180)="fb", 0x1, 0x20e7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003dc0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r7, 0x0, r9, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r8, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x1}}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 7.887027774s ago: executing program 6 (id=3609): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) mq_open(0x0, 0x42, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) msgget(0x3, 0x180) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@link_local, @random="5cfbe44c0a31", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @rand_addr=0x64010100}}}}}, 0x0) close(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@generic={0x23, "57815cdeea606aeb193b04509c20a908416a6894dbcdedc04f4d1740915255ea7a525fcd051c2baeb891b39db12ae77e3dfdd8c494ebcd1924887a8d717e043c45f092fef269b355c4b3e1e009c70eb8ba22fc3ea5c2b1cdc7d01c9a2b2014472ea26339286f4a71b524f572bb370fb8389d0305cd38f475d64c33b51d23"}, 0x80, 0x0}}], 0x1, 0x4000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 7.283683731s ago: executing program 3 (id=3610): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000240012800b0001006d616373656300001400028005000a0001000000050008000000000008000500", @ANYRES32=r1, @ANYBLOB="d72dc96c9e733a3dbe0724b059d2965d989490d2f464d158ac466a0b288d282c1147685b8e33114d521e9098008b88139ce7ad8c6b93ed9c4c6063a30af1a734f60911ee88d391e728cec281b68d356daec8577b65dc799c67a10852f5f0081eca83ef6f"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040041}, 0x20000090) openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffff, 0x0, 0x0, 0x20}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r4, 0x1000006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffe, 0x7, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="a1f872478e76a8", 0x0, 0xffff140f, 0x0, 0x0, 0x0}) openat$ndctl0(0xffffff9c, &(0x7f0000000180), 0x1201c2, 0x0) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x1000000}) 7.244387165s ago: executing program 1 (id=3611): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000), 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.669095067s ago: executing program 5 (id=3612): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) 3.545504528s ago: executing program 6 (id=3613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 1.602885331s ago: executing program 6 (id=3614): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0xd78, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x7, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffffb]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x0, 0x0, 0xa145, 0x7}]}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x800) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x6c, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff800000}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1.602543414s ago: executing program 5 (id=3615): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b634", 0x92) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x891f, &(0x7f0000000040)={'pim6reg0\x00', @ifru_ivalue=0x5}) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247e88ce2bc3640e7e51e156e63b8ec"]) chroot(&(0x7f0000000200)='./file0\x00') 1.53537034s ago: executing program 1 (id=3616): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="389cec73d0a0021fec"], 0x0, 0x37}, 0x28) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8000) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x1c) openat$null(0xffffff9c, &(0x7f0000000480), 0x808c2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xfffffffa, 0x10}, 0xc) 0s ago: executing program 3 (id=3617): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ing interface batadv_slave_1 (retrying later): interface not active [ 1408.553703][T20033] hsr_slave_0: entered promiscuous mode [ 1408.576312][T20033] hsr_slave_1: entered promiscuous mode [ 1408.586476][T20033] debugfs: 'hsr0' already exists in 'hsr' [ 1408.589812][T20033] Cannot create hsr debugfs directory [ 1408.676558][ T9918] IPVS: stop unused estimator thread 0... [ 1408.690524][T20033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1408.705366][T20033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1408.710824][T20033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1408.721380][T20033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1408.727546][T20033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1408.740896][T20033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1408.745537][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1408.750675][T20033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1408.762412][T20033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1408.769256][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1408.828147][T20033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.860287][T20033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.873659][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.877441][ T6800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.894662][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.898667][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.904528][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1408.977869][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1409.235134][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1409.418121][T20033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.589718][T20033] veth0_vlan: entered promiscuous mode [ 1409.600083][T20033] veth1_vlan: entered promiscuous mode [ 1409.632783][T20033] veth0_macvtap: entered promiscuous mode [ 1409.640625][T20033] veth1_macvtap: entered promiscuous mode [ 1409.653326][T20033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.671937][T20033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.706801][ T5841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.724705][ T9918] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.729485][ T9918] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.741515][T20033] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 1409.761341][T19723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.762243][T20033] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 1409.766352][T19723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.784507][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1409.787720][T17896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.792610][T17896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.799077][ T9918] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.944518][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1410.165510][T20155] jffs2: notice: (20155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1410.825351][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1410.984536][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1411.864551][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1412.026175][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1412.904655][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1413.064515][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1413.945028][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1414.105412][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1414.985607][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1415.144561][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1416.025132][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1416.184525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1417.064668][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1417.224577][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1418.114612][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1418.264932][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1419.144778][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1419.304527][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1420.184639][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1420.344935][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1421.225083][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1421.384471][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1421.555004][ T6800] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1421.561425][T20202] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1422.264681][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1422.365333][T20219] random: crng reseeded on system resumption [ 1422.389738][T20219] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1422.395769][T20219] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1422.401612][T20219] PM: hibernation: Basic memory bitmaps created [ 1422.424858][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1422.502093][T20222] 9p: Bad value for 'rfdno' [ 1422.833997][T20216] PM: hibernation: Basic memory bitmaps freed [ 1422.907619][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.912187][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.979787][T20229] binder: 20221:20229 ioctl 4018620d 0 returned -22 [ 1423.326464][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1423.464589][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1423.916641][ T42] audit: type=1326 audit(1787305975.972:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1423.943283][ T42] audit: type=1326 audit(1787305975.982:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1423.991987][ T42] audit: type=1326 audit(1787305975.992:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.024658][ T42] audit: type=1326 audit(1787305975.992:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.041685][ T42] audit: type=1326 audit(1787305975.992:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.066656][ T42] audit: type=1326 audit(1787305975.992:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.106001][ T42] audit: type=1326 audit(1787305975.992:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.126402][T20248] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 1424.148554][ T42] audit: type=1326 audit(1787305975.992:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.168535][T20248] i2c i2c-0: delete_device: Can't find device in list [ 1424.186245][ T42] audit: type=1326 audit(1787305975.992:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.220344][ T42] audit: type=1326 audit(1787305975.992:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.3.3211" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1424.344499][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1424.505261][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1424.948538][ T6800] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1424.959893][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1424.965518][ T6800] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1424.975171][ T6800] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1424.984647][ T6800] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1424.996344][ T6800] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.010180][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.025605][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.043742][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.060594][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.092896][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.101621][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.108210][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.113652][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.119411][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.132127][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.139566][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.146785][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.159856][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.168212][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.179252][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.185837][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.192493][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.199999][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.216608][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.237742][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.270234][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.293257][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.316786][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.328618][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.348082][ T110] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.363708][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.387104][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1425.410668][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.430750][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.450184][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.463799][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.479877][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.495378][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.518901][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.538300][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.544793][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1425.559507][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.576971][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.592002][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.625368][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.655514][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.672879][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.708894][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.756549][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.798193][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.822898][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.890016][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.919929][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1425.983244][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.008733][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.020627][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.047664][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.077431][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.113041][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.124050][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.158590][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.179725][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.196516][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.210427][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.221525][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.252927][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.290906][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.310762][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.339272][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.375081][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.385145][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.406043][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.413846][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.426824][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.434565][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1426.436934][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.457379][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.471501][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.486409][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.501319][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.515947][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.541099][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.557816][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.569867][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.584552][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1426.595493][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.624923][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.648616][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.688006][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.758033][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.878916][ T6798] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.897032][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.920501][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.943867][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1426.970177][T19723] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.016608][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.035164][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.057306][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.087213][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.100354][T19132] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.119869][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.160170][T15609] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1427.464729][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1427.582959][T20280] random: crng reseeded on system resumption [ 1427.624605][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1427.634440][T20280] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1427.653742][T20280] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1427.674155][T20280] PM: hibernation: Basic memory bitmaps created [ 1427.745261][T20280] 9p: Bad value for 'rfdno' [ 1428.457980][T20278] PM: hibernation: Basic memory bitmaps freed [ 1428.514420][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1428.664467][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1428.785607][T20287] Console: switching to colour dummy device 80x25 [ 1429.054545][T20289] program syz.1.3219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1429.554601][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1429.612506][T20289] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1429.705666][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1429.712257][T20289] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1429.718708][T20289] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1429.724571][T20289] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1429.734927][T20289] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1429.822885][T20289] pci 0000:00:01.0: Adding to iommu group 1 [ 1429.845646][T20289] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1429.849292][T20289] pci 0000:00:01.0: vgaarb: bridge control possible [ 1429.852758][T20289] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1429.893270][T20289] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1429.923808][T20289] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1430.290462][T20295] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 1430.595806][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1430.744490][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1430.780748][T20289] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1430.939311][T20289] [drm] Found bochs VGA, ID 0xb0c5. [ 1430.947257][T20289] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1430.960244][T20289] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1431.300658][T20292] bridge0: port 1(syz_tun) entered blocking state [ 1431.305042][T20292] bridge0: port 1(syz_tun) entered forwarding state [ 1431.624720][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1431.784759][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1431.915345][T20302] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1431.930050][T20302] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1432.665334][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1432.825673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1433.027075][T20328] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3232'. [ 1433.037687][T20328] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1433.356912][T20330] lo speed is unknown, defaulting to 1000 [ 1433.705189][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1433.864476][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1434.745248][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1434.905325][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1435.794766][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1435.944593][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1436.834435][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1436.985205][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1437.872124][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1438.024502][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1438.848249][T20372] binder: 20368:20372 ioctl 4018620d 0 returned -22 [ 1438.914536][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1439.051318][T20367] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1439.055816][T20367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1439.064459][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1439.129096][T20367] vhci_hcd vhci_hcd.0: Device attached [ 1439.404611][ T5743] usb 40-1: SetAddress Request (46) to port 0 [ 1439.407891][ T5743] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1439.519524][T20373] vhci_hcd: connection closed [ 1439.537281][T19009] vhci_hcd vhci_hcd.1: stop threads [ 1439.555165][T19009] vhci_hcd vhci_hcd.1: release socket [ 1439.558712][T20367] erofs (device sr0): cannot find valid erofs superblock [ 1439.574144][T19009] vhci_hcd vhci_hcd.1: disconnect device [ 1439.954657][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1440.082690][T20381] xt_HMARK: proto mask must be zero with L3 mode [ 1440.104445][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1440.365277][T20388] netlink: 'syz.1.3244': attribute type 8 has an invalid length. [ 1440.370861][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3244'. [ 1440.378945][T20388] bond0: entered promiscuous mode [ 1440.381347][T20386] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 1440.386661][T20388] syz_tun: entered promiscuous mode [ 1440.392975][T20388] gretap0: entered promiscuous mode [ 1440.399673][T20388] team0: entered promiscuous mode [ 1440.404847][T20388] debugfs: 'hsr0' already exists in 'hsr' [ 1440.414540][T20388] Cannot create hsr debugfs directory [ 1440.420068][T20388] hsr0: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 1440.433854][T20388] hsr0: entered promiscuous mode [ 1440.511540][T20390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1440.566382][T20393] netlink: 'syz.3.3243': attribute type 10 has an invalid length. [ 1440.607246][T20393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1440.935331][T20386] bond5: option mode: invalid value (7) [ 1440.984526][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1441.144439][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1441.371124][T20386] bond5 (unregistering): Released all slaves [ 1442.024583][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1442.184656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1443.064509][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1443.224455][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1444.104756][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1444.264469][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1444.664995][ T5743] usb 40-1: device descriptor read/8, error -110 [ 1445.144487][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1445.195327][T20393] dummy0: entered promiscuous mode [ 1445.304629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1445.307880][ T5743] usb usb40-port1: attempt power cycle [ 1445.896749][ T5743] usb usb40-port1: unable to enumerate USB device [ 1446.184610][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1446.344549][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1447.005423][T20432] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1447.008915][T20432] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1447.025202][T20438] erofs (device sr0): cannot find valid erofs superblock [ 1447.039418][T20432] vhci_hcd vhci_hcd.0: Device attached [ 1447.224754][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1447.235682][T20441] binder: 20440:20441 ioctl c00c6211 0 returned -14 [ 1447.314719][ T5743] usb 50-1: SetAddress Request (2) to port 0 [ 1447.318490][ T5743] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1447.338501][T20444] loop2: detected capacity change from 0 to 2640 [ 1447.352233][T20409] Buffer I/O error on dev loop2, logical block 0, async page read [ 1447.359573][T20409] Buffer I/O error on dev loop2, logical block 0, async page read [ 1447.364782][T20409] Buffer I/O error on dev loop2, logical block 0, async page read [ 1447.370782][T20409] Buffer I/O error on dev loop2, logical block 0, async page read [ 1447.376873][T20409] Buffer I/O error on dev loop2, logical block 0, async page read [ 1447.384407][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1447.487598][T20436] vhci_hcd: connection closed [ 1447.497525][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1447.534692][ T13] vhci_hcd vhci_hcd.6: release socket [ 1447.541932][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1447.641194][T20444] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1447.646452][T20444] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1447.651119][T20444] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1447.657059][T20444] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1447.663901][T20444] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1448.264622][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1448.424404][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1448.875052][ T5743] usb 50-1: enqueue for inactive port 0 [ 1449.305826][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1449.364847][ T5743] usb usb50-port1: attempt power cycle [ 1449.464620][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1450.227979][ T5743] usb usb50-port1: unable to enumerate USB device [ 1450.344660][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1450.504479][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1450.585221][T14684] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1451.384486][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1451.436494][T20475] binder: 20472:20475 ioctl 4018620d 0 returned -22 [ 1451.544566][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1452.424611][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1452.584485][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1453.464505][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1453.625367][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1454.264557][ T5743] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1454.418205][ T5743] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1454.424279][ T5743] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.429992][ T5743] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1454.436299][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1454.443622][ T5743] usb 6-1: SerialNumber: syz [ 1454.505214][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1454.664472][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1454.723684][T20498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1454.743050][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1454.767137][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1454.820104][T20518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1455.385941][T14684] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1455.544517][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1455.704586][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1456.599067][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1456.722380][ T5743] usb 6-1: USB disconnect, device number 23 [ 1456.744575][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1457.625428][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1457.784570][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1458.665595][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1458.827282][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1459.704699][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1459.864483][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1460.754553][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1460.904535][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1461.784483][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1461.944563][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1462.824800][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1462.985177][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1463.875010][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1464.024508][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1464.906161][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1465.064494][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1465.944602][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1466.104482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1466.984656][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1467.144490][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1467.313360][T20552] netlink: 468 bytes leftover after parsing attributes in process `syz.1.3274'. [ 1467.443850][T20553] jffs2: notice: (20553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1467.849513][T20563] overlayfs: missing 'lowerdir' [ 1468.009544][T20571] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1468.034616][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1468.184502][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1469.064670][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1469.224552][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1470.104629][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1470.268021][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1470.567520][ T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1471.144912][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1471.305159][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1472.184680][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1472.344520][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1473.224503][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1473.384577][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1474.265230][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1474.422605][T20647] erofs (device sr0): cannot find valid erofs superblock [ 1474.424474][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1475.110051][T20639] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1475.113520][T20639] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1475.181298][T20639] vhci_hcd vhci_hcd.0: Device attached [ 1475.304737][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1475.334429][T20659] vhci_hcd: connection closed [ 1475.334759][ T9918] vhci_hcd vhci_hcd.6: stop threads [ 1475.342608][ T9918] vhci_hcd vhci_hcd.6: release socket [ 1475.347583][ T9918] vhci_hcd vhci_hcd.6: disconnect device [ 1475.464562][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1475.572300][T20667] binder: 20665:20667 ioctl c00c6211 0 returned -14 [ 1475.613808][T20666] syzkaller1: entered promiscuous mode [ 1475.637359][T20671] loop2: detected capacity change from 0 to 2640 [ 1475.648838][T20671] buffer_io_error: 325 callbacks suppressed [ 1475.648851][T20671] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1475.656888][T20671] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1475.661483][T20671] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1475.666267][T20671] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1475.670676][T20671] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1475.675408][T20671] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1475.679766][T20671] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1475.684093][T20671] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1475.688968][T20671] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1475.693558][T20671] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1475.719041][T20666] syzkaller1: entered allmulticast mode [ 1476.345386][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1476.504641][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1476.602702][T20679] CIFS: Attempting to mount //127.0.0.1/share [ 1476.607189][T20679] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1476.611154][T20679] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1477.394786][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1477.544471][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1477.669620][T20693] hpfs: hpfs_map_sector(): read error [ 1477.689874][T20696] netlink: 'syz.6.3306': attribute type 11 has an invalid length. [ 1477.831679][T20698] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1477.837008][T20698] CPU: 3 UID: 0 PID: 20698 Comm: syz.1.3307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.837037][T20698] Tainted: [L]=SOFTLOCKUP [ 1477.837045][T20698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1477.837070][T20698] Call Trace: [ 1477.837127][T20698] [ 1477.837133][T20698] dump_stack_lvl+0x100/0x190 [ 1477.837259][T20698] sysfs_warn_dup.cold+0x1c/0x28 [ 1477.837301][T20698] sysfs_create_dir_ns+0x24b/0x2b0 [ 1477.837387][T20698] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1477.837411][T20698] ? kobject_add_internal+0x25f/0x930 [ 1477.837458][T20698] ? lock_release+0x24d/0x310 [ 1477.837488][T20698] ? class_dir_child_ns_type+0xd/0x60 [ 1477.837526][T20698] kobject_add_internal+0x2c8/0x930 [ 1477.837549][T20698] kobject_add+0x16a/0x1e0 [ 1477.837575][T20698] ? __pfx_kobject_add+0x10/0x10 [ 1477.837600][T20698] ? rcu_is_watching+0x13/0xc0 [ 1477.837626][T20698] ? get_device_parent+0x1b3/0x4c0 [ 1477.837643][T20698] ? kobject_put+0xb9/0x640 [ 1477.837665][T20698] device_add+0x294/0x1970 [ 1477.837688][T20698] ? lockdep_init_map_type+0x5c/0x250 [ 1477.837709][T20698] ? __pfx_device_add+0x10/0x10 [ 1477.837731][T20698] ? lockdep_init_map_type+0x5c/0x250 [ 1477.837748][T20698] ? __init_waitqueue_head+0xca/0x150 [ 1477.837772][T20698] tty_register_device_attr+0x388/0x7f0 [ 1477.837806][T20698] ? lockdep_init_map_type+0x5c/0x250 [ 1477.837826][T20698] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1477.837845][T20698] ? tty_port_init+0x156/0x1c0 [ 1477.837868][T20698] gsm_activate_mux+0x155/0x2a0 [ 1477.837889][T20698] gsmld_ioctl+0xbbc/0x15c0 [ 1477.837913][T20698] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1477.837935][T20698] ? rcu_is_watching+0x13/0xc0 [ 1477.837960][T20698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1477.837984][T20698] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1477.838006][T20698] tty_compat_ioctl+0x396/0x420 [ 1477.838026][T20698] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1477.838045][T20698] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1477.838074][T20698] __do_fast_syscall_32+0x13a/0x8b0 [ 1477.838097][T20698] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 1477.838126][T20698] do_fast_syscall_32+0x32/0x70 [ 1477.838146][T20698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1477.838167][T20698] RIP: 0023:0xf6feefec [ 1477.838188][T20698] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1477.838238][T20698] RSP: 002b:00000000f539b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1477.838254][T20698] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 1477.838269][T20698] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1477.838282][T20698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1477.838295][T20698] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1477.838307][T20698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1477.838323][T20698] [ 1477.838661][T20698] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1478.071844][T20696] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 1478.076125][T20696] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 1478.424482][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1478.584491][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1478.908608][T20710] PM: Image not found (code -22) [ 1479.464683][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1479.624521][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1480.514954][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1480.664869][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1481.015991][T20732] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1481.031258][T20732] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1481.545833][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1481.704755][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1482.102933][T20741] siw: device registration error -23 [ 1482.584735][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1482.744524][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1483.033545][T20735] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1483.271774][T20747] overlayfs: failed to resolve './bus': -2 [ 1483.624662][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1483.784543][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1484.346294][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.362598][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.674445][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1484.824602][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1485.393456][T20764] jffs2: notice: (20764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1485.714583][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1485.864457][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1486.745117][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1486.905937][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1487.784747][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1487.945730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1488.834667][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1488.984552][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1489.864595][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1490.024610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1490.361313][T20823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.904649][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1491.064567][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1491.089047][T20815] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1491.112456][T20834] netlink: 'syz.6.3339': attribute type 1 has an invalid length. [ 1491.149652][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3339'. [ 1491.944841][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1492.104462][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1492.585080][T20849] overlayfs: failed to resolve './bus': -2 [ 1492.984728][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1493.144479][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1494.024524][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1494.184531][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1495.074577][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1495.224495][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1495.472646][T20881] syzkaller0: entered promiscuous mode [ 1495.501590][T20881] syzkaller0: entered allmulticast mode [ 1495.737547][T20882] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1495.742066][T20882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1495.905931][T20882] vhci_hcd vhci_hcd.0: Device attached [ 1495.947807][T20885] vhci_hcd: connection closed [ 1495.948039][T17894] vhci_hcd vhci_hcd.1: stop threads [ 1495.959472][T17894] vhci_hcd vhci_hcd.1: release socket [ 1496.029870][T17894] vhci_hcd vhci_hcd.1: disconnect device [ 1496.104663][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1496.264577][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1497.144558][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1497.304508][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1497.509894][T20907] syz.3.3359: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1497.575810][T20907] CPU: 3 UID: 0 PID: 20907 Comm: syz.3.3359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.575847][T20907] Tainted: [L]=SOFTLOCKUP [ 1497.575855][T20907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1497.575868][T20907] Call Trace: [ 1497.575876][T20907] [ 1497.575884][T20907] dump_stack_lvl+0x100/0x190 [ 1497.575915][T20907] warn_alloc.cold+0x9e/0xb2 [ 1497.575935][T20907] ? __pfx_warn_alloc+0x10/0x10 [ 1497.575983][T20907] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1497.576007][T20907] ? xskq_create+0x52/0x290 [ 1497.576023][T20907] ? xsk_setsockopt+0x743/0xab0 [ 1497.576051][T20907] ? __sys_setsockopt+0x119/0x190 [ 1497.576116][T20907] ? do_fast_syscall_32+0x32/0x70 [ 1497.576140][T20907] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1497.576166][T20907] __vmalloc_node_range_noprof+0x123b/0x1460 [ 1497.576199][T20907] ? xsk_setsockopt+0x743/0xab0 [ 1497.576229][T20907] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1497.576249][T20907] ? __kasan_kmalloc+0xaa/0xb0 [ 1497.576278][T20907] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1497.576299][T20907] ? xskq_create+0x52/0x290 [ 1497.576316][T20907] ? xsk_setsockopt+0x743/0xab0 [ 1497.576342][T20907] xskq_create+0x18f/0x290 [ 1497.576359][T20907] ? xsk_setsockopt+0x743/0xab0 [ 1497.576388][T20907] xsk_setsockopt+0x743/0xab0 [ 1497.576429][T20907] ? __pfx_aa_sk_perm+0x10/0x10 [ 1497.576496][T20907] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1497.576526][T20907] ? aa_sock_opt_perm+0xff/0x1b0 [ 1497.576556][T20907] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1497.576582][T20907] do_sock_setsockopt+0xf3/0x1d0 [ 1497.576604][T20907] __sys_setsockopt+0x119/0x190 [ 1497.576626][T20907] __ia32_sys_setsockopt+0xbc/0x160 [ 1497.576644][T20907] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1497.576677][T20907] __do_fast_syscall_32+0x13a/0x8b0 [ 1497.576699][T20907] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 1497.576724][T20907] do_fast_syscall_32+0x32/0x70 [ 1497.576747][T20907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1497.576771][T20907] RIP: 0023:0xf6feefec [ 1497.576793][T20907] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1497.576802][T20907] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1497.576824][T20907] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 1497.576837][T20907] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1497.576850][T20907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1497.576863][T20907] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1497.576875][T20907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1497.576894][T20907] [ 1497.577808][T20907] Mem-Info: [ 1497.748994][T20907] active_anon:3344 inactive_anon:2062 isolated_anon:0 [ 1497.748994][T20907] active_file:1115 inactive_file:3832 isolated_file:0 [ 1497.748994][T20907] unevictable:1308 dirty:180 writeback:0 [ 1497.748994][T20907] slab_reclaimable:6962 slab_unreclaimable:72910 [ 1497.748994][T20907] mapped:27260 shmem:2871 pagetables:1574 [ 1497.748994][T20907] sec_pagetables:369 bounce:0 [ 1497.748994][T20907] kernel_misc_reclaimable:0 [ 1497.748994][T20907] free:20530 free_pcp:11829 free_cma:0 [ 1497.778419][T20907] Node 0 active_anon:20kB inactive_anon:72kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7968kB pagetables:1240kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1497.800547][T20907] Node 1 active_anon:13356kB inactive_anon:8176kB active_file:4460kB inactive_file:15300kB unevictable:4960kB isolated(anon):0kB isolated(file):0kB mapped:108848kB dirty:720kB writeback:0kB shmem:11484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7316kB pagetables:5056kB sec_pagetables:320kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1497.824203][T20907] Node 0 DMA free:1368kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1160kB local_pcp:124kB free_cma:0kB [ 1497.874282][T20907] lowmem_reserve[]: 0 278 278 278 278 [ 1497.877972][T20907] Node 0 DMA32 free:6660kB boost:31144kB min:44988kB low:48448kB high:51908kB reserved_highatomic:2048KB free_highatomic:816KB active_anon:20kB inactive_anon:72kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB zspages:244kB present:1032196kB managed:285604kB mlocked:0kB bounce:0kB free_pcp:25920kB local_pcp:10880kB free_cma:0kB [ 1497.900485][T20907] lowmem_reserve[]: 0 0 0 0 0 [ 1497.903560][T20907] Node 1 DMA32 free:73436kB boost:0kB min:45960kB low:57448kB high:68936kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13356kB inactive_anon:8176kB active_file:4460kB inactive_file:15300kB unevictable:200kB writepending:720kB zspages:5504kB present:1048432kB managed:948212kB mlocked:72kB bounce:0kB free_pcp:25748kB local_pcp:16112kB free_cma:0kB [ 1497.950004][T20907] lowmem_reserve[]: 0 0 0 0 0 [ 1497.957481][T20907] Node 0 DMA: 58*4kB (UM) 6*8kB (U) 2*16kB (U) 7*32kB (U) 1*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1368kB [ 1497.967411][T20907] Node 0 DMA32: 19*4kB (UH) 15*8kB (H) 74*16kB (UH) 41*32kB (UEH) 20*64kB [ 1497.967705][T20913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1497.976234][T20913] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1497.981481][T20913] vhci_hcd vhci_hcd.0: Device attached [ 1497.985562][T20907] (UE) 7*128kB (UEH) 1*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 6660kB [ 1497.990456][T20907] Node 1 DMA32: 640*4kB (UME) 1048*8kB (UME) 833*16kB (UME) 419*32kB (UME) 124*64kB (UME) 47*128kB (UME) 13*256kB (M) 4*512kB (M) 4*1024kB (UM) 2*2048kB (M) 2*4096kB (UM) = 73392kB [ 1498.000601][T20907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.010056][T20907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.028833][T20907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.184674][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1498.227443][T20917] vhci_hcd: connection closed [ 1498.228506][T19009] vhci_hcd vhci_hcd.1: stop threads [ 1498.234003][T19009] vhci_hcd vhci_hcd.1: release socket [ 1498.238040][T19009] vhci_hcd vhci_hcd.1: disconnect device [ 1498.254418][ T5743] usb 40-1: enqueue for inactive port 0 [ 1498.334868][T20907] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1498.341478][T20907] 9069 total pagecache pages [ 1498.344016][T20907] 1219 pages in swap cache [ 1498.345508][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1498.346604][T20907] Free swap = 88640kB [ 1498.352676][T20907] Total swap = 124996kB [ 1498.355281][T20907] 524155 pages RAM [ 1498.358485][T20907] 0 pages HighMem/MovableOnly [ 1498.361180][T20907] 211861 pages reserved [ 1498.363507][T20907] 0 pages cma reserved [ 1498.757579][ T5743] usb usb40-port1: attempt power cycle [ 1499.224468][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1499.384807][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1499.454800][ T5743] usb usb40-port1: unable to enumerate USB device [ 1500.274659][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1500.424673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1501.305276][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1501.465841][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1502.356015][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1502.504548][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1503.384656][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1503.546993][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1504.424622][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1504.585682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1505.237761][T20976] program syz.6.3370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1505.465021][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1505.553598][T20976] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1505.603741][T20976] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1505.610634][T20976] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1505.623837][T20976] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1505.626293][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1505.643158][T20976] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1505.667025][T20976] pci 0000:00:01.0: Adding to iommu group 1 [ 1505.676759][T20976] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1505.681893][T20976] pci 0000:00:01.0: vgaarb: bridge control possible [ 1505.686739][T20976] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1505.723102][T20976] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1505.731556][T20976] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1505.740309][T20976] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1505.763605][T20976] [drm] Found bochs VGA, ID 0xb0c5. [ 1505.767719][T20976] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1505.860560][T20976] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1506.140083][T20976] Console: switching to colour frame buffer device 160x50 [ 1506.146993][T20976] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1506.295176][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1506.468294][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1506.491692][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1506.505056][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1506.545393][ T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1506.563128][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1506.585673][ T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1506.605106][ T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1506.627577][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1506.665006][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1506.682734][ T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1506.704885][ T10] usb 6-1: Product: syz [ 1506.715437][ T10] usb 6-1: Manufacturer: syz [ 1506.724311][ T10] usb 6-1: SerialNumber: syz [ 1506.748199][ T10] usb 6-1: config 0 descriptor?? [ 1506.773111][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1506.802304][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1507.547737][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1507.704646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1508.496583][T20997] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1508.594697][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1508.744462][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1509.056125][ T10] usb 6-1: USB disconnect, device number 24 [ 1509.103968][ T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1509.515346][T11275] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1509.624693][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1509.784771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1510.599706][T21028] dvmrp8: entered allmulticast mode [ 1510.608653][T21034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1510.613241][T21034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1510.660857][T21034] vhci_hcd vhci_hcd.0: Device attached [ 1510.665607][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1510.697619][T21038] erofs (device sr0): cannot find valid erofs superblock [ 1510.789480][T21040] siw: device registration error -23 [ 1510.825619][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1510.915359][T11275] usb 40-1: SetAddress Request (54) to port 0 [ 1511.057730][ T42] kauditd_printk_skb: 136 callbacks suppressed [ 1511.057767][ T42] audit: type=1800 audit(1787306063.112:6475): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3388" name="attr_allow_any_host" dev="configfs" ino=93511 res=0 errno=0 [ 1511.085489][T11275] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1511.159905][T21040] nvmet: adding nsid 1 to subsystem testnqn [ 1511.207151][ T42] audit: type=1800 audit(1787306063.262:6476): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3388" name="addr_trtype" dev="configfs" ino=93518 res=0 errno=0 [ 1511.261176][ T42] audit: type=1800 audit(1787306063.302:6477): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3388" name="addr_adrfam" dev="configfs" ino=93519 res=0 errno=0 [ 1511.334035][T21035] vhci_hcd: connection reset by peer [ 1511.347330][T18085] vhci_hcd vhci_hcd.1: stop threads [ 1511.350348][T18085] vhci_hcd vhci_hcd.1: release socket [ 1511.351653][T21040] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 1511.359523][T18085] vhci_hcd vhci_hcd.1: disconnect device [ 1511.365131][ T42] audit: type=1800 audit(1787306063.392:6478): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3388" name="addr_traddr" dev="configfs" ino=93520 res=0 errno=0 [ 1511.403122][ T42] audit: type=1800 audit(1787306063.402:6479): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3388" name="addr_trsvcid" dev="configfs" ino=93521 res=0 errno=0 [ 1511.714576][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1511.813475][T21040] nvme nvme0: rdma connection establishment failed (-512) [ 1511.865119][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1512.744764][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1512.905007][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1513.680957][T21068] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1513.684068][T21068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1513.717808][T21068] vhci_hcd vhci_hcd.0: Device attached [ 1513.794580][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1513.830079][T21068] erofs (device sr0): cannot find valid erofs superblock [ 1513.944637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1513.948428][T21069] vhci_hcd: connection closed [ 1513.948618][T19009] vhci_hcd vhci_hcd.1: stop threads [ 1513.961003][T19009] vhci_hcd vhci_hcd.1: release socket [ 1513.970712][T19009] vhci_hcd vhci_hcd.1: disconnect device [ 1514.824776][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1514.984524][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1515.865195][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1516.024644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1516.264649][T11275] usb 40-1: device descriptor read/8, error -110 [ 1516.668657][T11275] usb usb40-port1: attempt power cycle [ 1516.907298][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1517.064520][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1517.144986][T13580] Bluetooth: hci4: command 0x0406 tx timeout [ 1517.240610][T11275] usb usb40-port1: unable to enumerate USB device [ 1517.944662][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1518.104564][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1518.994697][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1519.145374][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1520.024543][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1520.188873][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1520.688825][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3399'. [ 1520.986747][T21111] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1520.990200][T21111] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1521.007727][T21115] erofs (device sr0): cannot find valid erofs superblock [ 1521.007854][T21111] vhci_hcd vhci_hcd.0: Device attached [ 1521.064744][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1521.224467][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1522.104546][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1522.264488][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1522.278720][T21112] vhci_hcd: connection closed [ 1522.279622][ T9918] vhci_hcd vhci_hcd.3: stop threads [ 1522.285143][ T9918] vhci_hcd vhci_hcd.3: release socket [ 1522.288072][ T9918] vhci_hcd vhci_hcd.3: disconnect device [ 1523.154720][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1523.304571][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1524.160617][T21127] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1524.164198][T21127] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1524.174036][T21127] vhci_hcd vhci_hcd.0: Device attached [ 1524.194584][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1524.345256][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1524.474844][T14684] usb 48-1: SetAddress Request (46) to port 0 [ 1524.484684][T14684] usb 48-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1524.547864][T21127] erofs (device sr0): cannot find valid erofs superblock [ 1524.693523][T21132] vhci_hcd: connection reset by peer [ 1524.708691][T17894] vhci_hcd vhci_hcd.5: stop threads [ 1524.730390][T17894] vhci_hcd vhci_hcd.5: release socket [ 1524.758952][T17894] vhci_hcd vhci_hcd.5: disconnect device [ 1525.234570][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1525.384649][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1526.260172][T21155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1526.265411][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1526.424475][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1526.603331][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3411'. [ 1527.108794][ T42] audit: type=1800 audit(1787306079.162:6480): pid=21166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3415" name="idProduct" dev="configfs" ino=93123 res=0 errno=0 [ 1527.176367][ T42] audit: type=1800 audit(1787306079.172:6481): pid=21166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3415" name="serialnumber" dev="configfs" ino=93124 res=0 errno=0 [ 1527.224547][ T42] audit: type=1800 audit(1787306079.192:6482): pid=21166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3415" name="configuration" dev="configfs" ino=93126 res=0 errno=0 [ 1527.304621][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1527.465117][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1528.025656][T21179] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1528.029094][T21179] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1528.052214][T21179] vhci_hcd vhci_hcd.0: Device attached [ 1528.170912][T21179] erofs (device sr0): cannot find valid erofs superblock [ 1528.344680][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1528.504556][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1528.858577][T21182] vhci_hcd: connection closed [ 1528.858726][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1528.864786][ T13] vhci_hcd vhci_hcd.5: release socket [ 1528.877391][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1528.996041][T21191] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1528.999452][T21191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1529.036464][T21191] vhci_hcd vhci_hcd.0: Device attached [ 1529.198054][T21191] erofs (device sr0): cannot find valid erofs superblock [ 1529.307547][ T9] usb 40-1: SetAddress Request (58) to port 0 [ 1529.329617][ T9] usb 40-1: new SuperSpeed USB device number 58 using vhci_hcd [ 1529.339196][T21192] vhci_hcd: connection closed [ 1529.339359][T17894] vhci_hcd vhci_hcd.1: stop threads [ 1529.359039][T17894] vhci_hcd vhci_hcd.1: release socket [ 1529.364121][T17894] vhci_hcd vhci_hcd.1: disconnect device [ 1529.385388][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1529.544512][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1529.544546][T14684] usb 48-1: device descriptor read/8, error -110 [ 1529.952616][T14684] usb usb48-port1: attempt power cycle [ 1530.425641][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1530.584504][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1531.034873][T14684] usb usb48-port1: unable to enumerate USB device [ 1531.465829][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1531.624494][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1532.504541][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1532.511057][T14684] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1532.559853][T21216] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 1532.664596][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1533.313473][T21216] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 1533.539556][T19928] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 1533.544758][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1533.704733][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1533.751857][T21232] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1534.383297][T21244] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1534.386731][T21244] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1534.419520][T21244] vhci_hcd vhci_hcd.0: Device attached [ 1534.460497][T21248] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1534.465077][T21248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1534.520766][T21248] vhci_hcd vhci_hcd.0: Device attached [ 1534.554466][T21245] dvmrp8: entered allmulticast mode [ 1534.591389][T21244] erofs (device sr0): cannot find valid erofs superblock [ 1534.594507][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1534.744593][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1534.794980][ T5743] usb 44-1: SetAddress Request (46) to port 0 [ 1534.803929][ T5743] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1534.831232][T21248] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1534.857485][T21246] vhci_hcd: connection reset by peer [ 1534.874498][T19009] vhci_hcd vhci_hcd.1: stop threads [ 1534.877428][T19009] vhci_hcd vhci_hcd.1: release socket [ 1534.880424][ T9] usb 40-1: device descriptor read/8, error -110 [ 1534.888868][T19009] vhci_hcd vhci_hcd.1: disconnect device [ 1535.180732][T21249] vhci_hcd: connection reset by peer [ 1535.203658][T19009] vhci_hcd vhci_hcd.3: stop threads [ 1535.208549][T19009] vhci_hcd vhci_hcd.3: release socket [ 1535.211632][T19009] vhci_hcd vhci_hcd.3: disconnect device [ 1535.298617][ T9] usb usb40-port1: attempt power cycle [ 1535.626310][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1535.705824][T21264] syz.1.3437: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1535.718468][T21264] CPU: 3 UID: 0 PID: 21264 Comm: syz.1.3437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.718504][T21264] Tainted: [L]=SOFTLOCKUP [ 1535.718513][T21264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1535.718538][T21264] Call Trace: [ 1535.718591][T21264] [ 1535.718601][T21264] dump_stack_lvl+0x100/0x190 [ 1535.718750][T21264] warn_alloc.cold+0x9e/0xb2 [ 1535.718783][T21264] ? __pfx_warn_alloc+0x10/0x10 [ 1535.718880][T21264] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1535.718907][T21264] ? xskq_create+0x52/0x290 [ 1535.718950][T21264] ? xsk_setsockopt+0x743/0xab0 [ 1535.718978][T21264] ? __sys_setsockopt+0x119/0x190 [ 1535.719029][T21264] ? do_fast_syscall_32+0x32/0x70 [ 1535.719054][T21264] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1535.719085][T21264] __vmalloc_node_range_noprof+0x123b/0x1460 [ 1535.719122][T21264] ? xsk_setsockopt+0x743/0xab0 [ 1535.719157][T21264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1535.719180][T21264] ? __kasan_kmalloc+0xaa/0xb0 [ 1535.719212][T21264] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1535.719237][T21264] ? xskq_create+0x52/0x290 [ 1535.719256][T21264] ? xsk_setsockopt+0x743/0xab0 [ 1535.719284][T21264] xskq_create+0x18f/0x290 [ 1535.719302][T21264] ? xsk_setsockopt+0x743/0xab0 [ 1535.719331][T21264] xsk_setsockopt+0x743/0xab0 [ 1535.719359][T21264] ? __pfx_aa_sk_perm+0x10/0x10 [ 1535.719420][T21264] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1535.719452][T21264] ? aa_sock_opt_perm+0xff/0x1b0 [ 1535.719486][T21264] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1535.719515][T21264] do_sock_setsockopt+0xf3/0x1d0 [ 1535.719541][T21264] __sys_setsockopt+0x119/0x190 [ 1535.719563][T21264] __ia32_sys_setsockopt+0xbc/0x160 [ 1535.719583][T21264] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1535.719620][T21264] __do_fast_syscall_32+0x13a/0x8b0 [ 1535.719644][T21264] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 1535.719669][T21264] do_fast_syscall_32+0x32/0x70 [ 1535.719699][T21264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1535.719724][T21264] RIP: 0023:0xf6feefec [ 1535.719750][T21264] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1535.719792][T21264] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1535.719814][T21264] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 1535.719829][T21264] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1535.719842][T21264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1535.719854][T21264] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1535.719868][T21264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1535.719886][T21264] [ 1535.719903][T21264] Mem-Info: [ 1535.784618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1535.789915][T21264] active_anon:6009 inactive_anon:1492 isolated_anon:0 [ 1535.789915][T21264] active_file:2473 inactive_file:2815 isolated_file:0 [ 1535.789915][T21264] unevictable:1018 dirty:514 writeback:0 [ 1535.789915][T21264] slab_reclaimable:6961 slab_unreclaimable:72547 [ 1535.789915][T21264] mapped:28913 shmem:6202 pagetables:1455 [ 1535.789915][T21264] sec_pagetables:369 bounce:0 [ 1535.789915][T21264] kernel_misc_reclaimable:0 [ 1535.789915][T21264] free:18422 free_pcp:11772 free_cma:0 [ 1535.866443][ T9] usb usb40-port1: unable to enumerate USB device [ 1535.911070][T21264] Node 0 active_anon:20kB inactive_anon:72kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7936kB pagetables:1240kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1536.033089][T21264] Node 1 active_anon:20684kB inactive_anon:5896kB active_file:9892kB inactive_file:11232kB unevictable:4072kB isolated(anon):0kB isolated(file):0kB mapped:101792kB dirty:2056kB writeback:0kB shmem:21476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6944kB pagetables:4580kB sec_pagetables:320kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1536.304849][T21264] Node 0 DMA free:1368kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1160kB local_pcp:124kB free_cma:0kB [ 1536.328402][T21264] lowmem_reserve[]: 0 278 278 278 278 [ 1536.335814][T21264] Node 0 DMA32 free:6660kB boost:31144kB min:44988kB low:48448kB high:51908kB reserved_highatomic:2048KB free_highatomic:816KB active_anon:20kB inactive_anon:72kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB zspages:244kB present:1032196kB managed:285604kB mlocked:0kB bounce:0kB free_pcp:26080kB local_pcp:10964kB free_cma:0kB [ 1536.361375][T21264] lowmem_reserve[]: 0 0 0 0 0 [ 1536.454445][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3436'. [ 1536.665057][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1536.824829][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1537.318420][T21264] Node 1 DMA32 free:67440kB boost:0kB min:45960kB low:57448kB high:68936kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14556kB inactive_anon:5912kB active_file:9892kB inactive_file:11232kB unevictable:4072kB writepending:2144kB zspages:5476kB present:1048432kB managed:948212kB mlocked:72kB bounce:0kB free_pcp:25768kB local_pcp:6780kB free_cma:0kB [ 1537.339072][T21264] lowmem_reserve[]: 0 0 0 0 0 [ 1537.341620][T21264] Node 0 DMA: 58*4kB (UM) 6*8kB (U) 2*16kB (U) 7*32kB (U) 1*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1368kB [ 1537.350139][T21264] Node 0 DMA32: 19*4kB (UH) 15*8kB (H) 74*16kB (UH) 41*32kB (UEH) 20*64kB (UE) 7*128kB (UEH) 1*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 6660kB [ 1537.359336][T21264] Node 1 DMA32: 695*4kB (UM) 559*8kB (UME) 439*16kB (UME) 327*32kB (ME) 157*64kB (UME) 75*128kB (UME) 32*256kB (UM) 4*512kB (M) 6*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 66916kB [ 1537.369341][T21264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.374761][T21264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1537.379622][T21264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.384730][T21264] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1537.389542][T21264] 10559 total pagecache pages [ 1537.391953][T21264] 1337 pages in swap cache [ 1537.397201][T21264] Free swap = 89116kB [ 1537.399361][T21264] Total swap = 124996kB [ 1537.401483][T21264] 524155 pages RAM [ 1537.403406][T21264] 0 pages HighMem/MovableOnly [ 1537.406424][T21264] 211861 pages reserved [ 1537.408622][T21264] 0 pages cma reserved [ 1537.706633][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1537.864466][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1538.603835][T21296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3439'. [ 1538.662613][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3439'. [ 1538.754568][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1538.904487][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1539.794725][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1539.875382][ T5743] usb 44-1: device descriptor read/8, error -110 [ 1539.944474][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1540.285508][ T5743] usb usb44-port1: attempt power cycle [ 1540.824515][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1540.864980][ T5743] usb usb44-port1: unable to enumerate USB device [ 1540.984559][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1541.864866][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1542.024586][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1542.914522][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1543.064576][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1543.944667][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1544.104499][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1544.984478][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1545.144590][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1545.788205][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.792266][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.025980][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1546.185136][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1546.617027][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1546.635936][T21333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1546.640299][T21333] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1546.653827][T21333] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1546.659855][T21333] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1546.774455][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 1546.779924][ T10] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1546.791359][ T10] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 1546.796439][ T10] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1546.803746][ T10] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1546.812792][ T10] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1546.825937][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1546.838841][ T10] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1546.845232][ T10] usb 11-1: Product: syz [ 1546.848182][ T10] usb 11-1: Manufacturer: syz [ 1546.851001][ T10] usb 11-1: SerialNumber: syz [ 1546.867814][ T10] usb 11-1: config 0 descriptor?? [ 1546.880965][ T10] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1546.891145][ T10] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1547.076142][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1547.112598][ T10] usb 11-1: USB disconnect, device number 2 [ 1547.127307][ T10] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 1547.224468][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1547.379241][T21357] syz.5.3449: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1547.389643][T21357] CPU: 0 UID: 0 PID: 21357 Comm: syz.5.3449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1547.389666][T21357] Tainted: [L]=SOFTLOCKUP [ 1547.389671][T21357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1547.389680][T21357] Call Trace: [ 1547.389685][T21357] [ 1547.389690][T21357] dump_stack_lvl+0x100/0x190 [ 1547.389710][T21357] warn_alloc.cold+0x9e/0xb2 [ 1547.389723][T21357] ? __pfx_warn_alloc+0x10/0x10 [ 1547.389741][T21357] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1547.389755][T21357] ? xskq_create+0x52/0x290 [ 1547.389766][T21357] ? xsk_setsockopt+0x743/0xab0 [ 1547.389784][T21357] ? __sys_setsockopt+0x119/0x190 [ 1547.389797][T21357] ? do_fast_syscall_32+0x32/0x70 [ 1547.389810][T21357] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1547.389828][T21357] __vmalloc_node_range_noprof+0x123b/0x1460 [ 1547.389843][T21357] ? xsk_setsockopt+0x743/0xab0 [ 1547.389862][T21357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1547.389875][T21357] ? __kasan_kmalloc+0xaa/0xb0 [ 1547.389894][T21357] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1547.389908][T21357] ? xskq_create+0x52/0x290 [ 1547.389918][T21357] ? xsk_setsockopt+0x743/0xab0 [ 1547.389934][T21357] xskq_create+0x18f/0x290 [ 1547.389949][T21357] ? xsk_setsockopt+0x743/0xab0 [ 1547.389966][T21357] xsk_setsockopt+0x743/0xab0 [ 1547.389982][T21357] ? __pfx_aa_sk_perm+0x10/0x10 [ 1547.390000][T21357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1547.390021][T21357] ? aa_sock_opt_perm+0xff/0x1b0 [ 1547.390042][T21357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1547.390062][T21357] do_sock_setsockopt+0xf3/0x1d0 [ 1547.390079][T21357] __sys_setsockopt+0x119/0x190 [ 1547.390092][T21357] __ia32_sys_setsockopt+0xbc/0x160 [ 1547.390103][T21357] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1547.390119][T21357] __do_fast_syscall_32+0x13a/0x8b0 [ 1547.390132][T21357] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 1547.390146][T21357] do_fast_syscall_32+0x32/0x70 [ 1547.390160][T21357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1547.390174][T21357] RIP: 0023:0xf7f78fec [ 1547.390189][T21357] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 1547.390194][T21357] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1547.390206][T21357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 1547.390213][T21357] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1547.390220][T21357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1547.390226][T21357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1547.390232][T21357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1547.390242][T21357] [ 1547.390298][T21357] Mem-Info: [ 1547.533906][T21357] active_anon:4444 inactive_anon:1555 isolated_anon:0 [ 1547.533906][T21357] active_file:2591 inactive_file:3202 isolated_file:0 [ 1547.533906][T21357] unevictable:1018 dirty:480 writeback:0 [ 1547.533906][T21357] slab_reclaimable:6962 slab_unreclaimable:73198 [ 1547.533906][T21357] mapped:25409 shmem:3859 pagetables:1494 [ 1547.533906][T21357] sec_pagetables:369 bounce:0 [ 1547.533906][T21357] kernel_misc_reclaimable:0 [ 1547.533906][T21357] free:19333 free_pcp:11696 free_cma:0 [ 1547.569827][T21357] Node 0 active_anon:20kB inactive_anon:68kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7968kB pagetables:1240kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1547.708334][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1548.106805][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1548.265220][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1548.594515][T21357] Node 1 active_anon:29828kB inactive_anon:3368kB active_file:10580kB inactive_file:7140kB unevictable:4072kB isolated(anon):0kB isolated(file):0kB mapped:113464kB dirty:128kB writeback:0kB shmem:26968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7036kB pagetables:4824kB sec_pagetables:320kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1549.145326][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1549.305157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1549.564148][T10306] Bluetooth: hci4: command 0x0406 tx timeout [ 1549.567755][T10306] Bluetooth: hci0: command 0x0405 tx timeout [ 1549.571947][T21357] Node 0 DMA free:1368kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1164kB local_pcp:144kB free_cma:0kB [ 1549.589017][T21357] lowmem_reserve[]: 0 278 278 278 278 [ 1549.592330][T21357] Node 0 DMA32 free:6660kB boost:31144kB min:44988kB low:48448kB high:51908kB reserved_highatomic:2048KB free_highatomic:816KB active_anon:20kB inactive_anon:68kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB zspages:244kB present:1032196kB managed:285604kB mlocked:0kB bounce:0kB free_pcp:26200kB local_pcp:12444kB free_cma:0kB [ 1549.610943][T21357] lowmem_reserve[]: 0 0 0 0 0 [ 1549.626831][T21357] Node 1 DMA32 free:87620kB boost:0kB min:45960kB low:57448kB high:68936kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11688kB inactive_anon:3376kB active_file:10580kB inactive_file:7140kB unevictable:4072kB writepending:564kB zspages:4892kB present:1048432kB managed:948212kB mlocked:72kB bounce:0kB free_pcp:16892kB local_pcp:7368kB free_cma:0kB [ 1549.697324][T21357] lowmem_reserve[]: 0 0 0 0 0 [ 1549.700270][T21357] Node 0 DMA: 58*4kB (UM) 6*8kB (U) 2*16kB (U) 7*32kB (U) 1*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1368kB [ 1549.710231][T21357] Node 0 DMA32: 19*4kB (UH) 15*8kB (H) 74*16kB (UH) 41*32kB (UEH) 20*64kB (UE) 7*128kB (UEH) 1*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 6660kB [ 1549.721664][T21357] Node 1 DMA32: 2208*4kB (UME) 1505*8kB (UME) 554*16kB (UM) 424*32kB (UME) 159*64kB (UME) 65*128kB (UME) 32*256kB (UM) 4*512kB (M) 6*1024kB (UM) 2*2048kB (UM) 1*4096kB (M) = 86376kB [ 1549.732610][T21357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1549.744342][T21357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1549.749621][T21357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1549.764330][T21357] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1549.769503][T21357] 6822 total pagecache pages [ 1549.772260][T21357] 1366 pages in swap cache [ 1549.775471][T21357] Free swap = 89760kB [ 1549.777794][T21357] Total swap = 124996kB [ 1549.780194][T21357] 524155 pages RAM [ 1549.780248][T21357] 0 pages HighMem/MovableOnly [ 1549.780258][T21357] 211861 pages reserved [ 1549.780360][T21357] 0 pages cma reserved [ 1550.187903][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1550.344419][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1551.106123][T21387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1551.110530][T21387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1551.235725][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1551.385315][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1551.416905][T11275] lg-g15 0003:046D:0A07.0024: unbalanced collection at end of report description [ 1551.427193][T11275] lg-g15 0003:046D:0A07.0024: probe with driver lg-g15 failed with error -22 [ 1551.675608][T21397] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1551.835026][T21392] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1551.839398][T21392] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1551.847903][T21392] vhci_hcd vhci_hcd.0: Device attached [ 1552.265719][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1552.424546][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1552.506717][T21399] vhci_hcd: connection closed [ 1552.533653][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1552.549271][ T13] vhci_hcd vhci_hcd.5: release socket [ 1552.561102][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1553.155630][T13580] Bluetooth: hci4: command 0x0406 tx timeout [ 1553.160481][T13580] Bluetooth: hci0: command 0x0405 tx timeout [ 1553.314426][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1553.383996][ T42] audit: type=1326 audit(1787306105.432:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1553.405375][ T42] audit: type=1326 audit(1787306105.432:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1553.465199][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1553.553054][ T42] audit: type=1326 audit(1787306105.602:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1553.596351][ T42] audit: type=1326 audit(1787306105.652:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1553.610055][ T42] audit: type=1326 audit(1787306105.652:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1553.865580][ T42] audit: type=1326 audit(1787306105.902:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1554.030333][ T42] audit: type=1326 audit(1787306105.902:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1554.227403][ T42] audit: type=1326 audit(1787306105.902:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1554.346522][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1554.504494][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1555.049182][ T42] audit: type=1326 audit(1787306105.902:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1555.102429][ T42] audit: type=1326 audit(1787306105.972:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21405 comm="syz.6.3460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1555.159546][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3463'. [ 1555.384640][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1555.544486][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1556.424499][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1556.552086][ T32] numa_remove_cpu cpu 3 node 0: mask now 0,2 [ 1556.555183][ T32] numa_remove_cpu cpu 3 node 1: mask now 0,2 [ 1556.563894][T21434] smpboot: CPU 3 is now offline [ 1556.584535][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1557.464500][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1557.624529][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1558.504669][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1558.664516][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1559.544434][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1559.704589][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1559.939073][T21451] jffs2: notice: (21451) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1560.594643][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1560.744923][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1560.805151][T21455] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 1561.629168][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1561.785541][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1562.091172][T21463] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1562.664863][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1562.824442][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1562.954733][T19931] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1563.615362][T21474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'. [ 1563.705313][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1563.864562][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1564.024842][T19931] usb 11-1: Using ep0 maxpacket: 32 [ 1564.029950][T19931] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1564.144485][T19931] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 1564.152146][T19931] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1564.160149][T19931] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1564.166405][T19931] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1564.174138][T19931] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1564.186949][T19931] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1564.198258][T19931] usb 11-1: Product: syz [ 1564.204682][T19931] usb 11-1: Manufacturer: syz [ 1564.211956][T19931] usb 11-1: SerialNumber: syz [ 1564.235220][T19931] usb 11-1: config 0 descriptor?? [ 1564.278445][T19931] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1564.312065][T19931] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1564.421183][T21477] bond6: option ad_actor_sys_prio: invalid value (0) [ 1564.425785][T21477] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1564.446185][T21477] bond6 (unregistering): Released all slaves [ 1564.745300][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1564.819488][T21476] can: request_module (can-proto-3) failed. [ 1564.904621][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1565.794434][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1565.811307][T21483] nbd0: detected capacity change from 0 to 63 [ 1565.944543][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1566.810110][T21496] tipc: Resetting bearer [ 1566.825798][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1566.842018][T21496] bridge0: port 1(syz_tun) entered disabled state [ 1567.014186][T21496] syz_tun (unregistering): left allmulticast mode [ 1567.028052][T21496] syz_tun (unregistering): left promiscuous mode [ 1567.053123][T21496] bridge0: port 1(syz_tun) entered disabled state [ 1567.098782][T21496] tipc: Disabling bearer [ 1567.845316][T21504] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1567.864579][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1568.187976][T21504] input: syz0 as /devices/virtual/input/input40 [ 1568.905023][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1569.581529][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1569.628771][T21472] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1569.790745][ T9] usb 11-1: USB disconnect, device number 3 [ 1569.848877][ T9] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 1569.919753][T21518] netlink: 'syz.1.3483': attribute type 9 has an invalid length. [ 1569.923949][T21518] netlink: 'syz.1.3483': attribute type 7 has an invalid length. [ 1569.929747][T21518] netlink: 'syz.1.3483': attribute type 8 has an invalid length. [ 1569.948407][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.067132][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1570.984726][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1572.024570][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1573.064825][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1574.105170][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1574.668441][T21531] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 1575.145034][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1575.788383][T21537] bond0: entered promiscuous mode [ 1575.811943][T21537] bond_slave_0: entered promiscuous mode [ 1575.863426][T21537] bond_slave_1: entered promiscuous mode [ 1575.973137][T21537] batadv0: entered promiscuous mode [ 1576.022193][T21537] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1576.075510][T21539] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1576.100352][T21539] overlayfs: failed to set xattr on upper [ 1576.129838][T21539] overlayfs: ...falling back to redirect_dir=nofollow. [ 1576.152940][T21539] overlayfs: ...falling back to metacopy=off. [ 1576.185714][T21539] overlayfs: ...falling back to index=off. [ 1576.194686][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1576.229194][T21539] overlayfs: ...falling back to uuid=null. [ 1576.790794][T11275] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1576.969408][T11275] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1577.012733][T11275] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1577.036324][T11275] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1577.064948][T11275] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1577.155737][T11275] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1577.190606][T11275] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1577.225898][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1577.244638][T11275] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1577.292807][T11275] usb 11-1: Product: syz [ 1577.306050][T11275] usb 11-1: Manufacturer: syz [ 1577.342097][T11275] cdc_wdm 11-1:1.0: skipping garbage [ 1577.353696][T11275] cdc_wdm 11-1:1.0: skipping garbage [ 1577.376239][T11275] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1577.396230][T11275] cdc_wdm 11-1:1.0: Unknown control protocol [ 1578.267426][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1579.304793][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1579.478549][T14684] usb 11-1: USB disconnect, device number 4 [ 1580.345046][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1581.384704][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1582.425193][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1583.464592][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1584.505594][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1585.544499][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1586.585736][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1587.626318][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1588.675945][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1589.704959][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1590.745663][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1591.794595][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1592.826038][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.865896][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1594.904610][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1595.944658][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1596.439113][T13140] block nbd0: Possible stuck request ffff888027450000: control (read@0,1024B). Runtime 30 seconds [ 1596.573726][T13140] block nbd0: Possible stuck request ffff8880274501c0: control (read@1024,1024B). Runtime 30 seconds [ 1596.582179][T13140] block nbd0: Possible stuck request ffff888027450380: control (read@2048,1024B). Runtime 30 seconds [ 1596.588455][T13140] block nbd0: Possible stuck request ffff888027450540: control (read@3072,1024B). Runtime 30 seconds [ 1596.984515][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1597.189559][T19722] IPVS: starting estimator thread 0... [ 1597.316665][T21633] IPVS: using max 54 ests per chain, 129600 per kthread [ 1597.640852][ T66] block nbd0: Receive control failed (result -104) [ 1597.948909][T11275] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1598.036488][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1598.145426][T11275] usb 6-1: Using ep0 maxpacket: 8 [ 1598.149822][T11275] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1598.168952][T11275] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.191465][T11275] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1598.221187][T11275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.241012][T11275] usb 6-1: Product: syz [ 1598.249996][T11275] usb 6-1: Manufacturer: syz [ 1598.252912][T11275] usb 6-1: SerialNumber: syz [ 1598.278274][T11275] usb 6-1: config 0 descriptor?? [ 1598.972027][T21639] jffs2: notice: (21639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1599.065202][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1600.104588][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1600.529574][ T9] usb 6-1: USB disconnect, device number 25 [ 1601.144738][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1601.350628][T21652] veth0: entered promiscuous mode [ 1601.406995][ T10] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1601.575030][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1601.608526][ T10] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1601.642996][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1601.671997][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1601.688615][ T10] usb 6-1: Product: syz [ 1601.700439][ T10] usb 6-1: Manufacturer: syz [ 1601.710831][ T10] usb 6-1: SerialNumber: syz [ 1601.737867][ T10] usb 6-1: config 0 descriptor?? [ 1601.789472][ T10] usb 6-1: selecting invalid altsetting 0 [ 1602.184865][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1603.225338][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1604.264711][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1604.937553][T21652] veth0: left promiscuous mode [ 1604.953466][ T10] usb 6-1: USB disconnect, device number 26 [ 1605.170611][T21439] udevd[21439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1605.314790][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1606.116059][T10306] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1606.344693][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1606.437773][T21677] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1606.441198][T21677] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1606.457744][T21678] UDC core: g1: couldn't find an available UDC or it's busy [ 1606.486705][T21677] vhci_hcd vhci_hcd.0: Device attached [ 1606.805605][ T5812] usb 48-1: SetAddress Request (51) to port 0 [ 1607.170568][ T5812] usb 48-1: new SuperSpeed USB device number 51 using vhci_hcd [ 1607.231844][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.242542][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.385171][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1607.479612][T21679] vhci_hcd: connection reset by peer [ 1607.499012][ T5841] vhci_hcd vhci_hcd.5: stop threads [ 1607.507431][ T5841] vhci_hcd vhci_hcd.5: release socket [ 1607.518533][ T5841] vhci_hcd vhci_hcd.5: disconnect device [ 1608.434600][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1609.464621][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1609.665139][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1609.836589][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1609.856870][ T10] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1609.890954][ T10] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1609.907270][ T10] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1609.931722][ T10] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1609.953837][ T10] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1609.979596][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1610.008037][ T10] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1610.023337][ T10] usb 10-1: Product: syz [ 1610.030352][ T10] usb 10-1: Manufacturer: syz [ 1610.041563][ T10] usb 10-1: SerialNumber: syz [ 1610.085288][ T10] usb 10-1: config 0 descriptor?? [ 1610.128235][ T10] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1610.169588][ T10] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1610.506151][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1611.554728][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1612.269590][ T5812] usb 48-1: device descriptor read/8, error -110 [ 1612.606095][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1612.676153][ T5812] usb usb48-port1: attempt power cycle [ 1613.041562][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 1613.041611][ T42] audit: type=1800 audit(1787306165.092:6503): pid=21698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3525" name="bus" dev="ramfs" ino=96046 res=0 errno=0 [ 1613.246796][ T5812] usb usb48-port1: unable to enumerate USB device [ 1613.625894][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1614.675287][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1615.323301][T21727] kernel profiling enabled (shift: 7) [ 1615.482392][T21694] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1615.714586][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1616.276254][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.338154][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.383636][T21727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1616.492479][T21731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1616.495883][T21731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1616.571563][T21727] PM: Image not found (code -6) [ 1616.745442][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1616.800291][T21731] vhci_hcd vhci_hcd.0: Device attached [ 1617.093167][T11275] usb 40-1: SetAddress Request (62) to port 0 [ 1617.163632][T11275] usb 40-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1617.785606][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1618.133598][T19931] usb 10-1: USB disconnect, device number 12 [ 1618.157370][T19931] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1618.826076][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1619.616825][ T42] audit: type=1326 audit(1787306171.672:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.3.3532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1619.674558][ T42] audit: type=1326 audit(1787306171.692:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.3.3532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1619.865314][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1620.074344][ T42] audit: type=1326 audit(1787306171.942:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.3.3532" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1620.093840][T21733] vhci_hcd: connection reset by peer [ 1620.135944][ T9918] vhci_hcd vhci_hcd.1: stop threads [ 1620.146631][ T9918] vhci_hcd vhci_hcd.1: release socket [ 1620.172844][ T9918] vhci_hcd vhci_hcd.1: disconnect device [ 1620.546377][ T42] audit: type=1326 audit(1787306172.362:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.3.3532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1620.688367][ T42] audit: type=1326 audit(1787306172.732:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.3.3532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1620.906121][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1621.946274][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1622.346317][T11275] usb 40-1: device descriptor read/8, error -110 [ 1622.773554][T11275] usb usb40-port1: attempt power cycle [ 1622.995172][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1623.325324][T21774] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3536'. [ 1623.367854][T11275] usb usb40-port1: unable to enumerate USB device [ 1624.025133][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1625.066279][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1625.983770][ T5812] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1626.114654][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.036442][ T5812] usb 10-1: Using ep0 maxpacket: 32 [ 1627.055059][ T5812] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1627.085895][ T5812] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1627.099687][ T5812] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1627.119181][ T5812] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1627.142481][ T5812] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1627.156549][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.171391][ T5812] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1627.192195][ T5812] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1627.209199][ T5812] usb 10-1: Product: syz [ 1627.215562][ T5812] usb 10-1: Manufacturer: syz [ 1627.222671][ T5812] usb 10-1: SerialNumber: syz [ 1627.421608][ T5812] usb 10-1: config 0 descriptor?? [ 1627.577325][ T5812] usb 10-1: can't set config #0, error -71 [ 1627.601742][ T5812] usb 10-1: USB disconnect, device number 13 [ 1627.688485][T13140] block nbd0: Possible stuck request ffff888027450000: control (read@0,1024B). Runtime 60 seconds [ 1627.699166][T13140] block nbd0: Possible stuck request ffff8880274501c0: control (read@1024,1024B). Runtime 60 seconds [ 1627.708475][T13140] block nbd0: Possible stuck request ffff888027450380: control (read@2048,1024B). Runtime 60 seconds [ 1627.715664][T13140] block nbd0: Possible stuck request ffff888027450540: control (read@3072,1024B). Runtime 60 seconds [ 1627.753483][T21786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1628.158287][T21796] netlink: 'syz.1.3543': attribute type 11 has an invalid length. [ 1628.184926][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.531729][T21796] bond6: option ad_actor_sys_prio: invalid value (0) [ 1628.536801][T21796] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1628.545060][T21796] bond6 (unregistering): Released all slaves [ 1629.224659][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1629.440084][T21800] can: request_module (can-proto-3) failed. [ 1630.183618][T21816] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1630.266425][T21816] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1630.274644][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1631.050943][ T5144] udevd[5144]: worker [21431] /devices/virtual/block/nbd0 is taking a long time [ 1631.304604][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1631.593471][T21818] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1632.345812][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1633.385309][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1633.607364][T21830] jffs2: notice: (21830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1634.435745][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1635.465056][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1635.782133][T18499] libceph: connect (1)[c::]:6789 error -99 [ 1635.797010][T18499] libceph: mon0 (1)[c::]:6789 connect error [ 1635.817422][T21838] ceph: No mds server is up or the cluster is laggy [ 1636.514648][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1637.546184][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1638.584791][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1639.625111][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1639.654801][T21857] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1639.789383][T21861] netlink: 'syz.5.3557': attribute type 11 has an invalid length. [ 1640.311920][T21862] bond1: option ad_actor_sys_prio: invalid value (0) [ 1640.368580][T21862] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1640.609857][T21862] bond1 (unregistering): Released all slaves [ 1640.664548][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.272284][T21861] can: request_module (can-proto-3) failed. [ 1641.706597][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1642.744523][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1643.794687][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1644.824573][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1645.864526][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1646.732934][T21891] x_tables: duplicate underflow at hook 3 [ 1646.795989][T21891] ./bus: Can't lookup blockdev [ 1646.904678][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1647.944796][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1648.610376][T21897] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1648.788047][T21901] syzkaller1: entered promiscuous mode [ 1648.809542][T21901] syzkaller1: entered allmulticast mode [ 1648.985811][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1649.019036][T21903] tipc: Started in network mode [ 1649.053871][T21903] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1649.076984][T21903] tipc: Enabled bearer , priority 6 [ 1649.478588][T21903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1650.024553][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1650.194787][T19931] tipc: Node number set to 10136234 [ 1651.064541][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1651.213905][T21913] jffs2: notice: (21913) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1651.613370][T21909] random: crng reseeded on system resumption [ 1651.665296][T21909] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1651.685281][T19931] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1651.689710][T21909] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1651.717658][T21909] PM: hibernation: Basic memory bitmaps created [ 1651.775566][T21908] PM: hibernation: Basic memory bitmaps freed [ 1651.845030][T19931] usb 11-1: Using ep0 maxpacket: 32 [ 1651.859677][T19931] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1651.916473][T19931] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 1651.939012][T19931] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1651.997933][T19931] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1652.057440][T19931] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1652.104007][T19931] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1652.114793][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1652.212867][T19931] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1652.241539][T19931] usb 11-1: Product: syz [ 1652.263590][T19931] usb 11-1: Manufacturer: syz [ 1652.281285][T19931] usb 11-1: SerialNumber: syz [ 1652.323820][T19931] usb 11-1: config 0 descriptor?? [ 1652.423567][T19931] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1652.497435][T19931] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1653.144781][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1654.184624][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1654.786906][T11275] usb 11-1: USB disconnect, device number 5 [ 1654.840807][T11275] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 1655.224596][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1656.275207][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1656.870406][T21928] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1656.874655][T21928] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1656.911320][T21928] vhci_hcd vhci_hcd.0: Device attached [ 1657.176239][ T5812] usb 44-1: SetAddress Request (50) to port 0 [ 1657.193749][ T5812] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1657.314568][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1657.797000][T13140] block nbd0: Possible stuck request ffff888027450000: control (read@0,1024B). Runtime 90 seconds [ 1657.802926][T13140] block nbd0: Possible stuck request ffff8880274501c0: control (read@1024,1024B). Runtime 90 seconds [ 1657.811610][T13140] block nbd0: Possible stuck request ffff888027450380: control (read@2048,1024B). Runtime 90 seconds [ 1657.819081][T13140] block nbd0: Possible stuck request ffff888027450540: control (read@3072,1024B). Runtime 90 seconds [ 1658.346466][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1658.600756][T21947] fuse: Bad value for 'fd' [ 1659.385916][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1659.878189][T21934] vhci_hcd: connection reset by peer [ 1659.888987][ T13] vhci_hcd vhci_hcd.3: stop threads [ 1659.914564][ T13] vhci_hcd vhci_hcd.3: release socket [ 1659.930493][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 1660.425138][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1661.271051][T21958] Invalid ELF header magic: != ELF [ 1661.464571][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1662.488309][ T5812] usb 44-1: device descriptor read/8, error -110 [ 1662.505444][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1662.898905][ T5812] usb usb44-port1: attempt power cycle [ 1663.546182][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1664.594700][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1664.909639][ T5812] usb usb44-port1: unable to enumerate USB device [ 1665.355365][T18499] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1665.566820][T18499] usb 6-1: Using ep0 maxpacket: 32 [ 1665.577009][T18499] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1665.603291][T18499] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1665.623739][T18499] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1665.631602][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1665.681515][T18499] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1665.709039][T18499] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1665.728409][T18499] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1665.772052][T18499] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1665.794070][T18499] usb 6-1: Product: syz [ 1665.803024][T18499] usb 6-1: Manufacturer: syz [ 1665.812439][T18499] usb 6-1: SerialNumber: syz [ 1665.843852][T18499] usb 6-1: config 0 descriptor?? [ 1665.892658][T18499] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1665.973059][T18499] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1666.674657][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1667.714632][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1668.355101][T18499] usb 6-1: USB disconnect, device number 27 [ 1668.367389][T18499] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1668.679877][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.686399][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.745418][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1669.238852][T14684] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1669.445458][T14684] usb 10-1: Using ep0 maxpacket: 8 [ 1669.463645][T14684] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1669.499756][T14684] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1669.517684][T14684] usb 10-1: config 0 has no interface number 0 [ 1669.537277][T14684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.554481][T14684] usb 10-1: Product: syz [ 1669.558907][T14684] usb 10-1: Manufacturer: syz [ 1669.563330][T14684] usb 10-1: SerialNumber: syz [ 1669.583511][T14684] usb 10-1: config 0 descriptor?? [ 1669.794610][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1669.870769][ T42] audit: type=1800 audit(1787306221.922:6509): pid=21983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3586" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 1670.824611][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1671.874718][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1672.213294][T14684] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1672.238982][T14684] uvcvideo 10-1:0.31: No valid video chain found. [ 1672.273983][T14684] usb 10-1: USB disconnect, device number 14 [ 1672.736838][T22004] binder: Unknown parameter 'ÿ' [ 1672.904590][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1673.954603][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1674.026004][T22011] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1674.301492][T22011] netlink: 'syz.5.3593': attribute type 2 has an invalid length. [ 1674.321876][T22011] netlink: 'syz.5.3593': attribute type 2 has an invalid length. [ 1674.382537][T22017] netlink: 'syz.1.3595': attribute type 10 has an invalid length. [ 1674.616636][T22021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.994661][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1675.330344][T22021] hsr0: left promiscuous mode [ 1675.434681][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1676.034547][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1676.931666][T22029] 9p: Bad value for 'rfdno' [ 1676.965974][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3598'. [ 1677.074576][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1677.267319][T18499] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1677.435757][T18499] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1677.460399][T18499] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.495101][T18499] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1677.528167][T18499] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1677.545729][T18499] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1677.560443][T18499] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.607534][T22029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1677.627475][T22029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1677.665437][T18499] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1677.700592][T18499] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1677.734316][T18499] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1677.771409][T18499] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1677.799326][T18499] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1677.810567][T18499] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1677.826363][T18499] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1678.106147][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1679.157816][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1680.047623][T11275] usb 10-1: USB disconnect, device number 15 [ 1680.168760][T11275] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1680.194482][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1680.336237][T11275] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1680.405447][T11275] keyspan 10-1:1.0: device disconnected [ 1680.794279][T22042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.799130][T22042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.128882][T22042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1681.148378][T22042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1681.234635][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1681.372819][T22042] tipc: Resetting bearer [ 1681.441962][T22048] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1681.835056][ T9918] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.861140][ T9918] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.904527][ T9918] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.925637][ T9918] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.274720][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1683.304554][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1683.661896][T22062] netlink: 'syz.6.3605': attribute type 3 has an invalid length. [ 1683.667697][T22062] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3605'. [ 1684.344476][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1685.384791][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1686.424521][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1686.720743][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1687.037137][T22074] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 1687.464953][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1687.560458][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1687.876087][T13140] block nbd0: Possible stuck request ffff888027450000: control (read@0,1024B). Runtime 120 seconds [ 1687.881957][T13140] block nbd0: Possible stuck request ffff8880274501c0: control (read@1024,1024B). Runtime 120 seconds [ 1687.890669][T13140] block nbd0: Possible stuck request ffff888027450380: control (read@2048,1024B). Runtime 120 seconds [ 1687.898533][T13140] block nbd0: Possible stuck request ffff888027450540: control (read@3072,1024B). Runtime 120 seconds [ 1688.341576][T22086] ip6gretap0: entered promiscuous mode [ 1688.514752][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1689.544715][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1690.584877][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1691.625060][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1692.674517][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1693.704594][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1694.744627][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1695.794613][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1695.864709][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 1695.869558][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10220, name: kworker/0:0H [ 1695.874573][ C0] preempt_count: 101, expected: 0 [ 1695.877315][ C0] RCU nest depth: 1, expected: 0 [ 1695.879981][ C0] INFO: lockdep is turned off. [ 1695.882633][ C0] Preemption disabled at: [ 1695.882663][ C0] [] preempt_schedule_thunk+0x16/0x40 [ 1695.888881][ C0] CPU: 0 UID: 0 PID: 10220 Comm: kworker/0:0H Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.888900][ C0] Tainted: [L]=SOFTLOCKUP [ 1695.888904][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1695.888912][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 1695.888934][ C0] Call Trace: [ 1695.888942][ C0] [ 1695.888947][ C0] dump_stack_lvl+0x100/0x190 [ 1695.888964][ C0] __might_resched.cold+0x1dc/0x222 [ 1695.888981][ C0] ? __pfx___might_resched+0x10/0x10 [ 1695.888997][ C0] lock_sock_nested+0x52/0xf0 [ 1695.889013][ C0] ? x25_kill_by_neigh+0x168/0x280 [ 1695.889025][ C0] x25_kill_by_neigh+0x168/0x280 [ 1695.889037][ C0] x25_lapb_receive_frame+0x4b1/0x1000 [ 1695.889048][ C0] ? rcu_is_watching+0x13/0xc0 [ 1695.889065][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 1695.889077][ C0] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 1695.889094][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1695.889111][ C0] ? lock_acquire+0x306/0x370 [ 1695.889123][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1695.889140][ C0] netif_receive_skb_core+0x5a/0x1a0 [ 1695.889156][ C0] lapbeth_napi_poll+0x42/0xc0 [ 1695.889168][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1695.889185][ C0] net_rx_action+0xa40/0xf20 [ 1695.889196][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1695.889206][ C0] ? taprio_dequeue+0x166/0x5f0 [ 1695.889219][ C0] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 1695.889236][ C0] ? rcu_is_watching+0x13/0xc0 [ 1695.889252][ C0] handle_softirqs+0x1e6/0x9d0 [ 1695.889271][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1695.889286][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1695.889298][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1695.889318][ C0] __irq_exit_rcu+0x194/0x210 [ 1695.889331][ C0] irq_exit_rcu+0x9/0x30 [ 1695.889345][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1695.889357][ C0] [ 1695.889361][ C0] [ 1695.889364][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1695.889377][ C0] RIP: 0010:_raw_spin_unlock_irq_enable+0x4c/0x90 [ 1695.889390][ C0] Code: 00 ff ff 65 48 0f c1 05 1a 36 c0 08 48 2d 00 00 01 00 a9 00 00 ff 00 75 11 65 f6 05 06 78 c0 08 02 75 22 9c 58 f6 c4 02 75 35 01 00 00 00 e8 ea f6 0d f6 65 48 83 3d e9 35 c0 08 00 74 15 5b [ 1695.889401][ C0] RSP: 0000:ffffc90006df7b00 EFLAGS: 00000246 [ 1695.889411][ C0] RAX: 0000000000000046 RBX: ffff88805a859520 RCX: ffffffff8212a99f [ 1695.889418][ C0] RDX: 0000000000000000 RSI: ffffffff8c615100 RDI: ffffffff8bc73a4c [ 1695.889425][ C0] RBP: ffff88805a859500 R08: 0000000000000000 R09: fffffbfff228701a [ 1695.889432][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888023bb1928 [ 1695.889444][ C0] R13: 000000000000004a R14: ffff88805a859508 R15: 0000000000000001 [ 1695.889453][ C0] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1695.889467][ C0] ? _raw_spin_unlock_irq_enable+0x6c/0x90 [ 1695.889478][ C0] snd_midi_event_encode_byte+0x5c7/0xd30 [ 1695.889491][ C0] ? _raw_spin_unlock_irq_enable+0x7b/0x90 [ 1695.889503][ C0] snd_vmidi_output_work+0x150/0x390 [ 1695.889516][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1695.889528][ C0] ? lock_acquire+0x306/0x370 [ 1695.889539][ C0] ? process_one_work+0x840/0x1b10 [ 1695.889551][ C0] ? rcu_is_watching+0x13/0xc0 [ 1695.889566][ C0] ? process_one_work+0x906/0x1b10 [ 1695.889575][ C0] ? lock_release+0x24d/0x310 [ 1695.889587][ C0] process_one_work+0xac7/0x1b10 [ 1695.889600][ C0] ? irqentry_exit+0x24d/0xa10 [ 1695.889611][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1695.889623][ C0] ? kthread_data+0x53/0xc0 [ 1695.889639][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1695.889652][ C0] worker_thread+0x5ef/0xe50 [ 1695.889664][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1695.889675][ C0] ? kthread+0x13a/0x450 [ 1695.889683][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1695.889693][ C0] kthread+0x373/0x450 [ 1695.889702][ C0] ? __pfx_kthread+0x10/0x10 [ 1695.889711][ C0] ret_from_fork+0x730/0xd60 [ 1695.889727][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1695.889741][ C0] ? __switch_to+0x800/0x10f0 [ 1695.889753][ C0] ? __pfx_kthread+0x10/0x10 [ 1695.889762][ C0] ret_from_fork_asm+0x1a/0x30 [ 1695.889780][ C0] [ 1696.825789][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1697.046981][T22111] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1697.875944][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1698.914449][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1699.944708][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1700.414523][ T42] audit: type=1800 audit(1787306252.462:6510): pid=22136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3620" name="cdrom" dev="configfs" ino=99064 res=0 errno=0 [ 1700.728904][T22137] msr: Write to unrecognized MSR 0x1a0 by syz.3.3621 (pid: 22137), tainting CPU_OUT_OF_SPEC. [ 1700.759547][T22137] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 1700.797802][T22130] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 1700.985472][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1702.024786][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1703.074607][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1704.114712][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1705.154691][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available