last executing test programs: 3m27.69152626s ago: executing program 4 (id=417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x1800}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m27.300337356s ago: executing program 4 (id=423): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000011001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 3m26.575350326s ago: executing program 4 (id=428): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x83000000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r6, @ANYRES16=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6577206c656661756c74207573b997c8113de165723a28797a203030c7c89c1ae68860303130303030300029683d30"], 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1}, 0x1c}}, 0x0) 3m24.738512306s ago: executing program 4 (id=434): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/49) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x4044) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000240)={0x6, 'team0\x00', {0xc5}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0xf, 0x0, 0x8, 0x7fffffff, 0x0, 0xd4, 0x4, 0x3, r5}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r7, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x884) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000004c0)={0x10200, 0x7, 0x22220000, 0x2000, &(0x7f0000ff9000/0x2000)=nil}) r9 = syz_clone(0x80000000, &(0x7f0000000500)="ce79d185bc33c16c755181015bf2733c798d3e2b60b41b4f98ada7f364df38792427306c1343a78b3dee3549", 0x2c, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="b0ef03302c8214e41ea403382605a86c9af5d9bf468d2af22282fcecee567587b17a91760979fb073df0b550b97e08d9a1b90820736d76ae28e404188005a878a6e23bf24db6f4c35294af6131") ptrace$peek(0x3, r9, &(0x7f0000000640)) vmsplice(r4, &(0x7f0000000980)=[{&(0x7f0000000680)="6d195e21caf8708472b40b6304a86f38e463ebcde93d4a7cc2bfed11bd466fd43a759bbee0e216286042a2044c1d67b24273718e6190b97ab09a35615420d4fd2e738394f5448ce2821200d8059a65969aed626384c18e90c6274d00c58fa794290248fefa487bc50b16dac8d02857837c13bd12c94b36e4ae5db46f8a6eb424275a17a594", 0x85}, {&(0x7f0000000740)="e4bcd1a72acb", 0x6}, {&(0x7f0000000780)="62a2c02281f5abecf41b2d74dfdf107077b8794f28d97dbe862896d5b74b83419c8a19c5119af053a354af22f39f9779d888f34315d366b64429fdb0dbed7868c1c8a445df29559a311dc5a83a3f69df03e719718f6026ec3be05ff35cc75c9be3335614043e5739d4e4e5a4fbe222fc30a79b832313f8a653298cef5ea2dc5bce679ccf546613e598ba99b19f95958882defb106a6b298fbd5d00da34ff8a4792bdd1666d6a4724a45980cb9ed35602331bfe105f72f6cf32854677c6d51469014787a701f41697d045c6aa8503d35caa560a228bfd38b932502ab7f77e00053fa7be3c4aa7f7fa49abbd7f9163ae7c", 0xf0}, {&(0x7f0000000880)="de7799f154a2a9d2dedb4f5a87418034099ee1ba3f056d870bca3c28e94128696e6e10", 0x23}, {&(0x7f00000008c0)="8abcef37852263ca5bc89fbba34aec40fd810711af32afe23d84d682335e6a9a786653baf87480a6a602c5c8d1072723ba7a7fb136dfeba43a55e37040de70eacacb6c9b9e1ea259280f4adda2a3cd7879cf943d7c140c8ae6638397192276ddd81c0caaa44fbdf20a66e1104d051a284f167a45d4298dd560dea5484f6e51d64e0a5230a86f37428bff6f7ee0195274c27581e0dd77302acdb01e1c612d9ab853bbb1439635c8777b32587820ec62d2293d2d", 0xb3}], 0x5, 0x2) (async) r10 = accept4$alg(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000000a00)) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x90, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040844}, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000c00)={r5, 0x1}, &(0x7f0000000c40)=0x8) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r6) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r13, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000e00), r6) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r14, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44081}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r1) 3m24.38144078s ago: executing program 4 (id=437): socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfd, 0x2) r0 = syz_open_procfs(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x1000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = open(0x0, 0x108843, 0x98) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0xffffffa4, 0x20000051, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) shutdown(r3, 0x1) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x40086602, &(0x7f0000000000)) r10 = socket(0x1, 0x3, 0x0) bind$unix(r10, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$802154_raw(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)="d8a31b94423f90553b09000000ccbb000000000000", 0x15}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008000) 3m21.289358687s ago: executing program 4 (id=450): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x100}}, './file0\x00'}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) (async) ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) (async, rerun: 32) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) (rerun: 32) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000200)=0xeeee0000) (async, rerun: 32) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async, rerun: 32) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000002c0)=0x4, 0xe, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000300)={0x5, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}}, {{0xa, 0x4e21, 0xf657, @empty, 0xa0000}}}, 0x108) (async) mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='nilfs2\x00', 0x2, &(0x7f0000000500)='\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x10000, 0x5, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0x8, 0x9, 0x5, 0x6, 0x4, 0x0}) tkill(r2, 0x15) (async) mmap$xdp(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3, 0x4000010, r0, 0x180000000) (async) r3 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0xc000) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r2, r0, 0x0, 0x1, &(0x7f0000000640)='\x00'}, 0x30) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000006c0)="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") (async, rerun: 32) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000007c0)) (async, rerun: 32) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000800)=0xe1a) read$msr(r0, &(0x7f0000000840)=""/237, 0xed) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) socket$key(0xf, 0x3, 0x2) 3m6.20856033s ago: executing program 32 (id=450): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x100}}, './file0\x00'}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) (async) ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) (async, rerun: 32) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) (rerun: 32) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000200)=0xeeee0000) (async, rerun: 32) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async, rerun: 32) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000002c0)=0x4, 0xe, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000300)={0x5, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}}, {{0xa, 0x4e21, 0xf657, @empty, 0xa0000}}}, 0x108) (async) mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='nilfs2\x00', 0x2, &(0x7f0000000500)='\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x10000, 0x5, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0x8, 0x9, 0x5, 0x6, 0x4, 0x0}) tkill(r2, 0x15) (async) mmap$xdp(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3, 0x4000010, r0, 0x180000000) (async) r3 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0xc000) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r2, r0, 0x0, 0x1, &(0x7f0000000640)='\x00'}, 0x30) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000006c0)="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") (async, rerun: 32) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000007c0)) (async, rerun: 32) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000800)=0xe1a) read$msr(r0, &(0x7f0000000840)=""/237, 0xed) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) socket$key(0xf, 0x3, 0x2) 2m26.793452865s ago: executing program 2 (id=682): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, 0x0, 0x44000) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(r0, r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 2m23.555949874s ago: executing program 2 (id=697): symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x0, 0x8001, 0x4000009, 0x5, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0x400}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000892000/0x4000)=nil, 0x4000, 0x3000007, 0x1010, r4, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x10003}}, 0x10) listen(r1, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r1, &(0x7f0000000180)=@xdp, &(0x7f0000000140)=0x80, 0x80000) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) 2m22.276125427s ago: executing program 2 (id=702): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "000000000000e000"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 2m21.526293267s ago: executing program 33 (id=702): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "000000000000e000"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 9.882950923s ago: executing program 1 (id=1193): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000100000fc000000000000000000000000050000fc02000000000000000000000000000000000000000000010a00402000"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000200000000000000000000000000000100"/112], 0xb8}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r4, 0x550c, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000540)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000d004"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.767152492s ago: executing program 0 (id=1201): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xff0f}, {0x95, 0x0, 0x4100}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 7.43443709s ago: executing program 3 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4000891) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.434046976s ago: executing program 0 (id=1203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x8, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r1, 0x40049409, r2) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010005000500070000000000080009000000000014002000000000000000ff000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) 7.303993863s ago: executing program 6 (id=1204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000004000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 7.009513649s ago: executing program 6 (id=1205): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) set_mempolicy(0xc002, 0x0, 0x5) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2865) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) socket$isdn(0x22, 0x2, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0x110}}, 0x0) 6.828200724s ago: executing program 1 (id=1206): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/100}}}}}}, 0x0) 6.717571438s ago: executing program 1 (id=1207): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x1000000, 0x8000}, 0x0) 6.573196467s ago: executing program 1 (id=1208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x67, 0x1, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x0, 0xb, 0x0, 0xa, 0xb5b, 0x100000000, 0x1, 0x3, 0x33}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x5000, &(0x7f0000000740)={[{@redirect_dir_off, 0x3a}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'br\x88dge_slave_0\x00'}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x9e\x7f\xd52\xfa'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '(@.}'}}, {@fsmagic={'fsmagic', 0x3d, 0xb}}, {@appraise}], 0x2f}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a28000000000a0101000000005e1affd52f0000000900010073797a110000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30007fcf500000000900030077797a320000000014000004110001543a174f9edae2b05a04daa14a6e1066d9f33eeecaa45e937f95b6"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) waitid(0x1, 0x0, &(0x7f0000000100), 0x80000000, &(0x7f0000000400)) getdents64(r5, &(0x7f0000000300)=""/152, 0x98) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 6.455989129s ago: executing program 0 (id=1209): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x1aee2, 0x0, 0x9, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r6, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/79, 0x4f}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x6}) close_range(r7, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$unix(r1, &(0x7f0000000140)=""/88, 0x58, 0x40000000, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.455460249s ago: executing program 5 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(r4, 0x107, 0x6, 0x0, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(r0, 0xda8d) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) 6.424417688s ago: executing program 3 (id=1211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x20000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 5.440038889s ago: executing program 5 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.302698279s ago: executing program 3 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) msgget$private(0x0, 0x641) (rerun: 64) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) (async, rerun: 32) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v2={0x2000000, [{0x7fffffff, 0x7}, {0x0, 0x5}]}, 0x14, 0x0) (async, rerun: 32) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) (rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/83, 0x53}, 0x4}, {{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, 0xe3, &(0x7f0000000380)=[{&(0x7f0000000700)=""/256, 0xf7}, {&(0x7f0000000800)=""/65, 0x4a}, {&(0x7f0000001940)=""/129, 0x81}, {&(0x7f0000002f00)=""/4101, 0x1000}], 0x4, &(0x7f0000003f40)=""/4104, 0x1008}, 0x8}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000854) (async) unlink(&(0x7f0000000280)='./file1\x00') (async) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') 5.224171414s ago: executing program 5 (id=1214): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xff0f}, {0x95, 0x0, 0xff0f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 4.781830654s ago: executing program 3 (id=1215): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x1c00}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "771324", 0x0, 0x3c, 0x0, @private1, @local}}}}, 0x0) 4.760804564s ago: executing program 5 (id=1216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 4.019329577s ago: executing program 0 (id=1217): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000006000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 3.424112969s ago: executing program 0 (id=1218): socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7", 0x12, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) close(r3) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r6, 0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0) r9 = getpid() syz_open_procfs(r9, &(0x7f00000001c0)='net/fib_triestat\x00') 3.369438868s ago: executing program 5 (id=1219): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000000c00038004000100046e9300180001801400020076657468315f746f5f687372"], 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x5a, "4fb3858f45b8e0a012449eda52bb87a7d504284c654cae7d3b2efc25f7221840fce3b38cd51890ed49b746ef04a7763009d726f704a81109231de4a194deb894ac8a4f600c7c9e0e6ccc34e47fd785efbe5c32a342a9c5b1ec8e"}, &(0x7f0000000080)=0x62) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x1ff, 0x5, 0xab728af6, 0x1b, 0x7ff, 0xd2, 0x7, r3}, &(0x7f0000000140)=0x20) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @private0, 0x200000}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x80000000) 3.303146644s ago: executing program 1 (id=1220): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x31}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0293ffffffffffffff000000000001"], 0xfdef) 3.012125211s ago: executing program 5 (id=1221): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x8, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r1, 0x40049409, r2) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000100000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) 2.910297002s ago: executing program 6 (id=1222): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x31, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) socket(0x28, 0x5, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) setrlimit(0x8, 0x0) 1.851813205s ago: executing program 6 (id=1223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x100000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.794731349s ago: executing program 6 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000013000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.548037961s ago: executing program 1 (id=1225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x100}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x1000000], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x1, 0xfffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 1.547533297s ago: executing program 6 (id=1226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x2000) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000240)=ANY=[@ANYBLOB="eaf8c2789008953af44f9b4031d04a35baef008d045b77c570e5a82ef13a9aa4c8fee8fd0724644c95b9077e2ea1d03f"]) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x1002}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r7) sendmsg$inet(r8, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 1.515602708s ago: executing program 3 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/114, 0x72) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="e26852d89ddd2f0b513c4dd282f68fc72f8d961b", 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.051513124s ago: executing program 0 (id=1228): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000fff500010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 0s ago: executing program 3 (id=1229): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) dup2(r3, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x22}, 0x94) kernel console output (not intermixed with test programs): 2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.454935][ T30] audit: type=1400 audit(2000000169.477:511): avc: denied { setopt } for pid=8594 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.500968][ T30] audit: type=1400 audit(2000000169.477:512): avc: denied { nlmsg_read } for pid=8594 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.601911][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 238.603046][ T8620] netlink: 116 bytes leftover after parsing attributes in process `syz.5.706'. [ 238.794373][ T30] audit: type=1400 audit(2000000169.817:513): avc: denied { bind } for pid=8633 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.110269][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 239.249922][ T9] usb 1-1: device descriptor read/64, error -71 [ 239.429885][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 239.520161][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 239.775714][ T9] usb 1-1: device descriptor read/64, error -71 [ 239.900120][ T9] usb usb1-port1: attempt power cycle [ 240.085019][ T30] audit: type=1400 audit(2000000171.107:514): avc: denied { bind } for pid=8670 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.117208][ T30] audit: type=1326 audit(2000000171.107:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.1.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc28178ebe9 code=0x0 [ 240.219448][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.232842][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.242307][ T2963] bond0 (unregistering): Released all slaves [ 240.260018][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 240.280465][ T9] usb 1-1: device descriptor read/8, error -71 [ 240.316360][ T2963] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 240.324420][ T2963] vcan1: left promiscuous mode [ 240.330228][ T2963] bond1 (unregistering): Released all slaves [ 240.364652][ T8617] chnl_net:caif_netlink_parms(): no params data found [ 240.385612][ T8677] netlink: 56 bytes leftover after parsing attributes in process `syz.3.723'. [ 240.404058][ T5170] Bluetooth: hci3: command tx timeout [ 240.464395][ T2963] : left promiscuous mode [ 240.480328][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 240.634468][ T2963] tipc: Disabling bearer [ 240.641067][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 240.659621][ T2963] tipc: Left network mode [ 240.673388][ T9] usb 1-1: device descriptor read/8, error -71 [ 240.682239][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.778045][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.841172][ T9] usb usb1-port1: unable to enumerate USB device [ 240.938693][ T8617] bridge_slave_0: entered allmulticast mode [ 240.969402][ T8617] bridge_slave_0: entered promiscuous mode [ 241.011685][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.019699][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.051434][ T8617] bridge_slave_1: entered allmulticast mode [ 241.115795][ T8617] bridge_slave_1: entered promiscuous mode [ 241.509869][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 241.695880][ T8698] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 241.735405][ T8698] macvlan2: entered allmulticast mode [ 241.756552][ T8698] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 241.778049][ T8698] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 241.785931][ T8698] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 241.850987][ T8617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.942513][ T8617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.494424][ T5170] Bluetooth: hci3: command tx timeout [ 242.549961][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 242.661531][ T8617] team0: Port device team_slave_0 added [ 242.702075][ T8617] team0: Port device team_slave_1 added [ 242.861325][ T8617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.884014][ T8617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.938098][ T8617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.990080][ T5851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 243.062905][ T8617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.077700][ T8617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.106402][ T8617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.235642][ T2963] hsr_slave_0: left promiscuous mode [ 243.241644][ T2963] hsr_slave_1: left promiscuous mode [ 243.247519][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.258987][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.267480][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.283762][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.325528][ T2963] veth1_macvtap: left promiscuous mode [ 243.342132][ T2963] veth0_macvtap: left promiscuous mode [ 243.350282][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 243.368345][ T2963] veth1_vlan: left promiscuous mode [ 243.378884][ T2963] veth0_vlan: left promiscuous mode [ 243.409988][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 243.417925][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.420252][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 243.432173][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.462319][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.487073][ T5851] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.529265][ T43] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 243.538385][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.558273][ T5851] usb 6-1: config 0 descriptor?? [ 243.558560][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.590214][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.599186][ T43] usb 1-1: Product: syz [ 243.609286][ T43] usb 1-1: Manufacturer: syz [ 243.618454][ T43] usb 1-1: SerialNumber: syz [ 243.641411][ T43] usb 1-1: config 0 descriptor?? [ 243.659754][ T43] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 243.710489][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.718717][ T24] usb 4-1: config 0 has no interface number 0 [ 243.725323][ T2963] pim6reg (unregistering): left allmulticast mode [ 243.732341][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.763878][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.778960][ T24] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.825510][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 243.843451][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.898494][ T24] usb 4-1: config 0 descriptor?? [ 244.036982][ T5851] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input14 [ 244.101886][ T5851] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 244.306729][ T5851] usb 6-1: USB disconnect, device number 3 [ 244.329130][ T43] gspca_sunplus: reg_w_riv err -71 [ 244.402731][ T8751] kAFS: No cell specified [ 244.559888][ T5170] Bluetooth: hci3: command tx timeout [ 244.629880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 244.866248][ T43] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 244.876987][ T30] audit: type=1400 audit(2000000175.347:516): avc: denied { write } for pid=8730 comm="syz.3.736" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.934072][ T43] usb 1-1: USB disconnect, device number 19 [ 245.003590][ T8756] program syz.3.736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.099096][ T8754] fido_id[8754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 245.331880][ T2963] team_slave_1 (unregistering): left promiscuous mode [ 245.338680][ T2963] team_slave_1 (unregistering): left allmulticast mode [ 245.351786][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 245.400777][ T2963] team_slave_0 (unregistering): left promiscuous mode [ 245.407601][ T2963] team_slave_0 (unregistering): left allmulticast mode [ 245.419026][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 245.490155][ T5914] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 245.650200][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 245.669879][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 245.688855][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.707491][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.717904][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.731731][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 245.743140][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.768658][ T5914] usb 1-1: config 0 descriptor?? [ 245.887684][ T8617] hsr_slave_0: entered promiscuous mode [ 245.900359][ T8617] hsr_slave_1: entered promiscuous mode [ 245.913396][ T8617] debugfs: 'hsr0' already exists in 'hsr' [ 245.919304][ T8617] Cannot create hsr debugfs directory [ 245.999520][ T8761] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 246.034903][ T8761] macvlan2: entered allmulticast mode [ 246.047217][ T8761] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 246.073432][ T8761] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 246.080872][ T8761] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 246.515195][ T5914] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input15 [ 246.558368][ T5914] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 246.630226][ T5170] Bluetooth: hci3: command tx timeout [ 246.670212][ T5914] usb 1-1: USB disconnect, device number 20 [ 246.709917][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.880743][ T8768] fido_id[8768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 247.057120][ T24] uclogic 0003:28BD:0042.000E: failed retrieving string descriptor #100: -71 [ 247.091387][ T24] uclogic 0003:28BD:0042.000E: failed retrieving pen parameters: -71 [ 247.095275][ T2963] IPVS: stop unused estimator thread 0... [ 247.113288][ T24] uclogic 0003:28BD:0042.000E: pen probing failed: -71 [ 247.135936][ T24] uclogic 0003:28BD:0042.000E: failed probing parameters: -71 [ 247.161335][ T24] uclogic 0003:28BD:0042.000E: probe with driver uclogic failed with error -71 [ 247.213429][ T24] usb 4-1: USB disconnect, device number 16 [ 247.454585][ T8617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 247.504667][ T8617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.536491][ T8617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.555556][ T8617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.700163][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 247.749872][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 247.842037][ T8617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.288216][ T8617] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.315998][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.323186][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.370153][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 248.439305][ T24] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 248.502070][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.509165][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.605696][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.777285][ T24] usb 1-1: config 0 descriptor?? [ 248.800238][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.836652][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 249.110197][ T5930] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 249.305841][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.335905][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 249.357087][ T8617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.374262][ T5930] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 249.429907][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.473173][ T5930] usb 4-1: config 0 descriptor?? [ 249.479362][ T8810] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.540642][ T24] gspca_vc032x: reg_w err -110 [ 249.577602][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.721613][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.829898][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.864613][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.931657][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.942500][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.962445][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.975179][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.992510][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.014594][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.036869][ T5930] usb 4-1: USB disconnect, device number 17 [ 250.047831][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.068824][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.103173][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.125804][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.148012][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.169867][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.175161][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.239975][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.276208][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.318639][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.338861][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 250.367085][ T24] gspca_vc032x: Unknown sensor... [ 250.372437][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 250.401766][ T24] usb 1-1: USB disconnect, device number 21 [ 250.548116][ T8617] veth0_vlan: entered promiscuous mode [ 250.559244][ T8617] veth1_vlan: entered promiscuous mode [ 250.568455][ T8836] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 250.656808][ T8617] veth0_macvtap: entered promiscuous mode [ 250.709929][ T5851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 250.869969][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 251.340179][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 251.347827][ T8617] veth1_macvtap: entered promiscuous mode [ 251.371046][ T5851] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 251.379225][ T5851] usb 6-1: config 1 has no interface number 0 [ 251.416550][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.424219][ T5851] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 251.451790][ T5851] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 251.471579][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.481393][ T5851] usb 6-1: config 1 interface 105 has no altsetting 0 [ 251.504554][ T5851] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 251.524505][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.616399][ T5851] usb 6-1: Product: syz [ 251.623350][ T5851] usb 6-1: Manufacturer: syz [ 251.627950][ T5851] usb 6-1: SerialNumber: syz [ 251.635912][ T8856] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 251.695139][ T8856] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 251.755101][ T79] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.787877][ T79] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.909864][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 251.966620][ T8886] kAFS: No cell specified [ 252.949881][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 253.207445][ T8891] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.222015][ T6562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.235566][ T6562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.244799][ T79] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.253754][ T8891] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.310826][ T79] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.521504][ T8856] netlink: 71 bytes leftover after parsing attributes in process `syz.5.754'. [ 253.614877][ T7026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.703070][ T8891] CIFS: VFS: Malformed UNC in devname [ 253.818021][ T5851] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 253.999893][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.094639][ T5851] aqc111 6-1:1.105: probe with driver aqc111 failed with error -32 [ 254.163894][ T7026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.333561][ T5914] usb 6-1: USB disconnect, device number 4 [ 254.631532][ T30] audit: type=1400 audit(2000000185.657:517): avc: denied { bind } for pid=8911 comm="syz.6.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.733397][ T30] audit: type=1400 audit(2000000185.707:518): avc: denied { write } for pid=8911 comm="syz.6.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.029880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.222106][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.228409][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.679570][ T8932] bridge_slave_0: left allmulticast mode [ 255.685313][ T8932] bridge_slave_0: left promiscuous mode [ 255.691688][ T8932] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.801726][ T30] audit: type=1400 audit(2000000186.667:519): avc: denied { ioctl } for pid=8925 comm="syz.5.767" path="socket:[21657]" dev="sockfs" ino=21657 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.911778][ T8932] bridge_slave_1: left allmulticast mode [ 255.917577][ T8932] bridge_slave_1: left promiscuous mode [ 255.923803][ T8932] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.034914][ T8932] bond0: (slave bond_slave_0): Releasing backup interface [ 256.069859][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.883992][ T30] audit: type=1400 audit(2000000187.907:520): avc: denied { read } for pid=8936 comm="syz.3.770" path="socket:[22544]" dev="sockfs" ino=22544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.911385][ T8932] bond0: (slave bond_slave_1): Releasing backup interface [ 257.033575][ T30] audit: type=1400 audit(2000000187.957:521): avc: denied { bind } for pid=8936 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.054301][ T8932] team0: Port device team_slave_0 removed [ 257.110227][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 257.275535][ T8932] team0: Port device team_slave_1 removed [ 257.289305][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.301328][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.309563][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.345735][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.741264][ T8951] kAFS: No cell specified [ 258.149880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 258.340986][ T30] audit: type=1400 audit(2000000189.367:522): avc: denied { read } for pid=8956 comm="syz.5.773" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.968007][ T30] audit: type=1400 audit(2000000189.367:523): avc: denied { open } for pid=8956 comm="syz.5.773" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.115430][ T8957] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 259.121972][ T8957] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 259.199881][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.453520][ T30] audit: type=1400 audit(2000000190.337:524): avc: denied { create } for pid=8968 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.584635][ T8957] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 259.687988][ T30] audit: type=1400 audit(2000000190.707:525): avc: denied { module_request } for pid=8972 comm="syz.3.777" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 259.773995][ T8957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.781601][ T8957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 260.037195][ T8957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 260.196480][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.781'. [ 260.229906][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 260.404377][ T5930] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 260.420153][ T5851] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 260.599914][ T5930] usb 4-1: device descriptor read/64, error -71 [ 260.603003][ T8993] binder: BINDER_SET_CONTEXT_MGR already set [ 260.619952][ T8993] binder: 8991:8993 ioctl 4018620d 200000004a80 returned -16 [ 260.761351][ T5851] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 260.775014][ T5851] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.792056][ T5851] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 260.802652][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.818318][ T5851] usb 6-1: config 0 descriptor?? [ 260.836948][ T8971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 260.870095][ T5930] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 261.047436][ T5930] usb 4-1: device descriptor read/64, error -71 [ 261.153667][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.189981][ T5170] Bluetooth: hci5: command 0x0c1a tx timeout [ 261.209558][ T5930] usb usb4-port1: attempt power cycle [ 261.230274][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.269957][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.689607][ T5930] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 261.732492][ T5930] usb 4-1: device descriptor read/8, error -71 [ 261.829990][ T5170] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.930823][ T30] audit: type=1400 audit(2000000192.957:526): avc: denied { read } for pid=9004 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.960162][ T30] audit: type=1400 audit(2000000192.977:527): avc: denied { map } for pid=9004 comm="syz.1.786" path="socket:[22610]" dev="sockfs" ino=22610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.985393][ T30] audit: type=1400 audit(2000000192.977:528): avc: denied { read } for pid=9004 comm="syz.1.786" path="socket:[22610]" dev="sockfs" ino=22610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.011564][ T5930] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 262.040653][ T5930] usb 4-1: device descriptor read/8, error -71 [ 262.077418][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.788'. [ 262.151241][ T5930] usb usb4-port1: unable to enumerate USB device [ 262.309957][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.642427][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 262.787692][ T5851] usbhid 6-1:0.0: can't add hid device: -71 [ 262.801838][ T5851] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 262.946359][ T5851] usb 6-1: USB disconnect, device number 5 [ 263.270051][ T5170] Bluetooth: hci5: command 0x0c1a tx timeout [ 263.349857][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.909874][ T5170] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.990199][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'. [ 264.019249][ T9058] netlink: 148 bytes leftover after parsing attributes in process `syz.3.800'. [ 264.070026][ T5930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 264.239881][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 264.399859][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.990821][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.377216][ T5170] Bluetooth: hci5: command 0x0c1a tx timeout [ 265.430169][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.561641][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.571777][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.585006][ T5930] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 265.597491][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.620943][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 265.641034][ T5930] usb 7-1: config 0 descriptor?? [ 265.990103][ T5170] Bluetooth: hci3: command 0x0c1a tx timeout [ 265.997885][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.017426][ T9071] tipc: Enabling of bearer rejected, already enabled [ 266.024200][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.462453][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 266.474607][ T9] usb 6-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 266.479844][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 266.501002][ T9] usb 6-1: Product: syz [ 266.507130][ T9] usb 6-1: config 0 descriptor?? [ 266.519419][ T5930] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0010/input/input16 [ 266.546160][ T5930] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 266.596874][ T5930] usb 7-1: USB disconnect, device number 2 [ 266.775319][ T9077] fido_id[9077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 267.147877][ T9090] geneve2: entered promiscuous mode [ 267.153325][ T9090] geneve2: entered allmulticast mode [ 267.269929][ T30] audit: type=1400 audit(2000000198.257:529): avc: denied { mounton } for pid=9082 comm="syz.1.810" path="/proc/627/task" dev="proc" ino=22796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 267.373206][ T9086] comedi comedi0: dt2814: I/O port conflict (0x1,2) [ 267.379912][ T30] audit: type=1400 audit(2000000198.267:530): avc: denied { associate } for pid=9082 comm="syz.1.810" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 267.504467][ T30] audit: type=1400 audit(2000000198.327:531): avc: denied { write } for pid=9082 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.523871][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.534439][ T5913] usb 6-1: USB disconnect, device number 6 [ 268.549876][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.691578][ T30] audit: type=1400 audit(2000000199.717:532): avc: denied { execute } for pid=9123 comm="syz.5.815" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 269.007466][ T9130] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 269.013986][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.021886][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 269.130449][ T9131] vhci_hcd: connection closed [ 269.196423][ T6562] vhci_hcd: stop threads [ 269.328659][ T6562] vhci_hcd: release socket [ 269.394351][ T6562] vhci_hcd: disconnect device [ 269.416615][ T24] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 269.491403][ T24] usb 43-1: enqueue for inactive port 0 [ 269.599860][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.824888][ T24] vhci_hcd: vhci_device speed not set [ 270.439986][ T30] audit: type=1400 audit(2000000201.457:533): avc: denied { read write } for pid=9138 comm="syz.6.818" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 270.543812][ T9147] netlink: 5884 bytes leftover after parsing attributes in process `syz.6.818'. [ 270.628047][ T30] audit: type=1400 audit(2000000201.507:534): avc: denied { open } for pid=9138 comm="syz.6.818" path="/10/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 270.659855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.512708][ T9168] FAULT_INJECTION: forcing a failure. [ 271.512708][ T9168] name failslab, interval 1, probability 0, space 0, times 1 [ 271.525501][ T9168] CPU: 0 UID: 0 PID: 9168 Comm: syz.3.824 Not tainted syzkaller #0 PREEMPT(full) [ 271.525516][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.525523][ T9168] Call Trace: [ 271.525526][ T9168] [ 271.525531][ T9168] dump_stack_lvl+0x16c/0x1f0 [ 271.525548][ T9168] should_fail_ex+0x512/0x640 [ 271.525563][ T9168] should_failslab+0xc2/0x120 [ 271.525576][ T9168] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 271.525587][ T9168] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 271.525601][ T9168] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 271.525614][ T9168] idr_get_free+0x528/0xa30 [ 271.525631][ T9168] idr_alloc_u32+0x190/0x2f0 [ 271.525644][ T9168] ? __pfx_idr_alloc_u32+0x10/0x10 [ 271.525655][ T9168] ? do_raw_spin_lock+0x12c/0x2b0 [ 271.525668][ T9168] ? net_generic+0xea/0x2a0 [ 271.525683][ T9168] l2tp_tunnel_register+0xf8/0xbe0 [ 271.525699][ T9168] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 271.525713][ T9168] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 271.525733][ T9168] ? pppol2tp_tunnel_get.constprop.0+0x364/0x540 [ 271.525751][ T9168] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 271.525768][ T9168] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 271.525787][ T9168] ? lockdep_hardirqs_on+0x7c/0x110 [ 271.525803][ T9168] pppol2tp_connect+0xb1b/0x1ce0 [ 271.525819][ T9168] ? rcu_is_watching+0x12/0xc0 [ 271.525833][ T9168] ? __pfx_pppol2tp_connect+0x10/0x10 [ 271.525847][ T9168] ? lockdep_hardirqs_on+0x7c/0x110 [ 271.525864][ T9168] ? pppol2tp_connect+0xf/0x1ce0 [ 271.525881][ T9168] ? __pfx_pppol2tp_connect+0x10/0x10 [ 271.525895][ T9168] __sys_connect_file+0x141/0x1a0 [ 271.525908][ T9168] __sys_connect+0x13b/0x160 [ 271.525918][ T9168] ? __pfx___sys_connect+0x10/0x10 [ 271.525932][ T9168] ? xfd_validate_state+0x61/0x180 [ 271.525949][ T9168] ? __pfx_ksys_write+0x10/0x10 [ 271.525963][ T9168] __x64_sys_connect+0x72/0xb0 [ 271.525972][ T9168] ? lockdep_hardirqs_on+0x7c/0x110 [ 271.525984][ T9168] do_syscall_64+0xcd/0x4c0 [ 271.525998][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.526009][ T9168] RIP: 0033:0x7fc805d8ebe9 [ 271.526017][ T9168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.526028][ T9168] RSP: 002b:00007fc806b1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 271.526038][ T9168] RAX: ffffffffffffffda RBX: 00007fc805fc6090 RCX: 00007fc805d8ebe9 [ 271.526044][ T9168] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 0000000000000007 [ 271.526050][ T9168] RBP: 00007fc806b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 271.526056][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.526062][ T9168] R13: 00007fc805fc6128 R14: 00007fc805fc6090 R15: 00007ffcfd7f73a8 [ 271.526074][ T9168] [ 271.679854][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.959579][ T9168] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 271.968450][ T9168] trusted_key: encrypted_key: insufficient parameters specified [ 272.057313][ T30] audit: type=1400 audit(2000000203.067:535): avc: denied { unmount } for pid=8617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.284565][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.826'. [ 272.709864][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 272.806658][ T9186] tipc: Enabling of bearer rejected, already enabled [ 273.759925][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.919711][ T9207] netlink: 'syz.5.835': attribute type 29 has an invalid length. [ 273.930065][ T5851] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 273.975234][ T9210] netlink: 'syz.5.835': attribute type 29 has an invalid length. [ 274.121554][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.202412][ T5851] usb 7-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 274.279426][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.365722][ T5851] usb 7-1: config 0 descriptor?? [ 274.570297][ T5930] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 274.657240][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.668742][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.683663][ T5913] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 274.692116][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.730157][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 274.738342][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 274.749528][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.759267][ T5930] usb 6-1: config 4 interface 0 has no altsetting 0 [ 274.771481][ T9232] tipc: Started in network mode [ 274.776343][ T9232] tipc: Node identity ac14140f, cluster identity 4711 [ 274.783356][ T9232] tipc: New replicast peer: 255.255.255.255 [ 274.789774][ T9232] tipc: Enabled bearer , priority 10 [ 274.789852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.836333][ T5930] usb 6-1: string descriptor 0 read error: -22 [ 274.851006][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 274.852917][ T5930] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 274.892442][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 274.897878][ T5930] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 274.918335][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.955312][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.974472][ T5930] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 274.988045][ T5851] logitech-djreceiver 0003:046D:C52F.0011: item fetching failed at offset 0/6 [ 275.006401][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 275.014347][ T5930] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.028228][ T5851] logitech-djreceiver 0003:046D:C52F.0011: logi_dj_probe: parse failed [ 275.062011][ T5930] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 275.064612][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 275.096202][ T5930] usb 6-1: media controller created [ 275.096310][ T5851] logitech-djreceiver 0003:046D:C52F.0011: probe with driver logitech-djreceiver failed with error -22 [ 275.119940][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 275.139264][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.162234][ T5913] usb 1-1: config 0 descriptor?? [ 275.168002][ T9224] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 275.181635][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.187731][ T5851] usb 7-1: USB disconnect, device number 3 [ 275.395261][ T30] audit: type=1400 audit(2000000206.417:536): avc: denied { ioctl } for pid=9218 comm="syz.5.837" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 275.802790][ T43] tipc: Node number set to 2886997007 [ 275.830100][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 275.860396][ T43] usb 1-1: USB disconnect, device number 22 [ 275.870283][ T5170] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 276.369225][ T5930] zl10353_read_register: readreg error (reg=127, ret==0) [ 276.500580][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.842'. [ 276.559562][ T30] audit: type=1400 audit(2000000207.527:537): avc: denied { listen } for pid=9242 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.755945][ T30] audit: type=1400 audit(2000000207.527:538): avc: denied { write } for pid=9242 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.803169][ T30] audit: type=1400 audit(2000000207.527:539): avc: denied { accept } for pid=9242 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.869876][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 276.905891][ T30] audit: type=1400 audit(2000000207.527:540): avc: denied { read } for pid=9242 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.992026][ T9258] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 277.000226][ T9258] macvlan2: entered allmulticast mode [ 277.005685][ T9258] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 277.018182][ T9258] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 277.064789][ T9258] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 277.072037][ T30] audit: type=1400 audit(2000000208.087:541): avc: denied { audit_write } for pid=9259 comm="syz.6.844" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 277.432023][ T5930] usb 6-1: USB disconnect, device number 7 [ 277.539930][ T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 277.647366][ T30] audit: type=1400 audit(2000000208.667:542): avc: denied { bind } for pid=9271 comm="syz.6.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 277.709680][ T24] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 277.875898][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 277.909998][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.943604][ T24] usb 1-1: Product: syz [ 277.969760][ T24] usb 1-1: Manufacturer: syz [ 277.991480][ T24] usb 1-1: SerialNumber: syz [ 278.026942][ T24] usb 1-1: config 0 descriptor?? [ 278.586330][ T9288] kAFS: No cell specified [ 278.959863][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 279.156854][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 279.318700][ T5913] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 279.396292][ T30] audit: type=1400 audit(2000000210.417:543): avc: denied { listen } for pid=9265 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.587979][ T9301] kAFS: No cell specified [ 279.968464][ T30] audit: type=1400 audit(2000000210.967:544): avc: denied { ioctl } for pid=9265 comm="syz.0.846" path="socket:[23013]" dev="sockfs" ino=23013 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.999927][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 280.095112][ T5913] usb 7-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 280.137552][ T5913] usb 7-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 280.304736][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.363643][ T5913] usb 7-1: probing VID:PID(2201:012C) [ 280.420841][ T5851] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 280.429690][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 280.695355][ T5913] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 280.712191][ T9309] tipc: Started in network mode [ 280.712937][ T5913] vub300 7-1:64.0: probe with driver vub300 failed with error -22 [ 280.729725][ T9309] tipc: Node identity 665395310d49, cluster identity 4711 [ 280.751107][ T9309] tipc: Enabled bearer , priority 0 [ 280.770445][ T5913] usb 7-1: USB disconnect, device number 4 [ 280.803816][ T5851] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 280.832836][ T9309] syzkaller0: entered promiscuous mode [ 280.838529][ T9309] syzkaller0: entered allmulticast mode [ 280.848149][ T9309] tipc: Resetting bearer [ 280.849765][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.888437][ T9308] tipc: Resetting bearer [ 280.889878][ T5851] usb 4-1: Product: syz [ 280.898317][ T5851] usb 4-1: Manufacturer: syz [ 280.943750][ T5851] usb 4-1: SerialNumber: syz [ 281.039850][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.083543][ T5851] usb 4-1: config 0 descriptor?? [ 281.567333][ T5844] Bluetooth: hci4: urb ffff88802a9e5e00 submission failed (2) [ 281.900763][ T24] tipc: Node number set to 1796904241 [ 282.069922][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 282.555206][ T5851] usb 4-1: USB disconnect, device number 22 [ 282.602293][ T5930] usb 1-1: USB disconnect, device number 23 [ 283.109842][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 284.149935][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.189854][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.643363][ T9308] tipc: Disabling bearer [ 285.712828][ T9330] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 285.760289][ T9330] macvlan2: entered allmulticast mode [ 285.768951][ T9330] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 285.777886][ T9330] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 285.795529][ T9330] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 285.937343][ T9355] netlink: 56 bytes leftover after parsing attributes in process `syz.5.870'. [ 285.979777][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.987997][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.239971][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.329647][ T9361] futex_wake_op: syz.0.871 tries to shift op by 36; fix this program [ 286.706413][ T30] audit: type=1400 audit(2000000217.337:545): avc: denied { create } for pid=9357 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 286.872344][ T30] audit: type=1800 audit(2000000217.487:546): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.871" name="bus" dev="overlay" ino=908 res=0 errno=0 [ 286.893803][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.167939][ T9367] 9pnet_fd: p9_fd_create_tcp (9367): problem binding to privport [ 287.269849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 287.359942][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 288.309934][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.349837][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.820772][ T30] audit: type=1400 audit(2000000219.547:547): avc: denied { write } for pid=9371 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 290.188930][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 290.196861][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 290.214298][ T9375] ceph: No mds server is up or the cluster is laggy [ 290.332174][ T5914] usb 6-1: device descriptor read/all, error -71 [ 290.399973][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 290.551115][ T30] audit: type=1400 audit(2000000221.577:548): avc: denied { write } for pid=9391 comm="syz.5.881" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 290.664934][ T30] audit: type=1400 audit(2000000221.637:549): avc: denied { bind } for pid=9391 comm="syz.5.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 290.821170][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 290.831831][ T30] audit: type=1400 audit(2000000221.737:550): avc: denied { create } for pid=9389 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 290.969991][ T30] audit: type=1400 audit(2000000221.747:551): avc: denied { sys_admin } for pid=9389 comm="syz.1.879" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 291.429840][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 291.676399][ T9412] netlink: 148 bytes leftover after parsing attributes in process `syz.0.886'. [ 292.469912][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 292.955510][ T30] audit: type=1400 audit(2000000223.977:552): avc: denied { bind } for pid=9421 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 293.520103][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.483929][ T5914] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.549912][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.652655][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 294.667281][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.667351][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.667399][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.667522][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.667570][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.734878][ T5914] usb 2-1: config 0 descriptor?? [ 295.113022][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.895'. [ 295.314254][ T5914] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input18 [ 295.373213][ T5914] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 295.589834][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.592275][ T9456] kAFS: No cell specified [ 295.860169][ T5914] usb 2-1: USB disconnect, device number 16 [ 295.980052][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 296.026830][ T9459] fido_id[9459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 296.190019][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 296.368146][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 296.525318][ T43] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 296.550989][ T43] usb 7-1: config 0 has no interface number 0 [ 296.639883][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 296.689959][ T9469] tipc: Enabling of bearer rejected, already enabled [ 296.705967][ T43] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 296.723624][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.732242][ T43] usb 7-1: Product: syz [ 296.736421][ T43] usb 7-1: Manufacturer: syz [ 296.753459][ T43] usb 7-1: SerialNumber: syz [ 296.916998][ T43] usb 7-1: config 0 descriptor?? [ 296.945344][ T43] redrat3 7-1:0.83: Couldn't find all endpoints [ 296.951421][ T9478] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 297.003326][ T9478] macvlan2: entered allmulticast mode [ 297.013553][ T9478] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 297.033145][ T9478] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 297.044558][ T9478] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 297.221769][ T9449] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 297.669846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 298.102975][ T9] usb 7-1: USB disconnect, device number 5 [ 298.164931][ T30] audit: type=1400 audit(2000000229.157:553): avc: denied { ioctl } for pid=9490 comm="syz.3.909" path="socket:[23824]" dev="sockfs" ino=23824 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.189436][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.536765][ T9496] kAFS: No cell specified [ 298.709911][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.660309][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 299.749846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.859963][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 299.867002][ T9] usb 6-1: no configurations [ 299.887105][ T9] usb 6-1: can't read configurations, error -22 [ 299.930012][ T5930] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 300.111376][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 300.210581][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 300.361021][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.430102][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 300.439298][ T9] usb 6-1: no configurations [ 300.444921][ T9] usb 6-1: can't read configurations, error -22 [ 300.452868][ T9] usb usb6-port1: attempt power cycle [ 300.507525][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.519818][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.535739][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 300.582443][ T5930] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.611626][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.665531][ T5930] usb 4-1: config 0 descriptor?? [ 300.748566][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 300.763005][ T9519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.916'. [ 300.789901][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 300.800012][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 300.830583][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 300.843943][ T9] usb 6-1: no configurations [ 300.853896][ T9] usb 6-1: can't read configurations, error -22 [ 300.964353][ T9528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 300.970885][ T9528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.978826][ T9528] vhci_hcd vhci_hcd.0: Device attached [ 301.003582][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 301.058272][ T9529] vhci_hcd: connection closed [ 301.074526][ T5983] vhci_hcd: stop threads [ 301.087411][ T30] audit: type=1400 audit(2000000232.067:554): avc: denied { mounton } for pid=9522 comm="syz.0.917" path="/181/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 301.124271][ T5930] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0013/input/input19 [ 301.132661][ T5983] vhci_hcd: release socket [ 301.141779][ T5930] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 301.173364][ T5983] vhci_hcd: disconnect device [ 301.202853][ T9] usb 6-1: device descriptor read/8, error -71 [ 301.288333][ T5930] usb 4-1: USB disconnect, device number 23 [ 301.325186][ T9] usb usb6-port1: unable to enumerate USB device [ 301.829829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 302.705871][ T6004] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 302.869919][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 302.890310][ T6004] usb 6-1: Using ep0 maxpacket: 8 [ 303.056728][ T6004] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 303.065142][ T6004] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 303.073656][ T6004] usb 6-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 303.084365][ T6004] usb 6-1: config 0 has no interface number 0 [ 303.159954][ T6004] usb 6-1: too many endpoints for config 0 interface 72 altsetting 199: 194, using maximum allowed: 30 [ 303.180506][ T6004] usb 6-1: config 0 interface 72 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 303.200188][ T6004] usb 6-1: config 0 interface 72 has no altsetting 0 [ 303.223102][ T6004] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 303.232435][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 303.240592][ T6004] usb 6-1: Product: syz [ 303.341575][ T6004] usb 6-1: config 0 descriptor?? [ 303.399987][ T5913] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 303.550971][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 303.584373][ T6004] usb 6-1: USB disconnect, device number 14 [ 303.600886][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.625761][ T5913] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 303.669492][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.718587][ T5913] usb 4-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=ee.23 [ 303.754950][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.773439][ T5913] usb 4-1: Product: syz [ 303.777879][ T5913] usb 4-1: Manufacturer: syz [ 303.782905][ T5913] usb 4-1: SerialNumber: syz [ 303.791027][ T5913] usb 4-1: config 0 descriptor?? [ 303.805930][ T9564] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 303.815052][ T9564] macvlan2: entered allmulticast mode [ 303.820728][ T9564] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 303.831449][ T9564] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 303.838656][ T9564] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 303.909874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 304.000068][ T5914] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 304.226450][ T5913] usb 4-1: USB disconnect, device number 24 [ 304.524612][ T5914] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 304.533076][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.543296][ T5914] usb 7-1: config 0 has no interface number 0 [ 304.549404][ T5914] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 304.560623][ T5914] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.573531][ T5914] usb 7-1: config 0 interface 52 has no altsetting 0 [ 304.600828][ T5914] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 304.610182][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 304.618268][ T5914] usb 7-1: SerialNumber: syz [ 304.641965][ T5914] usb 7-1: config 0 descriptor?? [ 304.864263][ T5914] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input20 [ 304.959945][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 305.130249][ T5930] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 305.142476][ T9587] netlink: 'syz.6.929': attribute type 10 has an invalid length. [ 305.149231][ T9582] random: crng reseeded on system resumption [ 305.157625][ T9587] netlink: 40 bytes leftover after parsing attributes in process `syz.6.929'. [ 305.167163][ T9587] dummy0: entered promiscuous mode [ 305.177080][ T9587] bridge0: port 3(dummy0) entered blocking state [ 305.183792][ T9587] bridge0: port 3(dummy0) entered disabled state [ 305.191672][ T9587] dummy0: entered allmulticast mode [ 305.205132][ T9587] bridge0: port 3(dummy0) entered blocking state [ 305.211691][ T9587] bridge0: port 3(dummy0) entered forwarding state [ 305.286135][ T5914] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 305.414592][ T5930] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 305.436745][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.464859][ T30] audit: type=1400 audit(2000000236.477:555): avc: denied { ioctl } for pid=9573 comm="syz.1.932" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 305.489609][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.566479][ T5914] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 305.596258][ T5914] usb 4-1: config 0 has no interface number 0 [ 305.618262][ T5914] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.642289][ T5930] usb 1-1: config 0 descriptor?? [ 305.699543][ T5914] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 305.711817][ T5914] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 305.740100][ T5914] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 305.751634][ T5914] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.840194][ T5914] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 305.849607][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.857708][ T5914] usb 4-1: Product: syz [ 305.871611][ T5914] usb 4-1: Manufacturer: syz [ 305.882073][ T5914] usb 4-1: SerialNumber: syz [ 305.887972][ T9] usb 7-1: USB disconnect, device number 6 [ 305.888086][ C1] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 305.968639][ T5914] usb 4-1: config 0 descriptor?? [ 305.982673][ T9584] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 305.989927][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 306.027300][ T5914] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 306.086150][ T5914] scsi host1: usb-storage 4-1:0.189 [ 306.274001][ T5930] ath6kl: mismatched byte count 0 vs. expected 12 [ 306.280455][ T9584] netlink: 76 bytes leftover after parsing attributes in process `syz.3.936'. [ 306.290334][ T5930] ath6kl: Failed to init ath6kl core: -22 [ 306.298999][ T5914] usb 4-1: USB disconnect, device number 25 [ 306.334326][ T5930] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 306.502322][ T5913] usb 1-1: USB disconnect, device number 24 [ 306.925176][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.939'. [ 307.029908][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 307.234825][ T9616] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 307.261370][ T9616] macvlan2: entered allmulticast mode [ 307.286825][ T9616] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 307.303212][ T30] audit: type=1400 audit(2000000238.307:556): avc: denied { read } for pid=9617 comm="syz.5.944" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 307.310082][ T9616] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 307.356370][ T9616] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 307.615255][ T9626] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 307.621786][ T9626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 307.629876][ T9626] vhci_hcd vhci_hcd.0: Device attached [ 307.720552][ T9627] vhci_hcd: connection closed [ 307.749989][ T49] vhci_hcd: stop threads [ 307.770626][ T30] audit: type=1400 audit(2000000238.307:557): avc: denied { open } for pid=9617 comm="syz.5.944" path="/58/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 307.789544][ T5914] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 307.856507][ T49] vhci_hcd: release socket [ 307.894264][ T49] vhci_hcd: disconnect device [ 308.069836][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 308.530070][ T30] audit: type=1400 audit(2000000238.307:558): avc: denied { ioctl } for pid=9617 comm="syz.5.944" path="/58/file0/file0" dev="fuse" ino=0 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 309.075759][ T30] audit: type=1400 audit(2000000239.547:559): avc: denied { search } for pid=9631 comm="syz.1.947" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.098059][ T30] audit: type=1400 audit(2000000239.547:560): avc: denied { search } for pid=9631 comm="syz.1.947" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.120102][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 309.270354][ T5914] usb 7-1: Using ep0 maxpacket: 32 [ 309.278964][ T5914] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 309.279060][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 309.279152][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 309.279260][ T5914] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 309.279288][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.311723][ T5914] usb 7-1: config 0 descriptor?? [ 309.649108][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.746598][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.106097][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 310.159825][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 310.440204][ T5914] usb 7-1: string descriptor 0 read error: -71 [ 310.441317][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.5.954'. [ 310.453413][ T5914] usb 7-1: USB disconnect, device number 7 [ 310.981835][ T5913] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 311.077849][ T9681] kAFS: No cell specified [ 311.199910][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 311.583109][ T5913] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 311.591718][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.613051][ T5913] usb 4-1: config 0 has no interface number 0 [ 311.619156][ T5913] usb 4-1: config 0 interface 255 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.637962][ T5913] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 311.701593][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.832711][ T5913] usb 4-1: Product: syz [ 311.836900][ T5913] usb 4-1: Manufacturer: syz [ 311.841769][ T5913] usb 4-1: SerialNumber: syz [ 311.852492][ T5913] usb 4-1: config 0 descriptor?? [ 311.871026][ T9698] tipc: Enabling of bearer rejected, already enabled [ 312.229819][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 312.570737][ T5913] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 312.755861][ T5913] usb 4-1: USB disconnect, device number 26 [ 313.067693][ T30] audit: type=1400 audit(2000000002.420:561): avc: denied { getopt } for pid=9714 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.279878][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 313.358905][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 313.399319][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 313.419866][ T5921] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 313.499934][ T5913] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 313.520353][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 313.528188][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 313.548377][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 313.559021][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.571179][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.582817][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 313.592451][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 313.605084][ T9] usb 7-1: SerialNumber: syz [ 313.610301][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 313.626102][ T9713] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 313.637365][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 313.641542][ T9713] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 313.662497][ T5921] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 313.672034][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.684632][ T5921] usb 6-1: Product: syz [ 313.689365][ T5913] usb 1-1: config 0 has an invalid interface number: 212 but max is 0 [ 313.698724][ T5913] usb 1-1: config 0 has no interface number 0 [ 313.709891][ T5921] usb 6-1: Manufacturer: syz [ 313.714513][ T5921] usb 6-1: SerialNumber: syz [ 313.729873][ T5913] usb 1-1: config 0 interface 212 has no altsetting 0 [ 313.736683][ T5913] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 313.747821][ T5921] usb 6-1: config 0 descriptor?? [ 313.766002][ T9715] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 313.775744][ T9715] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 313.775977][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.792344][ T5921] usb 6-1: ucan: probing device on interface #0 [ 313.803795][ T5913] usb 1-1: config 0 descriptor?? [ 313.812373][ T9735] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 313.833115][ T5913] go7007 1-1:0.212: Sensoray 2250 found [ 313.838789][ T5913] go7007 1-1:0.212: probe with driver go7007 failed with error -12 [ 314.089135][ T9739] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 314.149245][ T9739] trusted_key: encrypted_key: insufficient parameters specified [ 314.236601][ T9] usb 7-1: USB disconnect, device number 8 [ 314.253066][ T5921] usb 6-1: ucan: could not read protocol version, ret=-71 [ 314.260696][ T5921] usb 6-1: ucan: probe failed; try to update the device firmware [ 314.298966][ T5921] usb 6-1: USB disconnect, device number 15 [ 314.309901][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 314.500922][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 314.909281][ T30] audit: type=1400 audit(2000000004.370:562): avc: denied { execute } for pid=9757 comm="syz.6.986" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 315.310033][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 315.350063][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 315.574301][ T9] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 315.584157][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.629579][ T9] usb 7-1: config 0 descriptor?? [ 315.645346][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 315.844187][ T9775] pim6reg: entered allmulticast mode [ 315.853631][ T9775] pim6reg: left allmulticast mode [ 316.068987][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 316.122318][ T5921] usb 1-1: USB disconnect, device number 25 [ 316.389829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 316.650566][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.656856][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.889882][ T9] gp8psk: usb in 128 operation failed. [ 317.273742][ T5913] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 317.429927][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 317.861406][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 317.868329][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.892879][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.903084][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.168716][ T9] gp8psk: usb in 146 operation failed. [ 318.193970][ T9] gp8psk: failed to get FW version [ 318.205766][ T5913] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 318.220308][ T9] gp8psk: usb in 149 operation failed. [ 318.249966][ T9] gp8psk: failed to get FPGA version [ 318.256237][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.277948][ T9] gp8psk: usb in 138 operation failed. [ 318.292482][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 318.307670][ T5913] usb 2-1: config 0 descriptor?? [ 318.340557][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 318.362280][ T9] usb 7-1: USB disconnect, device number 9 [ 318.430045][ T5851] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 318.469912][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 318.631691][ T5851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.643236][ T5851] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 318.655869][ T5851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.665165][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.179155][ T5851] usb 1-1: Product: syz [ 319.192333][ T5851] usb 1-1: Manufacturer: syz [ 319.203684][ T5851] usb 1-1: SerialNumber: syz [ 319.235413][ T5913] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 319.243318][ T5851] cdc_mbim 1-1:1.0: skipping garbage [ 319.249568][ T5913] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 319.257072][ T5913] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 319.264798][ T5913] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 319.277266][ T5913] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 319.296450][ T5913] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 319.359406][ T5913] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 319.428905][ T9785] random: crng reseeded on system resumption [ 319.445396][ T9800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.456377][ T5913] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 319.509981][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 319.533906][ T6004] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 319.552889][ T5913] usb 2-1: USB disconnect, device number 17 [ 319.633510][ T6004] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 319.689686][ T6004] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 319.712905][ T6004] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 320.486665][ T9800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 320.526520][ T5851] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 320.549875][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 320.617719][ T5851] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 320.721679][ T5851] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 320.805447][ T5851] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 320.892173][ T5851] wwan wwan0: port wwan0mbim0 attached [ 320.922242][ T5851] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, fe:28:ac:6f:09:8f [ 321.590106][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 322.567518][ T6004] usb 1-1: USB disconnect, device number 26 [ 322.629847][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 322.674330][ T6004] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 322.964429][ T6004] wwan wwan0: port wwan0mbim0 disconnected [ 323.081451][ T5851] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 323.240818][ T9864] Bluetooth: MGMT ver 1.23 [ 323.250598][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 323.267368][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.322987][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.417214][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.442160][ T5851] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.669948][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 324.294382][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.348966][ T5851] usb 6-1: config 0 descriptor?? [ 324.709850][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 325.023385][ T30] audit: type=1400 audit(2000000014.490:563): avc: denied { read append } for pid=9890 comm="syz.0.1022" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.734155][ T30] audit: type=1400 audit(2000000014.490:564): avc: denied { open } for pid=9890 comm="syz.0.1022" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.757191][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 325.829435][ T5851] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0015/input/input22 [ 325.864343][ T5851] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 326.019030][ T5851] usb 6-1: USB disconnect, device number 16 [ 326.114283][ T9901] fido_id[9901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 326.380059][ T5930] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 326.550055][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 326.560641][ T5930] usb 2-1: no configurations [ 326.565254][ T5930] usb 2-1: can't read configurations, error -22 [ 326.576011][ T9915] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1024'. [ 326.740066][ T5930] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 326.789831][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 326.816893][ T9922] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 326.823442][ T9922] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.831143][ T9922] vhci_hcd vhci_hcd.0: Device attached [ 326.920027][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 326.983122][ T5930] usb 2-1: no configurations [ 327.005349][ T9924] vhci_hcd: connection closed [ 327.005462][ T5930] usb 2-1: can't read configurations, error -22 [ 327.037543][ T13] vhci_hcd: stop threads [ 327.057550][ T13] vhci_hcd: release socket [ 327.064037][ T5930] usb usb2-port1: attempt power cycle [ 327.069552][ T13] vhci_hcd: disconnect device [ 327.120036][ T43] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 327.127565][ T43] usb 43-1: enqueue for inactive port 0 [ 327.209991][ T43] vhci_hcd: vhci_device speed not set [ 327.409841][ T5930] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 327.430775][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 327.436390][ T5930] usb 2-1: no configurations [ 327.443514][ T5930] usb 2-1: can't read configurations, error -22 [ 327.610072][ T5930] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 327.651568][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 327.665251][ T5930] usb 2-1: no configurations [ 327.671740][ T5930] usb 2-1: can't read configurations, error -22 [ 327.680406][ T5930] usb usb2-port1: unable to enumerate USB device [ 327.839983][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 328.869862][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 329.725801][ T6004] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 329.909878][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 330.099216][ T6004] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 330.119927][ T6004] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 330.139839][ T6004] usb 2-1: config 0 interface 0 has no altsetting 0 [ 330.148564][ T6004] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.158398][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.174830][ T6004] usb 2-1: Product: syz [ 330.179110][ T6004] usb 2-1: Manufacturer: syz [ 330.187633][ T6004] usb 2-1: SerialNumber: syz [ 330.203150][ T6004] usb 2-1: config 0 descriptor?? [ 330.242535][ T6004] hub 2-1:0.0: bad descriptor, ignoring hub [ 330.248674][ T6004] hub 2-1:0.0: probe with driver hub failed with error -5 [ 330.286355][ T6004] usb 2-1: selecting invalid altsetting 0 [ 330.446975][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.455556][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.528573][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.538755][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.572714][ T9952] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 330.710209][ T5921] usb 2-1: USB disconnect, device number 22 [ 330.749621][ T9964] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 330.756159][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 330.764072][ T9964] vhci_hcd vhci_hcd.0: Device attached [ 330.803236][ T9965] vhci_hcd: connection closed [ 330.809430][ T6865] vhci_hcd: stop threads [ 330.949829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 331.009935][ T43] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 331.675685][ T6865] vhci_hcd: release socket [ 331.680279][ T6865] vhci_hcd: disconnect device [ 331.739011][ T43] usb 43-1: enqueue for inactive port 0 [ 331.820822][ T43] vhci_hcd: vhci_device speed not set [ 331.897836][ T9971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 331.960288][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 331.993028][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 332.112244][ T9979] delete_channel: no stack [ 332.135462][ T30] audit: type=1400 audit(2000000021.590:565): avc: denied { write } for pid=9977 comm="syz.1.1043" path="socket:[25509]" dev="sockfs" ino=25509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 332.158662][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.245064][ T9982] loop2: detected capacity change from 0 to 7 [ 332.264296][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.273505][ C1] buffer_io_error: 9 callbacks suppressed [ 332.273519][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 332.289999][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.299161][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 332.345063][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.354263][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 332.364527][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.373710][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 332.445243][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.445285][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 333.031054][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 333.194246][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.203444][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 333.250446][ T9995] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1047'. [ 333.286135][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.295285][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 333.461734][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.470916][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 333.482188][ T9982] ldm_validate_partition_table(): Disk read failed. [ 333.488937][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.498115][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 333.507502][ T9998] kAFS: No cell specified [ 333.532304][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.541529][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 333.564806][T10002] capability: warning: `syz.1.1043' uses 32-bit capabilities (legacy support in use) [ 333.634281][ T9982] Dev loop2: unable to read RDB block 0 [ 333.778931][ T9982] loop2: unable to read partition table [ 333.784975][ T9982] loop2: partition table beyond EOD, truncated [ 333.791867][ T9982] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 333.803747][T10006] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 333.842136][T10006] macvlan2: entered allmulticast mode [ 333.847707][T10006] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 333.863073][T10006] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 333.919723][T10006] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 334.069903][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 335.020022][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1054'. [ 335.109828][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 335.460696][ T30] audit: type=1400 audit(2000000024.920:566): avc: denied { unmount } for pid=7798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 335.559999][ T30] audit: type=1400 audit(2000000024.990:567): avc: denied { getopt } for pid=10029 comm="syz.6.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.682098][ T30] audit: type=1400 audit(2000000025.000:568): avc: denied { setattr } for pid=10029 comm="syz.6.1056" name="NETLINK" dev="sockfs" ino=25904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.706003][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.795502][T10036] bridge2: entered promiscuous mode [ 335.800942][T10036] bridge2: entered allmulticast mode [ 336.150004][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 337.189823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 337.658005][T10038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.800712][ T5949] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 338.095244][T10056] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1064'. [ 338.159806][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 338.182352][ T5949] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.199824][ T5949] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.229883][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 338.333294][ T5949] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.371772][ T5949] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.616470][ T5949] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.677259][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.904082][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 339.279814][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 340.309910][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 340.484335][ T5949] usb 1-1: GET_CAPABILITIES returned 0 [ 340.489944][ T5949] usbtmc 1-1:16.0: can't read capabilities [ 340.702394][ T6004] usb 1-1: USB disconnect, device number 27 [ 341.349810][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 341.687169][T10089] kAFS: No cell specified [ 342.391339][T10098] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 342.399925][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 342.439723][T10098] macvlan2: entered allmulticast mode [ 342.544579][T10098] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 343.329292][T10098] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 343.336697][ T30] audit: type=1400 audit(2000000032.790:569): avc: denied { getopt } for pid=10103 comm="syz.3.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 343.407475][T10098] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 343.439821][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 343.513028][T10105] netlink: 'syz.3.1076': attribute type 12 has an invalid length. [ 343.642562][T10109] tipc: Enabling of bearer rejected, already enabled [ 343.662403][T10112] input: syz1 as /devices/virtual/input/input24 [ 344.038272][T10112] netlink: 'syz.5.1078': attribute type 8 has an invalid length. [ 344.469875][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 344.624970][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 345.105174][T10131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1084'. [ 345.129239][ T7026] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.152292][ T30] audit: type=1400 audit(2000000034.580:570): avc: denied { ioctl } for pid=10125 comm="syz.0.1084" path="socket:[26102]" dev="sockfs" ino=26102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 345.233216][ T43] usb 2-1: device descriptor read/64, error -71 [ 345.379887][ T6004] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 345.509822][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.587118][T10141] kAFS: No cell specified [ 346.409856][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 346.549996][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 346.557110][ T43] usb 2-1: device descriptor read/64, error -71 [ 346.648775][T10150] 9pnet_virtio: no channels available for device ./file0 [ 346.661116][ T6004] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.689610][ T43] usb usb2-port1: attempt power cycle [ 347.350848][ T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 347.589824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 348.107676][ T6004] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.141541][T10158] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 348.148074][T10158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 348.296502][ T43] usb 2-1: device descriptor read/8, error -71 [ 348.354771][T10159] vhci_hcd: connection closed [ 348.354945][T10158] vhci_hcd vhci_hcd.0: Device attached [ 348.390551][ T7026] vhci_hcd: stop threads [ 348.394813][ T7026] vhci_hcd: release socket [ 348.399222][ T7026] vhci_hcd: disconnect device [ 348.629957][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 348.712194][T10172] FAT-fs (nullb0): bogus number of reserved sectors [ 348.719048][T10172] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 349.579263][ T6004] usb 1-1: string descriptor 0 read error: -71 [ 349.600364][ T6004] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.624821][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.673997][ T6004] usb 1-1: can't set config #1, error -71 [ 349.679823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 349.701529][ T6004] usb 1-1: USB disconnect, device number 28 [ 349.747731][ T43] libceph: connect (1)[c::]:6789 error -101 [ 349.770645][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 349.780837][ T43] libceph: connect (1)[c::]:6789 error -101 [ 349.798614][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 349.883066][T10184] ceph: No mds server is up or the cluster is laggy [ 349.918931][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 350.155140][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 350.199113][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 350.709872][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 350.900202][ T5930] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 351.642158][ T5930] usb 6-1: device descriptor read/64, error -71 [ 351.662527][ T30] audit: type=1400 audit(2000000040.690:571): avc: denied { write } for pid=10208 comm="syz.0.1105" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 351.749894][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 352.055292][ T5930] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 352.181445][T10224] kAFS: No cell specified [ 352.631756][ T5930] usb 6-1: device descriptor read/64, error -71 [ 352.767626][ T5930] usb usb6-port1: attempt power cycle [ 352.799868][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 352.953395][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 352.987829][T10237] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1112'. [ 353.070738][T10238] FAULT_INJECTION: forcing a failure. [ 353.070738][T10238] name failslab, interval 1, probability 0, space 0, times 0 [ 353.083492][T10238] CPU: 1 UID: 0 PID: 10238 Comm: syz.0.1110 Not tainted syzkaller #0 PREEMPT(full) [ 353.083514][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.083524][T10238] Call Trace: [ 353.083530][T10238] [ 353.083536][T10238] dump_stack_lvl+0x16c/0x1f0 [ 353.083562][T10238] should_fail_ex+0x512/0x640 [ 353.083583][T10238] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 353.083604][T10238] should_failslab+0xc2/0x120 [ 353.083624][T10238] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 353.083642][T10238] ? alloc_empty_file+0x55/0x1e0 [ 353.083669][T10238] alloc_empty_file+0x55/0x1e0 [ 353.083694][T10238] path_openat+0xda/0x2cb0 [ 353.083721][T10238] ? rcu_is_watching+0x12/0xc0 [ 353.083742][T10238] ? __pfx_path_openat+0x10/0x10 [ 353.083768][T10238] do_filp_open+0x20b/0x470 [ 353.083788][T10238] ? __pfx_do_filp_open+0x10/0x10 [ 353.083825][T10238] ? alloc_fd+0x471/0x7d0 [ 353.083851][T10238] do_sys_openat2+0x11b/0x1d0 [ 353.083874][T10238] ? __pfx_do_sys_openat2+0x10/0x10 [ 353.083898][T10238] ? __pfx___schedule+0x10/0x10 [ 353.083917][T10238] ? __fget_files+0x20e/0x3c0 [ 353.083933][T10238] ? fdget_pos+0x80/0x370 [ 353.083957][T10238] __x64_sys_openat+0x174/0x210 [ 353.083981][T10238] ? __pfx___x64_sys_openat+0x10/0x10 [ 353.084003][T10238] ? ksys_write+0x1ac/0x250 [ 353.084029][T10238] do_syscall_64+0xcd/0x4c0 [ 353.084053][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.084076][T10238] RIP: 0033:0x7f1860b8ebe9 [ 353.084090][T10238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.084106][T10238] RSP: 002b:00007f18619e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 353.084123][T10238] RAX: ffffffffffffffda RBX: 00007f1860dc6180 RCX: 00007f1860b8ebe9 [ 353.084133][T10238] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 353.084143][T10238] RBP: 00007f18619e1090 R08: 0000000000000000 R09: 0000000000000000 [ 353.084153][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.084162][T10238] R13: 00007f1860dc6218 R14: 00007f1860dc6180 R15: 00007ffd7d488b88 [ 353.084186][T10238] [ 353.301133][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.380056][ T5930] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 353.411851][ T5930] usb 6-1: device descriptor read/8, error -71 [ 353.429997][ T5921] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 353.632688][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'. [ 353.642477][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.662776][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.688501][ T5921] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 353.699415][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.812096][ T5921] usb 7-1: config 0 descriptor?? [ 353.829823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 354.304346][T10248] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1116'. [ 354.441094][ T5921] usbhid 7-1:0.0: can't add hid device: -71 [ 354.447084][ T5921] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 354.463871][ T5921] usb 7-1: USB disconnect, device number 10 [ 354.570560][T10263] veth1_macvtap: left promiscuous mode [ 354.582102][T10263] macsec0: entered promiscuous mode [ 354.601556][T10263] macsec0: entered allmulticast mode [ 354.639216][T10267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 354.644756][T10268] veth1_macvtap: entered promiscuous mode [ 354.671515][T10268] veth1_macvtap: entered allmulticast mode [ 354.691422][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 354.701719][T10268] macsec0: left promiscuous mode [ 354.706795][T10268] macsec0: left allmulticast mode [ 354.714631][T10268] veth1_macvtap: left allmulticast mode [ 354.869983][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.111108][ T5930] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 355.688887][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 355.707134][ T5930] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.715534][ T5930] usb 4-1: config 179 has no interface number 0 [ 355.748522][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 355.759743][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 355.777318][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.791617][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 355.832748][ T5930] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.847978][ T5930] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.857109][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.909938][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.922014][T10267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.950053][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 357.087237][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1131'. [ 357.100004][ T5851] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 357.260188][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 357.276371][ T5851] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 357.343438][T10312] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 357.353625][T10312] trusted_key: encrypted_key: insufficient parameters specified [ 357.566518][ T5851] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.624531][ T5851] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.633882][ T5851] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 357.644937][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.704329][ T5851] usb 1-1: config 0 descriptor?? [ 357.870999][ T5930] usb 4-1: USB disconnect, device number 27 [ 357.878069][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 357.886337][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 357.989942][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 358.186496][T10322] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1134'. [ 358.530781][ T30] audit: type=1400 audit(2000000047.680:572): avc: denied { append } for pid=10320 comm="syz.1.1136" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 358.560503][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.567481][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.580635][ T30] audit: type=1400 audit(2000000047.750:573): avc: denied { firmware_load } for pid=10315 comm="syz.5.1134" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 358.616795][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.623965][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.624875][ T30] audit: type=1400 audit(2000000048.070:574): avc: denied { execmem } for pid=10320 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 358.639979][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.668064][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.686670][T10329] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1135'. [ 358.751379][T10322] syz.5.1134 (10322) used greatest stack depth: 18984 bytes left [ 358.771018][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.777971][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.880779][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 358.909994][ T5851] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 359.029860][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 359.038914][ T5851] cherry 0003:046A:0027.0016: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.0-1/input0 [ 359.063841][T10334] tipc: Enabled bearer , priority 10 [ 359.072699][ T5913] IPVS: starting estimator thread 0... [ 359.134641][ T5851] usb 1-1: USB disconnect, device number 29 [ 359.170614][T10335] IPVS: using max 75 ests per chain, 180000 per kthread [ 359.267502][T10338] fido_id[10338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 359.697180][ T30] audit: type=1400 audit(2000000049.150:575): avc: denied { create } for pid=10344 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.907575][T10353] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 359.939894][T10353] trusted_key: encrypted_key: insufficient parameters specified [ 360.069814][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 360.215513][T10355] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 360.235598][T10355] trusted_key: encrypted_key: insufficient parameters specified [ 360.573067][T10360] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 360.588894][T10360] trusted_key: encrypted_key: insufficient parameters specified [ 360.961294][ T5844] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 360.972856][ T30] audit: type=1400 audit(2000000050.440:576): avc: denied { read } for pid=10362 comm="syz.5.1148" path="socket:[26590]" dev="sockfs" ino=26590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 361.017638][T10367] CUSE: info not properly terminated [ 361.047572][ T5913] IPVS: starting estimator thread 0... [ 361.054987][T10372] tipc: Started in network mode [ 361.109868][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 361.150147][T10373] IPVS: using max 43 ests per chain, 103200 per kthread [ 361.158379][T10372] tipc: Node identity ac1414aa, cluster identity 4711 [ 361.165822][T10372] tipc: Enabled bearer , priority 10 [ 361.255020][T10375] random: crng reseeded on system resumption [ 361.633164][ T30] audit: type=1400 audit(2000000051.100:577): avc: denied { setopt } for pid=10364 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 361.681253][ T6004] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 361.889918][ T6004] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 361.898038][ T6004] usb 4-1: config 1 has no interface number 0 [ 361.932968][ T6004] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 362.046587][ T6004] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 362.088857][ T6004] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid maxpacket 1983, setting to 1024 [ 362.102471][ T6004] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 362.119824][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.132684][ T6004] usb 4-1: Product: syz [ 362.136871][ T6004] usb 4-1: Manufacturer: syz [ 362.149985][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.170756][ T30] audit: type=1400 audit(2000000051.610:578): avc: denied { read } for pid=10386 comm="syz.1.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.221043][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1159'. [ 362.240111][ T6004] usb 4-1: SerialNumber: syz [ 362.280649][ T5949] tipc: Node number set to 2886997162 [ 362.397073][ T30] audit: type=1400 audit(2000000051.860:579): avc: denied { ioctl } for pid=10388 comm="syz.5.1159" path="socket:[27415]" dev="sockfs" ino=27415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.398179][T10367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.553168][T10367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.741742][T10367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.750920][ T6004] usb 4-1: Expected 3 endpoints, found: 2 [ 362.849204][T10399] FAULT_INJECTION: forcing a failure. [ 362.849204][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 362.861906][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.6.1160 Not tainted syzkaller #0 PREEMPT(full) [ 362.861928][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.861939][T10399] Call Trace: [ 362.861945][T10399] [ 362.861951][T10399] dump_stack_lvl+0x16c/0x1f0 [ 362.861978][T10399] should_fail_ex+0x512/0x640 [ 362.862003][T10399] ? fs_reclaim_acquire+0xae/0x150 [ 362.862028][T10399] ? tomoyo_encode2+0x100/0x3e0 [ 362.862052][T10399] should_failslab+0xc2/0x120 [ 362.862072][T10399] __kmalloc_noprof+0xd2/0x510 [ 362.862096][T10399] tomoyo_encode2+0x100/0x3e0 [ 362.862124][T10399] tomoyo_encode+0x29/0x50 [ 362.862148][T10399] tomoyo_realpath_from_path+0x18f/0x6e0 [ 362.862181][T10399] tomoyo_check_open_permission+0x2ab/0x3c0 [ 362.862205][T10399] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 362.862263][T10399] tomoyo_file_open+0x6b/0x90 [ 362.862283][T10399] security_file_open+0x84/0x1e0 [ 362.862310][T10399] do_dentry_open+0x596/0x1530 [ 362.862337][T10399] vfs_open+0x82/0x3f0 [ 362.862363][T10399] path_openat+0x1de4/0x2cb0 [ 362.862390][T10399] ? rcu_is_watching+0x12/0xc0 [ 362.862412][T10399] ? __pfx_path_openat+0x10/0x10 [ 362.862438][T10399] do_filp_open+0x20b/0x470 [ 362.862458][T10399] ? __pfx_do_filp_open+0x10/0x10 [ 362.862498][T10399] ? alloc_fd+0x471/0x7d0 [ 362.862525][T10399] do_sys_openat2+0x11b/0x1d0 [ 362.862547][T10399] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.862573][T10399] ? __fget_files+0x20e/0x3c0 [ 362.862596][T10399] __x64_sys_openat+0x174/0x210 [ 362.862620][T10399] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.862642][T10399] ? ksys_write+0x1ac/0x250 [ 362.862669][T10399] do_syscall_64+0xcd/0x4c0 [ 362.862701][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.862718][T10399] RIP: 0033:0x7f3c27f8ebe9 [ 362.862732][T10399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.862749][T10399] RSP: 002b:00007f3c28d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.862765][T10399] RAX: ffffffffffffffda RBX: 00007f3c281c6180 RCX: 00007f3c27f8ebe9 [ 362.862776][T10399] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 362.862787][T10399] RBP: 00007f3c28d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 362.862797][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.862807][T10399] R13: 00007f3c281c6218 R14: 00007f3c281c6180 R15: 00007ffe5c8033d8 [ 362.862832][T10399] [ 362.862934][T10399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.169597][ T5949] usb 4-1: USB disconnect, device number 28 [ 363.189861][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.254533][T10401] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 363.272802][T10401] trusted_key: encrypted_key: insufficient parameters specified [ 364.229851][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.334293][T10414] bridge3: entered promiscuous mode [ 364.339620][T10414] bridge3: entered allmulticast mode [ 364.841641][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 365.075860][T10421] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1164'. [ 365.118936][ T30] audit: type=1400 audit(2000000054.540:580): avc: denied { write } for pid=10409 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.189507][ T30] audit: type=1400 audit(2000000054.540:581): avc: denied { nlmsg_read } for pid=10409 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.269969][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 365.509845][ T5949] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 365.667236][ T5949] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 365.677199][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.702820][ T5949] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 365.710076][T10445] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 365.759987][T10445] trusted_key: encrypted_key: insufficient parameters specified [ 365.933935][ T5949] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 366.122033][T10448] tipc: Enabling of bearer rejected, already enabled [ 366.126037][ T5949] usb 7-1: Manufacturer: syz [ 366.140196][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 366.146087][ T5949] usb 7-1: config 0 descriptor?? [ 366.292498][ T5949] rc_core: IR keymap rc-hauppauge not found [ 366.298415][ T5949] Registered IR keymap rc-empty [ 366.306398][ T5949] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 366.316578][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.388993][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 366.562912][ T5949] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 366.733043][T10470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.750149][ T5949] usb 7-1: USB disconnect, device number 11 [ 367.037988][T10481] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 367.349896][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.389945][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.599540][T10513] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1193'. [ 368.609557][ T30] audit: type=1400 audit(2000000058.060:582): avc: denied { nlmsg_write } for pid=10512 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.636280][T10507] CUSE: unknown device info "" [ 368.643309][T10507] CUSE: zero length info key specified [ 368.644532][T10513] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10513 comm=syz.1.1193 [ 369.100132][ T5930] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 369.109151][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 369.280163][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 369.298539][ T5930] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 369.308620][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 369.352520][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.369166][ T5930] usb 2-1: Product: syz [ 369.373670][ T5930] usb 2-1: Manufacturer: syz [ 369.378594][ T5930] usb 2-1: SerialNumber: syz [ 369.429973][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.448857][T10529] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1196'. [ 369.503918][ T5930] usb 2-1: config 0 descriptor?? [ 369.730630][ T5930] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 370.469878][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 370.914470][ T5930] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 370.956804][ T5930] usb 2-1: USB disconnect, device number 27 [ 371.510106][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.770846][ T43] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 371.966452][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 372.084095][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 372.096719][ T43] usb 7-1: config 4 interface 0 has no altsetting 0 [ 372.549906][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.001560][T10587] blk_print_req_error: 11 callbacks suppressed [ 373.001572][T10587] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.111514][ T43] usb 7-1: string descriptor 0 read error: -22 [ 373.117800][ T43] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 373.149653][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.195070][ T43] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 373.207289][ T43] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.231261][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 373.256072][ T43] usb 7-1: media controller created [ 373.590013][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.618493][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.238945][T10607] block device autoloading is deprecated and will be removed. [ 374.247094][T10607] syz.6.1205: attempt to access beyond end of device [ 374.247094][T10607] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 374.629969][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 375.157418][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1219'. [ 375.239952][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 375.250535][ T30] audit: type=1400 audit(2000000064.690:583): avc: denied { accept } for pid=10618 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 375.335751][T10608] delete_channel: no stack [ 375.377227][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 375.669938][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.190390][ T30] audit: type=1400 audit(2000000065.630:584): avc: denied { setopt } for pid=10634 comm="syz.6.1222" lport=56649 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 376.570227][ T43] usb 7-1: USB disconnect, device number 12 [ 376.709987][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.906359][ T30] audit: type=1400 audit(2000000066.370:585): avc: denied { shutdown } for pid=10649 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 377.188412][T10653] input: syz0 as /devices/virtual/input/input26 [ 377.532985][T10657] fuse: Bad value for 'fd' [ 377.749932][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.351602][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.357922][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.789860][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.829876][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 380.869880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 381.909892][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.949851][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.989892][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 385.029878][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 386.069888][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.109849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 388.149863][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 389.189846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.229909][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.269849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 392.309874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.349848][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 394.389862][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.429851][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 396.469857][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.509839][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 398.549859][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 399.589852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.629891][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 401.669857][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 402.709858][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 403.749842][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 404.789851][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 405.829849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.869903][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.909885][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 408.949852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 409.989841][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 411.029853][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 412.069849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 413.109854][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.149839][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.189852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 416.229846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 417.269849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 418.309857][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.349852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 420.389830][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 421.429841][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 422.469834][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 423.509847][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.549836][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 425.589843][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 426.629837][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 427.669843][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 428.709823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 429.749880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 430.789829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 431.829841][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 432.869824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 433.909846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 434.949826][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 435.989843][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 437.029873][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 438.069840][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 439.109840][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 440.149843][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 441.189829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 442.229839][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 443.269827][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 444.309845][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 445.349820][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 446.389838][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 447.429823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 448.469835][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 449.509815][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 450.549841][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 451.589828][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 452.629840][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 453.669822][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 454.709836][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 455.749826][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 456.790121][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 457.829832][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 458.869882][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 459.909855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 460.949832][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 461.989849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 463.029874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.069853][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.109954][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 466.149818][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 467.189832][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 468.229819][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 469.269859][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 470.309831][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 471.349824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 472.389815][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 473.429827][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 474.469814][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 475.509826][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 476.549817][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 477.589827][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 478.629823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 479.669822][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 480.709812][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 481.749825][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 482.789841][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 483.379726][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 483.386685][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10652/1:b..l P10646/1:b..l P10632/1:b..l [ 483.397573][ C1] rcu: (detected by 1, t=10502 jiffies, g=34849, q=341 ncpus=2) [ 483.405273][ C1] task:syz.5.1221 state:R running task stack:26712 pid:10632 tgid:10629 ppid:7798 task_flags:0x40044c flags:0x00004002 [ 483.419225][ C1] Call Trace: [ 483.422498][ C1] [ 483.425420][ C1] __schedule+0x1190/0x5de0 [ 483.429927][ C1] ? arch_do_signal_or_restart+0x81/0x7d0 [ 483.435651][ C1] ? __pfx___schedule+0x10/0x10 [ 483.440488][ C1] ? exit_to_user_mode_loop+0x84/0x110 [ 483.445943][ C1] ? mark_held_locks+0x49/0x80 [ 483.450707][ C1] preempt_schedule_irq+0x51/0x90 [ 483.455720][ C1] irqentry_exit+0x36/0x90 [ 483.460124][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 483.466092][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 483.472322][ C1] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 483.491914][ C1] RSP: 0018:ffffc9000bc270a0 EFLAGS: 00000293 [ 483.497966][ C1] RAX: 0000000000000000 RBX: ffff88801e24f4a0 RCX: ffffffff822c097c [ 483.505924][ C1] RDX: ffff88802a954880 RSI: ffffffff822c0986 RDI: 0000000000000005 [ 483.513880][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 483.521836][ C1] R10: 00000000010802a5 R11: 0000000000000000 R12: 00000000010802a5 [ 483.529794][ C1] R13: 0000000000000001 R14: ffff88801e24f4a8 R15: 0000000000000000 [ 483.537760][ C1] ? __update_page_owner_free_handle.constprop.0+0x16c/0x4a0 [ 483.545120][ C1] ? __update_page_owner_free_handle.constprop.0+0x176/0x4a0 [ 483.552479][ C1] __update_page_owner_free_handle.constprop.0+0x176/0x4a0 [ 483.559670][ C1] __reset_page_owner+0x93/0x1a0 [ 483.564596][ C1] free_unref_folios+0xa61/0x16b0 [ 483.569614][ C1] ? mark_held_locks+0x49/0x80 [ 483.574372][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 483.580169][ C1] folios_put_refs+0x56f/0x740 [ 483.584927][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 483.590201][ C1] ? rcu_is_watching+0x12/0xc0 [ 483.594955][ C1] ? trace_mm_page_alloc+0x11f/0x1a0 [ 483.600235][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 483.605872][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 483.612056][ C1] ? __folio_rmap_sanity_checks+0x2cc/0x770 [ 483.617941][ C1] ? __pfx___might_resched+0x10/0x10 [ 483.623216][ C1] ? folio_remove_rmap_ptes+0x138/0x970 [ 483.628846][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 483.634823][ C1] ? find_held_lock+0x2b/0x80 [ 483.639494][ C1] tlb_flush_mmu+0xe9/0x5a0 [ 483.643993][ C1] unmap_page_range+0x1f43/0x42c0 [ 483.649029][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 483.654390][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 483.659322][ C1] ? uprobe_munmap+0x20/0x5c0 [ 483.663991][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 483.669890][ C1] unmap_vmas+0x218/0x470 [ 483.674224][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 483.679086][ C1] exit_mmap+0x1b9/0xb90 [ 483.683329][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 483.688096][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 483.693053][ C1] __mmput+0x12a/0x410 [ 483.697121][ C1] mmput+0x62/0x70 [ 483.700835][ C1] do_exit+0x7c7/0x2bf0 [ 483.704984][ C1] ? __pfx___might_resched+0x10/0x10 [ 483.710267][ C1] ? __pfx_do_exit+0x10/0x10 [ 483.714853][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 483.719865][ C1] ? find_held_lock+0x2b/0x80 [ 483.724539][ C1] do_group_exit+0xd3/0x2a0 [ 483.729036][ C1] get_signal+0x2673/0x26d0 [ 483.733532][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 483.738464][ C1] ? __pfx_get_signal+0x10/0x10 [ 483.743311][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 483.748852][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 483.755003][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 483.760549][ C1] exit_to_user_mode_loop+0x84/0x110 [ 483.765822][ C1] do_syscall_64+0x3f6/0x4c0 [ 483.770406][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.776286][ C1] RIP: 0033:0x7f4c8bf8ebe9 [ 483.780688][ C1] RSP: 002b:00007f4c8cd86038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 483.789085][ C1] RAX: 0000000000010106 RBX: 00007f4c8c1c6090 RCX: 00007f4c8bf8ebe9 [ 483.797041][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 483.804996][ C1] RBP: 00007f4c8c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 483.812953][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 483.820907][ C1] R13: 00007f4c8c1c6128 R14: 00007f4c8c1c6090 R15: 00007fff9b30bb98 [ 483.828876][ C1] [ 483.831880][ C1] task:syz.6.1226 state:R running task stack:24648 pid:10646 tgid:10646 ppid:8617 task_flags:0x40004c flags:0x00004000 [ 483.845355][ C1] Call Trace: [ 483.848624][ C1] [ 483.851545][ C1] __schedule+0x1190/0x5de0 [ 483.856043][ C1] ? find_held_lock+0x2b/0x80 [ 483.860722][ C1] ? mark_held_locks+0x49/0x80 [ 483.865505][ C1] ? __pfx___schedule+0x10/0x10 [ 483.870369][ C1] ? rcu_is_watching+0x12/0xc0 [ 483.875142][ C1] ? mark_held_locks+0x49/0x80 [ 483.879906][ C1] preempt_schedule_irq+0x51/0x90 [ 483.884923][ C1] irqentry_exit+0x36/0x90 [ 483.889331][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 483.894778][ C1] RIP: 0010:write_comp_data+0x42/0x90 [ 483.900139][ C1] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 3c 16 00 00 85 c0 74 4f 8b 82 18 16 00 00 <83> f8 03 75 44 48 8b 82 20 16 00 00 8b 92 1c 16 00 00 48 8b 38 48 [ 483.919754][ C1] RSP: 0018:ffffc90004ed7748 EFLAGS: 00000246 [ 483.925828][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff820d8f64 [ 483.933793][ C1] RDX: ffff88802a194880 RSI: 0000000000000000 RDI: 0000000000000001 [ 483.941753][ C1] RBP: 000000110c2cf000 R08: 0000000000000001 R09: 0000000000000000 [ 483.949717][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90004ed77b8 [ 483.957680][ C1] R13: ffff888067bb2308 R14: ffffc90004ed7978 R15: 000000110c2cf000 [ 483.965659][ C1] ? ___pte_offset_map+0x2d4/0x4f0 [ 483.970774][ C1] ___pte_offset_map+0x2d4/0x4f0 [ 483.975704][ C1] __pte_offset_map_lock+0x8d/0x310 [ 483.980895][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 483.986690][ C1] ? find_held_lock+0x2b/0x80 [ 483.991367][ C1] ? __pfx___might_resched+0x10/0x10 [ 483.996658][ C1] ? unmap_page_range+0x1f12/0x42c0 [ 484.001857][ C1] unmap_page_range+0xacf/0x42c0 [ 484.006811][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 484.012189][ C1] ? uprobe_munmap+0x20/0x5c0 [ 484.016866][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 484.022759][ C1] unmap_vmas+0x218/0x470 [ 484.027088][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 484.031948][ C1] exit_mmap+0x1b9/0xb90 [ 484.036187][ C1] ? trace_contention_end+0xdd/0x130 [ 484.041470][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 484.046260][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 484.051225][ C1] __mmput+0x12a/0x410 [ 484.055288][ C1] mmput+0x62/0x70 [ 484.059002][ C1] do_exit+0x7c7/0x2bf0 [ 484.063157][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.068361][ C1] ? __pfx_do_exit+0x10/0x10 [ 484.072950][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 484.078322][ C1] do_group_exit+0xd3/0x2a0 [ 484.082825][ C1] __x64_sys_exit_group+0x3e/0x50 [ 484.087842][ C1] x64_sys_call+0x14fa/0x1720 [ 484.092508][ C1] do_syscall_64+0xcd/0x4c0 [ 484.097005][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.102882][ C1] RIP: 0033:0x7f3c27f8ebe9 [ 484.107282][ C1] RSP: 002b:00007ffe5c803738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 484.115679][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c27f8ebe9 [ 484.123634][ C1] RDX: 00007f3c271f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.131595][ C1] RBP: 00007ffe5c80379c R08: 0000001d5c80382f R09: 00000000000927c0 [ 484.139551][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000060 [ 484.147504][ C1] R13: 00000000000927c0 R14: 000000000005bfc0 R15: 00007ffe5c8037f0 [ 484.155470][ C1] [ 484.158472][ C1] task:syz.1.1225 state:R running task stack:27400 pid:10652 tgid:10645 ppid:5842 task_flags:0x400040 flags:0x00004002 [ 484.171945][ C1] Call Trace: [ 484.175209][ C1] [ 484.178124][ C1] __schedule+0x1190/0x5de0 [ 484.182617][ C1] ? rcu_is_watching+0x12/0xc0 [ 484.187379][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 484.192315][ C1] ? __pfx___schedule+0x10/0x10 [ 484.197154][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 484.202087][ C1] ? mark_held_locks+0x49/0x80 [ 484.206847][ C1] preempt_schedule_irq+0x51/0x90 [ 484.211858][ C1] irqentry_exit+0x36/0x90 [ 484.216262][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 484.221709][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 484.227076][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 9b ce 94 f5 cc [ 484.246665][ C1] RSP: 0018:ffffc9000bbc6fc0 EFLAGS: 00000202 [ 484.252715][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c1260 RCX: 0000000000000002 [ 484.260668][ C1] RDX: 0000000000000000 RSI: ffffffff816ae581 RDI: fffffbfff1cb824c [ 484.268625][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 484.276586][ C1] R10: 0000000000000001 R11: 0000000000012bea R12: 0000000000000000 [ 484.284538][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.292497][ C1] ? unwind_next_frame+0xd1/0x20a0 [ 484.297599][ C1] lock_acquire+0xfc/0x350 [ 484.302014][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 484.307206][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.313353][ C1] unwind_next_frame+0xd1/0x20a0 [ 484.318274][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 484.323370][ C1] ? __set_page_owner+0x91/0x550 [ 484.328294][ C1] ? do_syscall_64+0xcd/0x4c0 [ 484.332957][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.339100][ C1] arch_stack_walk+0x94/0x100 [ 484.343767][ C1] ? __set_page_owner+0x91/0x550 [ 484.348694][ C1] stack_trace_save+0x8e/0xc0 [ 484.353359][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 484.358725][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 484.363664][ C1] save_stack+0x160/0x1f0 [ 484.367979][ C1] ? __pfx_save_stack+0x10/0x10 [ 484.372824][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 484.377760][ C1] __set_page_owner+0x91/0x550 [ 484.382514][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 484.387872][ C1] ? bad_range+0x261/0x4c0 [ 484.392278][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.397469][ C1] post_alloc_hook+0x1c0/0x230 [ 484.402229][ C1] get_page_from_freelist+0x132b/0x38e0 [ 484.407769][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 484.413043][ C1] ? rcu_is_watching+0x12/0xc0 [ 484.417797][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 484.423675][ C1] ? kasan_save_stack+0x42/0x60 [ 484.428511][ C1] ? kasan_save_stack+0x33/0x60 [ 484.433346][ C1] ? kasan_save_track+0x14/0x30 [ 484.438179][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 484.443188][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 484.448809][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 484.453741][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 484.460062][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 484.465000][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.470883][ C1] ? policy_nodemask+0xea/0x4e0 [ 484.475723][ C1] alloc_pages_mpol+0x1fb/0x550 [ 484.480564][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 484.485924][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 484.490854][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 484.496215][ C1] vma_alloc_folio_noprof+0xed/0x1e0 [ 484.501490][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 484.507382][ C1] do_pte_missing+0x2230/0x3ba0 [ 484.512229][ C1] ? find_held_lock+0x2b/0x80 [ 484.516904][ C1] __handle_mm_fault+0x152a/0x2a50 [ 484.522014][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 484.527469][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 484.532915][ C1] ? find_held_lock+0x2b/0x80 [ 484.537590][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 484.543656][ C1] handle_mm_fault+0x589/0xd10 [ 484.548420][ C1] __get_user_pages+0x551/0x34a0 [ 484.553355][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 484.558725][ C1] populate_vma_page_range+0x267/0x3f0 [ 484.564174][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 484.570141][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 484.575935][ C1] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 484.581647][ C1] __mm_populate+0x1d8/0x380 [ 484.586233][ C1] ? __pfx___mm_populate+0x10/0x10 [ 484.591338][ C1] ? up_write+0x1b2/0x520 [ 484.595662][ C1] do_mlock+0x448/0x810 [ 484.599805][ C1] ? __pfx_do_mlock+0x10/0x10 [ 484.604464][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 484.609392][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 484.614320][ C1] ? __pfx___x64_sys_sched_setattr+0x10/0x10 [ 484.620292][ C1] ? xfd_validate_state+0x61/0x180 [ 484.625404][ C1] __x64_sys_mlock+0x59/0x80 [ 484.629979][ C1] do_syscall_64+0xcd/0x4c0 [ 484.634475][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.640354][ C1] RIP: 0033:0x7fc28178ebe9 [ 484.644754][ C1] RSP: 002b:00007fc2825aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 484.653149][ C1] RAX: ffffffffffffffda RBX: 00007fc2819c6090 RCX: 00007fc28178ebe9 [ 484.661106][ C1] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 484.669062][ C1] RBP: 00007fc281811e19 R08: 0000000000000000 R09: 0000000000000000 [ 484.677017][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.684970][ C1] R13: 00007fc2819c6128 R14: 00007fc2819c6090 R15: 00007fffb3d2de38 [ 484.692957][ C1] [ 484.695970][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10632 jiffies! g34849 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 484.708285][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=27166 [ 484.716160][ C1] rcu: rcu_preempt kthread starved for 10633 jiffies! g34849 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 484.727508][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 484.737457][ C1] rcu: RCU grace-period kthread stack dump: [ 484.743321][ C1] task:rcu_preempt state:I stack:29048 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 484.755227][ C1] Call Trace: [ 484.758491][ C1] [ 484.761410][ C1] __schedule+0x1190/0x5de0 [ 484.765923][ C1] ? __pfx___schedule+0x10/0x10 [ 484.770764][ C1] ? find_held_lock+0x2b/0x80 [ 484.775429][ C1] ? schedule+0x2d7/0x3a0 [ 484.779748][ C1] schedule+0xe7/0x3a0 [ 484.783803][ C1] schedule_timeout+0x123/0x290 [ 484.788639][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 484.793999][ C1] ? __pfx_process_timeout+0x10/0x10 [ 484.799278][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 484.805067][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 484.810521][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 484.815272][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 484.820545][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.825731][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 484.830652][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 484.835494][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 484.841288][ C1] rcu_gp_kthread+0x270/0x380 [ 484.845948][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 484.851127][ C1] ? rcu_is_watching+0x12/0xc0 [ 484.855878][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.861070][ C1] ? __kthread_parkme+0x19e/0x250 [ 484.866091][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 484.871273][ C1] kthread+0x3c2/0x780 [ 484.875327][ C1] ? __pfx_kthread+0x10/0x10 [ 484.879904][ C1] ? rcu_is_watching+0x12/0xc0 [ 484.884663][ C1] ? __pfx_kthread+0x10/0x10 [ 484.889241][ C1] ret_from_fork+0x5d4/0x6f0 [ 484.893814][ C1] ? __pfx_kthread+0x10/0x10 [ 484.898388][ C1] ret_from_fork_asm+0x1a/0x30 [ 484.903149][ C1] [ 484.906409][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 484.912708][ C1] Sending NMI from CPU 1 to CPUs 0: [ 484.917896][ C0] NMI backtrace for cpu 0 [ 484.917906][ C0] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 484.917921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.917928][ C0] RIP: 0010:rcu_is_watching+0x55/0xc0 [ 484.917945][ C0] Code: 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed 60 0e f6 8d 48 b8 00 00 00 00 00 fc ff df <48> 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 [ 484.917957][ C0] RSP: 0018:ffffc9000487f8e8 EFLAGS: 00000083 [ 484.917968][ C0] RAX: dffffc0000000000 RBX: ffff8880b84332a8 RCX: 0000000000000000 [ 484.917976][ C0] RDX: 1ffffffff1bec1cc RSI: ffffffff8c162d00 RDI: ffffffff8df60e60 [ 484.917985][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 484.917992][ C0] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000001 [ 484.918000][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.918008][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 484.918021][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.918030][ C0] CR2: 0000000000000000 CR3: 000000005b3ff000 CR4: 00000000003526f0 [ 484.918038][ C0] Call Trace: [ 484.918042][ C0] [ 484.918047][ C0] lock_acquire+0x2cd/0x350 [ 484.918066][ C0] ? mark_held_locks+0x49/0x80 [ 484.918085][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 484.918098][ C0] ? uart_write+0x13b/0xb30 [ 484.918113][ C0] uart_write+0x13b/0xb30 [ 484.918128][ C0] ? __pfx_uart_write_room+0x10/0x10 [ 484.918142][ C0] handle_tx+0x204/0x630 [ 484.918157][ C0] dev_hard_start_xmit+0x94/0x740 [ 484.918172][ C0] __dev_queue_xmit+0xa46/0x4490 [ 484.918186][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.918200][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 484.918216][ C0] ? rcu_is_watching+0x12/0xc0 [ 484.918231][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 484.918242][ C0] ? __schedule+0x11a3/0x5de0 [ 484.918256][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 484.918277][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 484.918290][ C0] ? find_held_lock+0x2b/0x80 [ 484.918304][ C0] ? skb_dequeue+0x126/0x180 [ 484.918321][ C0] ? find_held_lock+0x2b/0x80 [ 484.918336][ C0] ? rcu_is_watching+0x12/0xc0 [ 484.918351][ C0] tx+0xcc/0x190 [ 484.918365][ C0] ? __pfx_tx+0x10/0x10 [ 484.918378][ C0] kthread+0x1e4/0x3e0 [ 484.918390][ C0] ? find_held_lock+0x2b/0x80 [ 484.918403][ C0] ? __pfx_kthread+0x10/0x10 [ 484.918415][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 484.918430][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.918445][ C0] ? __kthread_parkme+0x19e/0x250 [ 484.918462][ C0] ? __pfx_kthread+0x10/0x10 [ 484.918473][ C0] kthread+0x3c2/0x780 [ 484.918484][ C0] ? __pfx_kthread+0x10/0x10 [ 484.918496][ C0] ? rcu_is_watching+0x12/0xc0 [ 484.918510][ C0] ? __pfx_kthread+0x10/0x10 [ 484.918523][ C0] ret_from_fork+0x5d4/0x6f0 [ 484.918534][ C0] ? __pfx_kthread+0x10/0x10 [ 484.918546][ C0] ret_from_fork_asm+0x1a/0x30 [ 484.918564][ C0] [ 485.215723][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 486.229837][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 487.270067][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 488.309848][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 489.350081][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 490.389841][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 491.430092][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 492.469851][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available