last executing test programs: 18m23.270581495s ago: executing program 32 (id=17145): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 13m44.543830124s ago: executing program 33 (id=20853): openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}], 0x1, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 12m44.625928225s ago: executing program 34 (id=21628): r0 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x801) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m33.60532355s ago: executing program 35 (id=22898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x28000600) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 10m1.489744767s ago: executing program 36 (id=23318): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 9m40.793106078s ago: executing program 37 (id=23547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x48, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x85, 0xe6d65e2c16ddbb6c, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x33, 0x3}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x2, 0x4, 0x4, [0x1, 0x2, 0x2, 0x0, 0x2]}, @processing_unit={0xb, 0x24, 0x8, 0x3, 0x1, [0x3, 0x1, 0x2]}, @multiply_unit={0x7, 0x24, 0xc, 0x1, 0x7, 0x8, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0xa3, 0x8, "d5e303d4b47f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x1, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x0, 0x28, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x10, 0x8000}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 8m32.200567031s ago: executing program 9 (id=24306): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xd6b, &(0x7f0000000040)={0x0, 0x3bd0, 0xc000, 0x8, 0xc5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6a9e, 0x7721, 0x16, 0x0, 0x0) 8m32.08168574s ago: executing program 9 (id=24307): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800"], 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000110008000e00000000ff", 0x24) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0xfffffffd, 0x5}, 0x0, {}, 0x67, 0x2}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) 8m32.006288861s ago: executing program 9 (id=24310): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002cc0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000280)={0x1, r2}) 8m31.943646177s ago: executing program 9 (id=24312): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 8m31.876241467s ago: executing program 9 (id=24314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x6, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x3ff, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0xfffffffd, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x1, 0x7f, 0xa, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x1, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x5d, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda57, 0x7ffffffe, 0x80, 0x2f0cb955, 0x10000007, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x292, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0xfffffffd, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x61e5, 0xffffffff, 0xfff, 0xff, 0x5, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0xe, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x5289, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf4, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0x2a0c009b, 0x16, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0xf, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x72d3, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x10009, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x6, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x0, 0x400, 0x100000, 0x2, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x5, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x8000, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x20000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x7e, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x4, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400000, 0x3, 0x6, 0x8, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x9, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4000004, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x4000009, 0xfff, 0xf, 0x3, 0x9, 0xa, 0x1000007, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x4, 0x2, 0x8, {0x5, 0x0, 0x2, 0x1, 0x5f5, 0x3ff}, {0xa, 0x2, 0xb233, 0x9, 0x8, 0xfffffff9}, 0xff, 0x9ef, 0x1000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8m31.771495373s ago: executing program 9 (id=24317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2ea31}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m31.533979599s ago: executing program 38 (id=24317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2ea31}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m0.129449141s ago: executing program 8 (id=24629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd21, 0xfd40, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/161, 0xa1, 0x1, 0x2c}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 8m0.062602977s ago: executing program 8 (id=24631): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) memfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 7m59.094470579s ago: executing program 8 (id=24639): socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m58.879425865s ago: executing program 8 (id=24642): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m58.709891918s ago: executing program 8 (id=24644): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000380), 0x0) 7m58.531080733s ago: executing program 8 (id=24647): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0x8, 0x6f}) 7m58.318365306s ago: executing program 39 (id=24647): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0x8, 0x6f}) 7m31.811925329s ago: executing program 4 (id=24928): socket$kcm(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) socket$igmp(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x6c, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x2, 0xf, @loopback, @loopback, {[@generic={0x86, 0x5, "c80842"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0xf3, 0x3, 0x8}, @cipso={0x86, 0x1c, 0xfffffffffffffffe, [{0x0, 0x4, "0612"}, {0x7, 0xf, "c43e8c34f8ca4be4cdb6364607"}, {0x1, 0x3, '`'}]}]}}}}}}}}, 0x6e) 7m31.738200078s ago: executing program 4 (id=24931): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x40f, 0x801) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000001d00)=""/168, 0x0, 0x5000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_usbip_server_init(0x6) 7m30.940198747s ago: executing program 4 (id=24940): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x1) 7m29.765848328s ago: executing program 4 (id=24953): ptrace(0x10, 0x0) ptrace$setregs(0xf, 0x0, 0x40, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 7m29.535107636s ago: executing program 4 (id=24956): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 7m29.221520343s ago: executing program 4 (id=24958): socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) 7m28.800564371s ago: executing program 40 (id=24958): socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) 6m47.520230058s ago: executing program 0 (id=25250): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6m47.321313756s ago: executing program 0 (id=25253): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) sigaltstack(&(0x7f0000001000)={&(0x7f0000002100)=""/4114, 0x1, 0xdf01}, 0x0) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 6m46.200342444s ago: executing program 0 (id=25263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6m46.066420459s ago: executing program 0 (id=25264): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa10c4, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m45.851510526s ago: executing program 0 (id=25266): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 6m45.012058364s ago: executing program 0 (id=25268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 6m44.712561719s ago: executing program 41 (id=25268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.611204632s ago: executing program 6 (id=26924): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) pipe2(0x0, 0x800) socket(0x2a, 0x2, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0x3, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3m1.006744329s ago: executing program 6 (id=26927): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x74, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000004c0)={r2, 0x0, 0x9, 0x7, 0x4, 0x4, [0x4, 0x6, 0x7, 0xb, 0x6, 0x1]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040800) 3m0.934765783s ago: executing program 6 (id=26928): socket$inet6(0xa, 0x3, 0xff) r0 = dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0)) listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x1ce) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, r0, 0x4000) fcntl$notify(r4, 0x402, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) 3m0.189219954s ago: executing program 6 (id=26933): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgid(r0) prlimit64(r1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2020) 2m59.195355384s ago: executing program 6 (id=26937): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, 0x0, 0x44014) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m58.216411917s ago: executing program 6 (id=26940): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xfffd, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x41}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m43.101906745s ago: executing program 42 (id=26940): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xfffd, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x41}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.632029017s ago: executing program 3 (id=27872): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x0, 0x2c, 0x1, @empty, @mcast2}}}}, 0x0) socket(0x11, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143480) io_submit(0x0, 0x1, &(0x7f0000000640)=[0x0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) 7.377681364s ago: executing program 3 (id=27874): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="e6fc18237af3c687066a3f7d811c5bec0a224c35d65c26b1dafee80a1840241b704deecfa2b4436a28cbf00dae8ff63a4e13fd544096e6a65fd0b4c6cc8f7f0ca52468ff3dfafa712d779fcbee691dc1f9ce8c1c9f72f7cb07e21491178c090de58e520385959e58da9ad6ddb82d76334de2845057d7cca5a40f9a1316347b650e173693d3cd6f6e270679ef3dd41b861950b957fc50a780f9d765666f1eeb68ca614e6e5d00ea4ed35c04c5e894533720a56e2446bbab8add35494bf34d7e35f3ff3d95e926ddc29049c8e8b48b9c9fb25b44059799cbac28528e9955b25e06ec79cda0ce064e844d38fad9309053b664222d60", 0xf4}, {&(0x7f0000000580)="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", 0xfa}, {&(0x7f0000000680)="2937d172348dd1c81af29b16266dfdcc34510294247f26d6f60207acdba9f3b18e7fb4310b3e0aa72ee87690653ba9b5e0b099c607de548969f2ca4b3ca51f", 0x3f}, {&(0x7f0000000700)}, {&(0x7f0000000740)="34ee1af5bd1b16cdb719d0c51765b3c789beeb957f6fcb472d131a8caa84ab506b7080a984646d260b6db1e579b935bcbc651f7cf1477ad114f5487597eaf9877a8bbe121567", 0x46}], 0x8, 0x0, 0x0, 0x4000}}], 0x1, 0x20004800) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000180)="6aeb2e944fed358609596fe6d41d658a1a7e8c3950679fbcdf0a593c620964e0a2e9a2d8a8627fb6e0bbb009cf7de8a46475cca883b195d48dc7d395ec22cc844a", 0x41, 0xd}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000880)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84", 0x7a}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1", 0xce}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4", 0x96}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a382652416788", 0xba}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.308011947s ago: executing program 3 (id=27875): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 7.284715333s ago: executing program 5 (id=27876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}}, 0x15) 5.890527571s ago: executing program 2 (id=27880): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4, 0x5, 0x8}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r2, 0x6}, 0x8) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.808386605s ago: executing program 2 (id=27881): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.574235134s ago: executing program 3 (id=27883): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892f", 0x13}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992", 0x5d}], 0x5}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x2000888c}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.372734284s ago: executing program 5 (id=27884): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x8880) socket$rxrpc(0x21, 0x2, 0x2) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) socket(0x2c, 0x5, 0x0) fsopen(&(0x7f0000000000)='smb3\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) inotify_init1(0x80000) socket(0x2, 0xa, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 5.370533572s ago: executing program 3 (id=27885): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000002c0)={0x0, 0x1, 0x25, "8e1b6ec8a2195d042a87f93e2190c80e29d26f1088d376c4299af39b41684208", 0xb5315241}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a0800"], 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00') fchdir(r4) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000100)) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010102, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.200436181s ago: executing program 1 (id=27886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) socket$inet(0x2, 0x80001, 0x84) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 5.100892182s ago: executing program 1 (id=27887): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 4.974294066s ago: executing program 2 (id=27888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x41) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.70405099s ago: executing program 2 (id=27889): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x0) unshare(0x6020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 4.382957652s ago: executing program 3 (id=27891): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 4.078308694s ago: executing program 7 (id=27893): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socket$kcm(0x2, 0xa, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.854262166s ago: executing program 5 (id=27894): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$dri(0x0, 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0xcab8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc040564a, 0x0) msgsnd(0x0, 0x0, 0xff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000100)=""/183) 3.823611526s ago: executing program 7 (id=27895): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f6847", 0x5a, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.625978197s ago: executing program 7 (id=27896): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x2200) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007f167"], 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.416265331s ago: executing program 1 (id=27897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10100, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/139, 0x8b}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) 2.172999068s ago: executing program 1 (id=27898): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.169519094s ago: executing program 5 (id=27899): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.82351731s ago: executing program 5 (id=27900): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) fsopen(&(0x7f0000000740)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$P9_RRENAME(r2, &(0x7f00000005c0)={0x7, 0x15, 0x1}, 0x34000) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 1.612959318s ago: executing program 2 (id=27901): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8040480) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000004) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0xa, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 1.597677417s ago: executing program 5 (id=27902): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x100000}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x100, @loopback, 0x3}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) 620.13435ms ago: executing program 1 (id=27903): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4, 0x5, 0x8}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r2, 0x6}, 0x8) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 396.183435ms ago: executing program 7 (id=27904): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0xff) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20) 275.364765ms ago: executing program 7 (id=27905): mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x9031, 0xffffffffffffffff, 0x8000000) r0 = userfaultfd(0x80001) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1, 0x1000000000ff01}) socket$igmp6(0xa, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="ce37ffffffffffffaaaaaaaaaa0008004503005e00000000002f9000020000b09a7f49100008000bdc000086dd080088be00000000100000000100000000000000080022eb00000001200000000200000000000000fffd00000800655800"/110], 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f00000002c0)) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB], 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0xf, 0x7, 0x1, 0x0, 0xa]}, &(0x7f0000000380)=0x78) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)={0x1, 0x0, [{0xd000, 0x8f, &(0x7f00000000c0)=""/143}]}) 130.187872ms ago: executing program 7 (id=27906): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c99", 0x3c}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 110.333368ms ago: executing program 2 (id=27907): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 0s ago: executing program 1 (id=27908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0xa00, 0x0, 0x0, 0x0, 0x51}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) kernel console output (not intermixed with test programs): us mode [ 1834.268833][ T6198] hsr_slave_1: left promiscuous mode [ 1834.904589][ T5699] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 1835.124556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1835.144673][ T5699] gspca_sq930x: Sensor ov9630 not yet treated [ 1835.159065][ T5699] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 1835.266510][ T5699] usb 2-1: USB disconnect, device number 33 [ 1835.917040][ T6214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.164543][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1836.361248][ T6233] bond0: entered allmulticast mode [ 1836.417800][ T6233] veth15: entered allmulticast mode [ 1836.598844][ T6242] input: syz0 as /devices/virtual/input/input329 [ 1837.214538][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1837.330990][ T6257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1837.692024][ T6268] binder: 6267:6268 ioctl c0306201 0 returned -14 [ 1837.699711][ T6268] binder: 6267:6268 ioctl c0306201 0 returned -14 [ 1837.845031][ T4963] usb 48-1: device descriptor read/8, error -110 [ 1838.037449][ T6279] veth11: entered allmulticast mode [ 1838.244527][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1838.252549][ T4963] usb usb48-port1: attempt power cycle [ 1838.815241][ T4963] usb usb48-port1: unable to enumerate USB device [ 1839.284520][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1840.334522][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1840.665160][ T6325] veth15: entered allmulticast mode [ 1840.738632][ T6329] netlink: 68 bytes leftover after parsing attributes in process `syz.5.27130'. [ 1841.076812][ T6337] netlink: 144 bytes leftover after parsing attributes in process `syz.5.27132'. [ 1841.161166][ T6341] tipc: Started in network mode [ 1841.177541][ T6341] tipc: Node identity 829641f1b1d, cluster identity 4711 [ 1841.199534][ T6341] tipc: Enabled bearer , priority 0 [ 1841.218395][ T6344] syzkaller0: entered promiscuous mode [ 1841.228381][ T6343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1841.240137][ T6344] syzkaller0: entered allmulticast mode [ 1841.253941][ T6343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1841.274098][ T6346] tipc: Failed to remove unknown binding: 66,1,1/2099199:1536536302/1536536304 [ 1841.276508][ T6341] sch_tbf: burst 122 is lower than device syzkaller0 mtu (1514) ! [ 1841.303545][ T6341] tipc: Resetting bearer [ 1841.317566][ T6340] tipc: Resetting bearer [ 1841.325813][ T6340] tipc: Disabling bearer [ 1841.364522][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1841.434502][ T4963] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1841.597725][ T4963] usb 2-1: Using ep0 maxpacket: 16 [ 1841.619188][ T4963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1841.633865][ T4963] usb 2-1: can't read configurations, error -61 [ 1841.774537][ T4963] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1841.934530][ T4963] usb 2-1: Using ep0 maxpacket: 16 [ 1841.948991][ T6356] syzkaller0: entered promiscuous mode [ 1841.955270][ T6356] syzkaller0: entered allmulticast mode [ 1841.965475][ T4963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1841.975905][ T4963] usb 2-1: can't read configurations, error -61 [ 1841.982668][ T4963] usb usb2-port1: attempt power cycle [ 1842.173944][ T6365] 8021q: VLANs not supported on nlmon0 [ 1842.335380][ T4963] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1842.375243][ T4963] usb 2-1: Using ep0 maxpacket: 16 [ 1842.387729][ T4963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1842.399310][ T4963] usb 2-1: can't read configurations, error -61 [ 1842.405790][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1842.442403][ T6360] syzkaller1: entered promiscuous mode [ 1842.454468][ T6360] syzkaller1: entered allmulticast mode [ 1842.554507][ T4963] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1842.577935][ T4963] usb 2-1: Using ep0 maxpacket: 16 [ 1842.587940][ T4963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1842.603890][ T4963] usb 2-1: can't read configurations, error -61 [ 1842.622136][ T4963] usb usb2-port1: unable to enumerate USB device [ 1842.768640][ T6384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.27151'. [ 1843.014473][ T4976] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1843.045295][ T3803] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1843.174577][ T4976] usb 3-1: Using ep0 maxpacket: 16 [ 1843.188236][ T4976] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1843.198723][ T3803] usb 6-1: Using ep0 maxpacket: 8 [ 1843.203800][ T4976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.212097][ T4976] usb 3-1: Product: syz [ 1843.218026][ T4976] usb 3-1: Manufacturer: syz [ 1843.222714][ T3803] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1843.233981][ T3803] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1843.243234][ T4976] usb 3-1: SerialNumber: syz [ 1843.247967][ T3803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.259990][ T4976] usb 3-1: config 0 descriptor?? [ 1843.265398][ T3803] usb 6-1: Product: syz [ 1843.269788][ T3803] usb 6-1: Manufacturer: syz [ 1843.274568][ T3803] usb 6-1: SerialNumber: syz [ 1843.283783][ T3803] usb 6-1: config 0 descriptor?? [ 1843.291980][ T3803] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1843.444533][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1843.483673][ T4976] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1843.504232][ T4976] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1843.515895][ T4976] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 89) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1843.515895][ T4976] Please send a copy of this message to and [ 1843.572358][ T6395] bond16: entered allmulticast mode [ 1843.610179][ T4976] usb 3-1: USB disconnect, device number 34 [ 1843.682891][ T6400] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1843.708246][ T3805] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1843.818254][ T4976] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1844.457420][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27163'. [ 1844.484596][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1845.511981][ T6443] syzkaller0: entered promiscuous mode [ 1845.520583][ T6443] syzkaller0: entered allmulticast mode [ 1845.526458][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1845.570640][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.7.27175'. [ 1845.584851][ T6445] openvswitch: netlink: Flow actions attr not present in new flow. [ 1845.618435][ T6445] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1845.640619][ T6445] bond2 (unregistering): Released all slaves [ 1845.720107][ T6450] syzkaller0: entered promiscuous mode [ 1845.725833][ T6450] syzkaller0: entered allmulticast mode [ 1845.736926][ T6450] tipc: Enabled bearer , priority 0 [ 1845.754092][ T6450] tipc: Resetting bearer [ 1845.765685][ T6449] tipc: Resetting bearer [ 1845.783592][ T6449] tipc: Disabling bearer [ 1845.912589][ T5699] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1846.022436][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1846.022456][ T30] audit: type=1326 audit(1781674097.393:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.063447][ T30] audit: type=1326 audit(1781674097.393:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.088068][ T30] audit: type=1326 audit(1781674097.433:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.103295][ T5699] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1846.167789][ T30] audit: type=1326 audit(1781674097.433:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.175367][ T5699] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1846.253657][ T30] audit: type=1326 audit(1781674097.433:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.264774][ T5699] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1846.319810][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.344319][ T6448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1846.363012][ T30] audit: type=1326 audit(1781674097.493:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.401999][ T5699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1846.437642][ T30] audit: type=1326 audit(1781674097.493:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.509930][ T30] audit: type=1326 audit(1781674097.503:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.547339][ T30] audit: type=1326 audit(1781674097.503:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.563484][ T3803] gspca_zc3xx: reg_w_i err -71 [ 1846.572116][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1846.592062][ T30] audit: type=1326 audit(1781674097.503:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.2.27178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1414f9ce59 code=0x7ffc0000 [ 1846.624559][ T3803] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1846.645478][ T3803] usb 6-1: USB disconnect, device number 3 [ 1847.374606][ T3803] usb 2-1: USB disconnect, device number 38 [ 1847.604536][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1847.849203][ T6486] vimc link validate: Scaler:src:4096x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:512x16 (0x38414262, 11, 0, 0, 0) [ 1847.893265][ T6487] syzkaller0: entered promiscuous mode [ 1847.907601][ T6487] syzkaller0: entered allmulticast mode [ 1847.929428][ T6487] tipc: Enabled bearer , priority 0 [ 1847.965662][ T6487] tipc: Resetting bearer [ 1847.996502][ T6485] tipc: Resetting bearer [ 1848.053997][ T6485] tipc: Disabling bearer [ 1848.644517][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1849.407032][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.443414][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.497081][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.542129][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.587481][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.615359][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.677142][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.684756][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1849.813164][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.878124][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1849.915531][ T5699] hid-generic 0006:0008:0001.0140: unknown main item tag 0x0 [ 1850.005920][ T5699] hid-generic 0006:0008:0001.0140: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1850.725816][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1851.484211][ T6527] tc_dump_action: action bad kind [ 1851.764519][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1851.804508][ T3805] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1851.978704][ T3805] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1852.003304][ T3805] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1852.030429][ T3805] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1852.056047][ T3805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.080035][ T6529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1852.112238][ T3805] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1852.180263][ T6533] tipc: Enabling of bearer rejected, already enabled [ 1852.409074][ T4963] usb 3-1: USB disconnect, device number 35 [ 1852.804552][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1853.109240][ T6549] bond11: entered allmulticast mode [ 1853.213811][ T6551] veth15: entered allmulticast mode [ 1853.286017][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.292671][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.504650][ T6554] syzkaller0: entered promiscuous mode [ 1853.520552][ T6554] syzkaller0: entered allmulticast mode [ 1853.844521][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1854.884517][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1854.925633][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27215'. [ 1854.938236][ T6590] netlink: 'syz.2.27215': attribute type 7 has an invalid length. [ 1854.947972][ T6590] netlink: 'syz.2.27215': attribute type 8 has an invalid length. [ 1854.959558][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27215'. [ 1854.982714][ T6590] team0: entered promiscuous mode [ 1854.988636][ T5699] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1854.998449][ T6590] team_slave_0: entered promiscuous mode [ 1855.010019][ T6590] team_slave_1: entered promiscuous mode [ 1855.037928][ T6590] .`: entered promiscuous mode [ 1855.052201][ T6590] bond_slave_0: entered promiscuous mode [ 1855.063070][ T6590] .`: left promiscuous mode [ 1855.070575][ T6590] bond_slave_0: left promiscuous mode [ 1855.092364][ T6590] team0: left promiscuous mode [ 1855.102345][ T6590] team_slave_0: left promiscuous mode [ 1855.111181][ T6590] team_slave_1: left promiscuous mode [ 1855.157615][ T5699] usb 6-1: Using ep0 maxpacket: 32 [ 1855.166188][ T5699] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1855.183376][ T5699] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1855.193407][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1855.203793][ T5699] usb 6-1: Product: syz [ 1855.210319][ T5699] usb 6-1: Manufacturer: syz [ 1855.216723][ T5699] usb 6-1: SerialNumber: syz [ 1855.224750][ T5699] usb 6-1: config 0 descriptor?? [ 1855.232004][ T6587] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1855.514896][ T3803] usb 6-1: USB disconnect, device number 4 [ 1855.924557][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1856.919781][ T6619] netlink: 356 bytes leftover after parsing attributes in process `syz.5.27225'. [ 1856.964551][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1857.972195][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27227'. [ 1858.014548][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1859.045000][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1859.127969][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 1859.127985][ T30] audit: type=1326 audit(1781674110.503:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.160456][ T30] audit: type=1326 audit(1781674110.533:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.237719][ T30] audit: type=1326 audit(1781674110.563:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.308369][ T30] audit: type=1326 audit(1781674110.563:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.374635][ T30] audit: type=1326 audit(1781674110.563:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.447616][ T30] audit: type=1326 audit(1781674110.613:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.513793][ T30] audit: type=1326 audit(1781674110.613:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.580997][ T30] audit: type=1326 audit(1781674110.613:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.648380][ T30] audit: type=1326 audit(1781674110.613:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1859.730105][ T30] audit: type=1326 audit(1781674110.613:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.5.27234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1860.084552][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1860.197991][T30167] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 1860.986478][ T6670] bond12: entered allmulticast mode [ 1861.030762][ T6670] veth15: entered allmulticast mode [ 1861.124561][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1861.152346][ T6673] all (unregistering): Released all slaves [ 1861.285130][ T6677] kvm: apic: phys broadcast and lowest prio [ 1861.291144][ T6677] kvm: Disabled LAPIC found during irq injection [ 1861.534514][ T4976] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1861.686104][ T4976] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 1861.699630][ T4976] usb 3-1: config 0 has no interface number 0 [ 1861.708784][ T4976] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1861.718833][ T4976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.727531][ T4976] usb 3-1: Product: syz [ 1861.732035][ T4976] usb 3-1: Manufacturer: syz [ 1861.738857][ T4976] usb 3-1: SerialNumber: syz [ 1861.754223][ T4976] usb 3-1: config 0 descriptor?? [ 1861.939666][ T6690] syzkaller0: entered promiscuous mode [ 1861.947043][ T6690] syzkaller0: entered allmulticast mode [ 1861.973796][ T4976] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1861.983242][ T6690] 0: reclassify loop, rule prio 0, protocol 800 [ 1862.164505][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1862.188983][ T6704] bond17: entered allmulticast mode [ 1862.378907][ T6704] veth27: entered allmulticast mode [ 1863.003275][ T4976] gspca_m5602: Failed to find a sensor [ 1863.029040][ T4976] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 1863.053020][ T4976] usb 3-1: USB disconnect, device number 36 [ 1863.204657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1863.638932][ T6740] veth11: entered allmulticast mode [ 1863.741540][ T6743] tipc: Failed to remove unknown binding: 66,0,0/2099199:1222709555/1222709557 [ 1863.763547][ T6743] tipc: Failed to remove unknown binding: 66,0,0/2099199:1222709555/1222709556 [ 1863.774722][ T6743] tipc: Failed to remove unknown binding: 66,0,0/2099199:1222709555/1222709557 [ 1863.786700][ T6743] tipc: Failed to remove unknown binding: 66,0,0/2099199:1222709555/1222709556 [ 1863.810032][ T6745] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1864.054533][ T4976] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1864.216957][ T4976] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.229513][ T4976] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1864.242650][ T4976] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1864.253958][ T4976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.254812][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1864.264551][ T4976] usb 6-1: Product: syz [ 1864.284514][ T4976] usb 6-1: Manufacturer: syz [ 1864.290764][ T4976] usb 6-1: SerialNumber: syz [ 1864.315421][ T4976] usb 6-1: 0:2 : does not exist [ 1864.321410][ T4976] usb 6-1: unit 9 not found! [ 1864.554153][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.580453][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.712567][ T6757] bond18: entered allmulticast mode [ 1864.720700][ T4976] usb 6-1: USB disconnect, device number 5 [ 1864.742933][ T6763] veth27: entered allmulticast mode [ 1864.807053][ T6763] bond18: (slave veth27): Enslaving as an active interface with an up link [ 1864.983626][ T6774] tipc: Enabling of bearer rejected, already enabled [ 1865.284579][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1865.465868][ T6790] netlink: 'syz.5.27285': attribute type 10 has an invalid length. [ 1865.474691][ T6790] netlink: 40 bytes leftover after parsing attributes in process `syz.5.27285'. [ 1865.491435][ T6790] team0: Port device geneve1 added [ 1865.499566][T27385] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.510434][T27385] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.529475][ T4339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.541599][ T4339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.985955][ T6795] bond6: entered allmulticast mode [ 1866.011884][ T6795] veth11: entered allmulticast mode [ 1866.019467][ T6795] bond6: (slave veth11): Enslaving as an active interface with an up link [ 1866.256038][ T6806] tipc: Enabling of bearer rejected, already enabled [ 1866.324575][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1866.435892][ T6811] ip6tnl0: Caught tx_queue_len zero misconfig [ 1866.451038][ T6811] netlink: 'syz.5.27292': attribute type 3 has an invalid length. [ 1866.714784][ T4976] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1866.728945][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1866.728965][ T30] audit: type=1326 audit(1781674118.073:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1866.776350][ T30] audit: type=1326 audit(1781674118.103:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1866.801777][ T30] audit: type=1326 audit(1781674118.143:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1866.829193][ T30] audit: type=1326 audit(1781674118.143:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1866.891205][ T30] audit: type=1326 audit(1781674118.143:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1866.921219][ T4976] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.941554][ T4976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.961014][ T4976] usb 6-1: Product: syz [ 1866.970089][ T30] audit: type=1326 audit(1781674118.263:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1866.972540][ T4976] usb 6-1: Manufacturer: syz [ 1867.040776][ T4976] usb 6-1: SerialNumber: syz [ 1867.060076][ T4976] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1867.083035][ T3803] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1867.220324][ T30] audit: type=1326 audit(1781674118.383:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1867.300061][ T30] audit: type=1326 audit(1781674118.403:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1867.336856][ T30] audit: type=1326 audit(1781674118.403:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1867.362304][ T30] audit: type=1326 audit(1781674118.413:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.27294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f31ecf9ce59 code=0x7ffc0000 [ 1867.386933][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1867.984763][ T4976] usb 6-1: USB disconnect, device number 6 [ 1868.164552][ T3803] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1868.189160][ T3803] ath9k_htc: Failed to initialize the device [ 1868.212062][ T4976] usb 6-1: ath9k_htc: USB layer deinitialized [ 1868.398234][ T6845] input: syz0 as /devices/virtual/input/input331 [ 1868.414566][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1868.644614][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1868.783615][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1868.903930][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1869.334526][ T29] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1869.444511][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1869.496358][ T29] usb 6-1: config 3 has an invalid interface number: 3 but max is 1 [ 1869.505382][ T29] usb 6-1: config 3 has an invalid interface number: 50 but max is 1 [ 1869.535364][ T29] usb 6-1: config 3 has no interface number 0 [ 1869.576422][ T29] usb 6-1: config 3 has no interface number 1 [ 1869.593994][ T29] usb 6-1: config 3 interface 3 has no altsetting 0 [ 1869.613062][ T29] usb 6-1: config 3 interface 50 has no altsetting 0 [ 1869.637141][ T29] usb 6-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1869.651312][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.664015][ T29] usb 6-1: Product: syz [ 1869.671182][ T29] usb 6-1: Manufacturer: syz [ 1869.676386][ T29] usb 6-1: SerialNumber: syz [ 1869.864533][ T4963] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1869.910724][ T29] usb 6-1: unknown number of interfaces: 2 [ 1869.932287][ T29] usb 6-1: USB disconnect, device number 7 [ 1870.015252][ T4963] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1870.024183][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.031918][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.040091][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.046899][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.063669][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.073014][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.080673][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.087303][ T4963] usb 3-1: config 0 has no interfaces? [ 1870.095253][ T4963] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1870.105248][ T4963] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1870.120606][ T4963] usb 3-1: Product: syz [ 1870.140354][ T4963] usb 3-1: Manufacturer: syz [ 1870.162841][ T4963] usb 3-1: SerialNumber: syz [ 1870.173468][ T4963] usb 3-1: config 0 descriptor?? [ 1870.484535][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1870.600832][ T6887] bond19: entered allmulticast mode [ 1870.614142][ T6890] veth29: entered allmulticast mode [ 1870.621937][ T6890] bond19: (slave veth29): Enslaving as an active interface with an up link [ 1871.000671][ T4963] usb 3-1: USB disconnect, device number 37 [ 1871.524581][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1871.613027][ T6906] netlink: 'syz.5.27324': attribute type 1 has an invalid length. [ 1872.115651][ T6910] all (unregistering): Released all slaves [ 1872.314503][ T3805] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1872.468748][ T3805] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1872.480546][ T3805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.494091][ T3805] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1872.506191][ T3805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.515792][ T3805] usb 6-1: Product: syz [ 1872.521810][ T3805] usb 6-1: Manufacturer: syz [ 1872.526663][ T3805] usb 6-1: SerialNumber: syz [ 1872.534261][ T3805] usb 6-1: config 0 descriptor?? [ 1872.546547][ T3805] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 1872.554116][ T3805] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 1872.564530][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1872.669681][ T6921] bond20: entered allmulticast mode [ 1872.701645][ T6921] veth31: entered allmulticast mode [ 1872.773447][ T6908] bridge_slave_0: left allmulticast mode [ 1872.779209][ T6908] bridge_slave_0: left promiscuous mode [ 1872.785250][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.794348][ T6908] bridge_slave_1: left allmulticast mode [ 1872.800339][ T6908] bridge_slave_1: left promiscuous mode [ 1872.806407][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.817451][ T6908] bond0: (slave bond_slave_0): Releasing backup interface [ 1872.828666][ T6908] bond0: (slave bond_slave_1): Releasing backup interface [ 1872.842730][ T6908] team0: Port device team_slave_0 removed [ 1872.851082][ T6908] team0: Port device team_slave_1 removed [ 1872.857715][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1872.877186][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1872.895193][ T6908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1873.006491][ T3805] usb 6-1: USB disconnect, device number 8 [ 1873.604608][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1873.663699][ T6940] tipc: Enabled bearer , priority 0 [ 1873.683682][ T6940] syzkaller0: entered promiscuous mode [ 1873.696058][ T6940] syzkaller0: entered allmulticast mode [ 1873.755775][ T6940] tipc: Resetting bearer [ 1873.794093][ T6939] tipc: Resetting bearer [ 1873.828440][ T6939] tipc: Disabling bearer [ 1874.654520][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1875.684594][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1876.734523][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1877.414520][ T4963] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1877.634668][ T4963] usb 6-1: Using ep0 maxpacket: 16 [ 1877.643386][ T4963] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 1877.696923][ T4963] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1877.737269][ T4963] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1877.764503][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1877.811558][ T4963] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1877.905702][ T4963] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1877.946336][ T4963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.984115][ T4963] usb 6-1: Product: syz [ 1878.000519][ T4963] usb 6-1: Manufacturer: syz [ 1878.024101][ T4963] usb 6-1: SerialNumber: syz [ 1878.048993][ T4963] usb 6-1: 0:2 : does not exist [ 1878.254274][ T4963] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1878.381989][ T4963] usb 6-1: USB disconnect, device number 9 [ 1878.486029][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1878.558114][ T6999] binder: 6998:6999 ioctl 80286722 200000000980 returned -22 [ 1878.804638][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1879.854544][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1880.487434][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27360'. [ 1880.884504][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1881.360635][ T7029] syzkaller1: entered promiscuous mode [ 1881.382819][ T7029] syzkaller1: entered allmulticast mode [ 1881.934504][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1882.097808][ T7051] hfs: unable to load iocharset "io#harset" [ 1882.559129][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1882.736016][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1882.760805][ T29] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 1882.796635][ T29] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1882.817634][ T29] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.844190][ T29] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1882.869893][ T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1882.880560][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.897343][ T29] usb 6-1: Product: syz [ 1882.903154][ T29] usb 6-1: Manufacturer: syz [ 1882.917684][ T29] usb 6-1: SerialNumber: syz [ 1882.940711][ T29] usb 6-1: 0:2 : does not exist [ 1882.974542][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1883.044705][ T4963] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1883.167917][ T29] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1883.207874][ T4963] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1883.233773][ T4963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.244641][ T29] usb 6-1: USB disconnect, device number 10 [ 1883.273602][ T4963] usb 3-1: Product: syz [ 1883.285294][ T4963] usb 3-1: Manufacturer: syz [ 1883.291302][ T4963] usb 3-1: SerialNumber: syz [ 1883.299449][ T4963] usb 3-1: config 0 descriptor?? [ 1883.323437][ T4963] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1884.004787][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1884.006216][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1884.007069][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1884.636184][ T4963] gspca_stk1135: reg_w 0x7 err -110 [ 1884.637236][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637251][ T4963] gspca_stk1135: Sensor write failed [ 1884.637285][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637296][ T4963] gspca_stk1135: Sensor write failed [ 1884.637329][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637341][ T4963] gspca_stk1135: Sensor read failed [ 1884.637374][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637385][ T4963] gspca_stk1135: Sensor read failed [ 1884.637394][ T4963] gspca_stk1135: Detected sensor type unknown (0x0) [ 1884.637431][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637443][ T4963] gspca_stk1135: Sensor read failed [ 1884.637476][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637487][ T4963] gspca_stk1135: Sensor read failed [ 1884.637520][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637531][ T4963] gspca_stk1135: Sensor write failed [ 1884.637564][ T4963] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.637575][ T4963] gspca_stk1135: Sensor write failed [ 1884.637628][ T4963] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1885.048351][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1885.180102][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 1885.264825][ T3805] usb 3-1: USB disconnect, device number 38 [ 1885.534631][ T4963] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1885.624484][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1885.694446][ T4963] usb 6-1: Using ep0 maxpacket: 16 [ 1885.702638][ T4963] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1885.714059][ T4963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.726217][ T4963] usb 6-1: config 0 has no interface number 0 [ 1885.735086][ T4963] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1885.744855][ T4963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.753532][ T4963] usb 6-1: Product: syz [ 1885.759798][ T4963] usb 6-1: Manufacturer: syz [ 1885.764824][ T4963] usb 6-1: SerialNumber: syz [ 1885.772770][ T4963] usb 6-1: config 0 descriptor?? [ 1885.784625][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1885.799097][ T4963] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1885.820261][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1885.830216][ T4963] uvcvideo 6-1:0.105: No valid video chain found. [ 1885.850702][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.870552][ T24] usb 2-1: Product: syz [ 1885.881626][ T24] usb 2-1: Manufacturer: syz [ 1885.888669][ T24] usb 2-1: SerialNumber: syz [ 1885.896323][ T7105] tipc: Enabled bearer , priority 0 [ 1885.908485][ T24] usb 2-1: config 0 descriptor?? [ 1885.914657][ T7105] syzkaller0: entered promiscuous mode [ 1885.920587][ T7105] syzkaller0: entered allmulticast mode [ 1885.933351][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1885.946184][ T7105] tipc: Resetting bearer [ 1885.954249][ T7104] tipc: Resetting bearer [ 1885.963431][ T7104] tipc: Disabling bearer [ 1886.041337][ T3805] usb 6-1: USB disconnect, device number 11 [ 1886.084521][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1886.160366][ T7109] veth15: entered allmulticast mode [ 1886.590757][ T7115] tipc: Resetting bearer [ 1886.731717][ T7115] macsec2: left promiscuous mode [ 1886.738036][ T7115] ip6tnl5: left promiscuous mode [ 1886.743336][ T7115] bond4: left promiscuous mode [ 1886.749093][ T7115] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1886.757525][ T7115] ªªªªªª: left promiscuous mode [ 1886.763139][ T7115] bond0: left promiscuous mode [ 1886.777660][ T7115] veth25: left promiscuous mode [ 1886.796120][ T4577] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.812080][ T4577] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.836452][ T4577] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.851136][ T4577] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.904133][ T7136] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1887.124587][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1887.177914][ T7143] kvm: kvm [7142]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1887.374792][ T24] gspca_sonixj: reg_w err -110 [ 1887.380154][ T24] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1887.598831][ T3793] usb 2-1: USB disconnect, device number 39 [ 1887.698087][ T7157] veth13: entered allmulticast mode [ 1888.164532][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1888.871354][ T7182] tipc: Enabling of bearer rejected, already enabled [ 1888.889208][ T7182] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1889.204546][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1890.254515][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1890.903779][ T7217] fuse: Bad value for 'fd' [ 1890.913846][ T7217] fuse: Bad value for 'fd' [ 1891.284520][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1892.324570][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1892.931106][ T7248] tipc: Enabled bearer , priority 0 [ 1892.942538][ T7248] syzkaller0: entered promiscuous mode [ 1892.948821][ T7248] syzkaller0: entered allmulticast mode [ 1892.968601][ T7248] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1892.997016][ T7248] tipc: Resetting bearer [ 1893.022085][ T7247] tipc: Resetting bearer [ 1893.051367][ T7247] tipc: Disabling bearer [ 1893.373664][ T7257] syzkaller0: entered promiscuous mode [ 1893.374716][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1893.379938][ T7257] syzkaller0: entered allmulticast mode [ 1893.528171][ T7264] binder_alloc: 7263: pid 7263 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1893.542172][ T7264] netlink: 96 bytes leftover after parsing attributes in process `syz.2.27431'. [ 1893.693947][ T7270] bond13: entered allmulticast mode [ 1893.715295][ T7270] veth15: entered allmulticast mode [ 1893.764931][ T7126] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1893.902136][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1893.902155][ T30] audit: type=1800 audit(1781674145.273:5490): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.27436" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 1893.929996][ T7126] usb 6-1: device descriptor read/64, error -71 [ 1894.065256][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1894.174488][ T7126] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1894.216773][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1894.226795][ T24] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1894.240414][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1894.252915][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1894.269933][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1894.280496][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1894.288933][ T24] usb 3-1: Product: syz [ 1894.293249][ T24] usb 3-1: Manufacturer: syz [ 1894.302501][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1894.310943][ T7126] usb 6-1: device descriptor read/64, error -71 [ 1894.404511][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1894.424782][ T7126] usb usb6-port1: attempt power cycle [ 1894.519566][ T24] usb 3-1: USB disconnect, device number 39 [ 1894.774529][ T7126] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1894.797682][ T7126] usb 6-1: device descriptor read/8, error -71 [ 1895.034738][ T7126] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1895.065153][ T7126] usb 6-1: device descriptor read/8, error -71 [ 1895.174683][ T7126] usb usb6-port1: unable to enumerate USB device [ 1895.444518][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1896.494520][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1897.524535][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1897.698579][ T7344] bond14: entered allmulticast mode [ 1897.706360][ T7333] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1897.716282][ T7333] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1897.726269][ T7333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1897.745397][ T7333] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len [ 1897.780410][ T7344] veth15: entered allmulticast mode [ 1898.134478][ T808] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1898.171818][ T7355] tipc: Enabled bearer , priority 0 [ 1898.180135][ T7355] syzkaller0: entered promiscuous mode [ 1898.186074][ T7355] syzkaller0: entered allmulticast mode [ 1898.202736][ T7355] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1898.219961][ T7355] tipc: Resetting bearer [ 1898.229284][ T7354] tipc: Resetting bearer [ 1898.249965][ T7354] tipc: Disabling bearer [ 1898.295149][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 1898.312990][ T808] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.343459][ T808] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1898.366812][ T808] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1898.380219][ T808] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1898.421385][ T808] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1898.442534][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.464725][ T808] usb 3-1: Product: syz [ 1898.484799][ T808] usb 3-1: Manufacturer: syz [ 1898.499072][ T808] usb 3-1: SerialNumber: syz [ 1898.526046][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1898.564495][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1898.589425][ T808] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input332 [ 1898.754574][ T808] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1898.785282][ T808] (id 0x00) [ 1898.906166][ T808] rc_core: IR keymap rc-imon-pad not found [ 1898.916382][ T808] Registered IR keymap rc-empty [ 1898.924227][ T808] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1898.948090][ T808] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1898.985388][ T808] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1899.026158][ T808] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input333 [ 1899.055320][ T808] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:40> initialized [ 1899.595945][ T7373] tipc: Enabling of bearer rejected, already enabled [ 1899.604520][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1899.632823][ T7373] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1900.232807][ T7378] send_packet: 7 callbacks suppressed [ 1900.232835][ T7378] imon:send_packet: task interrupted [ 1900.249392][ T7378] send_packet: 8 callbacks suppressed [ 1900.249410][ T7378] imon:send_packet: packet tx failed (-512) [ 1900.283489][ T7378] vfd_write: 8 callbacks suppressed [ 1900.283557][ T7378] imon:vfd_write: send packet #3 failed [ 1900.299682][ T7378] imon:send_packet: task interrupted [ 1900.306083][ T7380] bond16: entered allmulticast mode [ 1900.311495][ T7378] imon:send_packet: packet tx failed (-512) [ 1900.319864][ T7378] imon:vfd_write: send packet #0 failed [ 1900.328546][ T7378] imon:send_packet: task interrupted [ 1900.335204][ T7378] imon:send_packet: packet tx failed (-512) [ 1900.342447][ T7378] imon:vfd_write: send packet #0 failed [ 1900.360942][ T7378] imon:send_packet: task interrupted [ 1900.369249][ T7378] imon:send_packet: packet tx failed (-512) [ 1900.378640][ T7378] imon:vfd_write: send packet #0 failed [ 1900.389693][ T7378] imon:send_packet: task interrupted [ 1900.398631][ T7378] imon:send_packet: packet tx failed (-512) [ 1900.407148][ T7378] imon:vfd_write: send packet #0 failed [ 1900.414550][ T7378] imon:send_packet: task interrupted [ 1900.420299][ T7378] imon:send_packet: packet tx failed (-512) [ 1900.477779][ T7378] imon:vfd_write: send packet #0 failed [ 1900.486329][ T7378] imon:send_packet: task interrupted [ 1900.499492][ T7385] veth13: entered allmulticast mode [ 1900.504194][ T7378] imon:send_packet: packet tx failed (-512) [ 1900.522492][ T7378] imon:vfd_write: send packet #0 failed [ 1900.534811][ T7378] imon:send_packet: packet tx failed (-32) [ 1900.541497][ T7378] imon:vfd_write: send packet #0 failed [ 1900.554779][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27466'. [ 1900.576201][ T808] usb 3-1: USB disconnect, device number 40 [ 1900.628516][ T7388] vlan4: entered promiscuous mode [ 1900.636298][ T7388] batadv0: entered promiscuous mode [ 1900.654524][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1900.756577][ T7396] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5637] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  ./file0 [ 1900.819490][ T7398] fuse: Bad value for 'fd' [ 1901.050254][ T30] audit: type=1326 audit(1781674152.423:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.087615][ T30] audit: type=1326 audit(1781674152.423:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.114842][ T30] audit: type=1326 audit(1781674152.423:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.145002][ T30] audit: type=1326 audit(1781674152.423:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.198226][ T30] audit: type=1326 audit(1781674152.423:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.314123][ T30] audit: type=1326 audit(1781674152.473:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.392802][ T30] audit: type=1326 audit(1781674152.473:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.436849][ T30] audit: type=1326 audit(1781674152.473:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.462346][ T30] audit: type=1326 audit(1781674152.483:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.496887][ T30] audit: type=1326 audit(1781674152.493:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.5.27470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f099ce59 code=0x7ffc0000 [ 1901.684556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1902.368201][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27476'. [ 1902.587522][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1902.724565][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1903.269683][ T7437] veth3: entered allmulticast mode [ 1903.764620][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1904.067620][ T7456] bond7: entered allmulticast mode [ 1904.157384][ T7456] veth13: entered allmulticast mode [ 1904.664571][ T3787] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1904.804533][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1904.832835][ T3787] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1904.851191][ T3787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.867630][ T3787] usb 6-1: config 0 has no interface number 0 [ 1904.877313][ T3787] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1904.892166][ T3787] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1904.909425][ T3787] usb 6-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1904.930022][ T3787] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1904.947782][ T3787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.960348][ T3787] usb 6-1: Product: syz [ 1904.970198][ T3787] usb 6-1: Manufacturer: syz [ 1904.977399][ T3787] usb 6-1: SerialNumber: syz [ 1904.986893][ T3787] usb 6-1: config 0 descriptor?? [ 1904.997872][ T3787] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1905.009516][ T3787] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1905.021089][ T3787] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1905.160820][ T7472] veth3: entered allmulticast mode [ 1905.476136][ T7483] syzkaller0: entered promiscuous mode [ 1905.489896][ T7483] syzkaller0: entered allmulticast mode [ 1905.511190][ T7483] tipc: Enabled bearer , priority 0 [ 1905.532878][ T7483] tipc: Resetting bearer [ 1905.556092][ T7482] tipc: Resetting bearer [ 1905.564774][ T7482] tipc: Disabling bearer [ 1905.818547][ T7126] usb 6-1: USB disconnect, device number 16 [ 1905.844516][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1905.877425][ T7126] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1905.927587][ T7126] cyberjack 6-1:0.69: device disconnected [ 1906.567811][ T7501] IPv6: NLM_F_CREATE should be specified when creating new route [ 1906.618313][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27502'. [ 1906.627536][ T808] IPVS: starting estimator thread 0... [ 1906.652211][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27502'. [ 1906.725184][ T7503] IPVS: using max 54 ests per chain, 129600 per kthread [ 1906.884522][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1906.957526][ T7509] veth15: entered allmulticast mode [ 1907.211623][ T7520] syzkaller0: entered promiscuous mode [ 1907.220135][ T7520] syzkaller0: entered allmulticast mode [ 1907.233906][ T7520] tipc: Enabled bearer , priority 0 [ 1907.249724][ T7520] tipc: Resetting bearer [ 1907.258897][ T7519] tipc: Resetting bearer [ 1907.267672][ T7519] tipc: Disabling bearer [ 1907.624573][ T7126] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1907.663431][ T7528] bond8: entered allmulticast mode [ 1907.691524][ T7528] veth15: entered allmulticast mode [ 1907.787294][ T7126] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1907.796194][ T7126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.808123][ T7126] usb 3-1: config 0 has no interface number 0 [ 1907.814631][ T7126] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1907.826369][ T7126] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1907.837816][ T7126] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1907.854968][ T7126] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1907.864551][ T7126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.873580][ T7126] usb 3-1: Product: syz [ 1907.878707][ T7126] usb 3-1: Manufacturer: syz [ 1907.883765][ T7126] usb 3-1: SerialNumber: syz [ 1907.893592][ T7126] usb 3-1: config 0 descriptor?? [ 1907.901225][ T7126] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1907.911735][ T7126] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1907.921715][ T7126] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1907.931211][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1908.594487][ T3787] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1908.677584][ T7126] usb 3-1: USB disconnect, device number 41 [ 1908.705980][ T7126] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1908.748411][ T7126] cyberjack 3-1:0.69: device disconnected [ 1908.753214][ T3787] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1908.775098][ T3787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.799596][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27515'. [ 1908.811058][ T3787] usb 6-1: config 0 has no interface number 0 [ 1908.820505][ T3787] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1908.843297][ T3787] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1908.861677][ T3787] usb 6-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1908.880930][ T3787] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1908.903305][ T3787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.929058][ T3787] usb 6-1: Product: syz [ 1908.936234][ T3787] usb 6-1: Manufacturer: syz [ 1908.942209][ T3787] usb 6-1: SerialNumber: syz [ 1908.953654][ T3787] usb 6-1: config 0 descriptor?? [ 1908.963448][ T3787] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1908.974545][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1908.983113][ T3787] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1908.994693][ T3787] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1909.031313][ T7545] veth15: entered allmulticast mode [ 1909.423338][ T7556] syz.2.27520: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1909.458816][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.2.27520 Tainted: G L syzkaller #0 PREEMPT(full) [ 1909.458842][ T7556] Tainted: [L]=SOFTLOCKUP [ 1909.458849][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1909.458858][ T7556] Call Trace: [ 1909.458865][ T7556] [ 1909.458872][ T7556] dump_stack_lvl+0xe8/0x150 [ 1909.458898][ T7556] warn_alloc+0x249/0x340 [ 1909.458931][ T7556] ? __pfx_warn_alloc+0x10/0x10 [ 1909.458957][ T7556] ? __mutex_trylock_common+0x15f/0x270 [ 1909.458977][ T7556] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1909.458998][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1909.459014][ T7556] ? trace_contention_end+0x3d/0x140 [ 1909.459031][ T7556] ? __mutex_lock+0x30d/0x1550 [ 1909.459053][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1909.459068][ T7556] ? lock_release+0x4b/0x3c0 [ 1909.459089][ T7556] ? kfree+0x1c5/0x640 [ 1909.459105][ T7556] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1909.459189][ T7556] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1909.459211][ T7556] ? dvb_dvr_do_ioctl+0x76/0x220 [ 1909.459236][ T7556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1909.459265][ T7556] ? do_vfs_ioctl+0x116f/0x1540 [ 1909.459290][ T7556] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1909.459309][ T7556] vmalloc_noprof+0xb2/0xe0 [ 1909.459328][ T7556] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1909.459347][ T7556] dvb_dvr_do_ioctl+0x12b/0x220 [ 1909.459370][ T7556] dvb_usercopy+0x199/0x2e0 [ 1909.459385][ T7556] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1909.459404][ T7556] ? __pfx_dvb_usercopy+0x10/0x10 [ 1909.459425][ T7556] ? __fget_files+0x3a2/0x420 [ 1909.459442][ T7556] ? __fget_files+0x2a/0x420 [ 1909.459459][ T7556] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1909.459477][ T7556] dvb_dvr_ioctl+0x29/0x40 [ 1909.459495][ T7556] __se_sys_ioctl+0xfc/0x170 [ 1909.459516][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.459533][ T7556] do_syscall_64+0x174/0x580 [ 1909.459552][ T7556] ? trace_irq_disable+0x3b/0x140 [ 1909.459573][ T7556] ? clear_bhb_loop+0x40/0x90 [ 1909.459590][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.459605][ T7556] RIP: 0033:0x7f1414f9ce59 [ 1909.459619][ T7556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1909.459633][ T7556] RSP: 002b:00007f1415e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.459649][ T7556] RAX: ffffffffffffffda RBX: 00007f1415215fa0 RCX: 00007f1414f9ce59 [ 1909.459661][ T7556] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 1909.459671][ T7556] RBP: 00007f1415032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1909.459681][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1909.459690][ T7556] R13: 00007f1415216038 R14: 00007f1415215fa0 R15: 00007f141533fa48 [ 1909.459707][ T7556] [ 1909.459737][ T7556] Mem-Info: [ 1909.852188][ T7556] active_anon:68417 inactive_anon:0 isolated_anon:0 [ 1909.852188][ T7556] active_file:22742 inactive_file:4645 isolated_file:0 [ 1909.852188][ T7556] unevictable:768 dirty:255 writeback:0 [ 1909.852188][ T7556] slab_reclaimable:7926 slab_unreclaimable:149436 [ 1909.852188][ T7556] mapped:30771 shmem:52642 pagetables:2548 [ 1909.852188][ T7556] sec_pagetables:5 bounce:0 [ 1909.852188][ T7556] kernel_misc_reclaimable:0 [ 1909.852188][ T7556] free:1203545 free_pcp:13418 free_cma:0 [ 1909.951462][ T7556] Node 0 active_anon:274564kB inactive_anon:0kB active_file:90820kB inactive_file:18444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94284kB dirty:1020kB writeback:0kB shmem:209028kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:19184kB pagetables:10156kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1910.004505][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1910.060012][ T7556] Node 1 active_anon:4kB inactive_anon:0kB active_file:148kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28756kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1910.114173][ T7556] Node 0 [ 1910.127517][ T808] usb 6-1: USB disconnect, device number 17 [ 1910.177228][ T808] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1910.204956][ T7556] DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.247413][ T808] cyberjack 6-1:0.69: device disconnected [ 1910.371624][ T7556] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1910.420951][ T7556] Node 0 DMA32 free:920452kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:277888kB inactive_anon:0kB active_file:90820kB inactive_file:18444kB unevictable:1536kB writepending:1096kB zspages:0kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:39976kB local_pcp:22844kB free_cma:0kB [ 1910.593041][ T7556] lowmem_reserve[]: 0 0 0 0 0 [ 1910.696796][ T7556] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.837259][ T7556] lowmem_reserve[]: 0 0 0 0 0 [ 1910.874766][ T7556] Node 1 Normal free:3878300kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:148kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14336kB local_pcp:10240kB free_cma:0kB [ 1910.976210][ T7556] lowmem_reserve[]: 0 0 0 0 0 [ 1910.992330][ T7556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (UM) = 11264kB [ 1911.040673][ T7556] Node 0 DMA32: 3207*4kB (UME) 7281*8kB (UME) 6402*16kB (UME) 790*32kB (UME) 534*64kB (UME) 659*128kB (UME) 570*256kB (UME) 421*512kB (UM) 160*1024kB (UM) 8*2048kB (UM) 15*4096kB (M) = 920452kB [ 1911.064508][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1911.101727][ T7556] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1911.121451][ T7556] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 17*16kB (UM) 18*32kB (UM) 8*64kB (UM) 10*128kB (UM) 9*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 942*4096kB (UM) = 3878300kB [ 1911.171338][ T7556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1911.188173][ T7556] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 1911.201233][ T7556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1911.218287][ T7556] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1911.244745][ T7556] 80022 total pagecache pages [ 1911.262022][ T7556] 1 pages in swap cache [ 1911.288863][ T7556] Free swap = 124992kB [ 1911.302419][ T7556] Total swap = 124996kB [ 1911.335633][ T7556] 2097051 pages RAM [ 1911.368978][ T7556] 0 pages HighMem/MovableOnly [ 1911.386247][ T7556] 427061 pages reserved [ 1911.400606][ T7556] 0 pages cma reserved [ 1911.794758][ T808] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1911.947404][ T808] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1911.955801][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.967623][ T808] usb 3-1: config 0 has no interface number 0 [ 1911.977918][ T808] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1911.990242][ T808] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1912.001698][ T808] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1912.021795][ T808] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1912.034496][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.047248][ T808] usb 3-1: Product: syz [ 1912.051555][ T808] usb 3-1: Manufacturer: syz [ 1912.057694][ T808] usb 3-1: SerialNumber: syz [ 1912.068324][ T808] usb 3-1: config 0 descriptor?? [ 1912.078631][ T808] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1912.090414][ T808] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1912.094816][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1912.110572][ T808] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1912.155403][ T7594] veth31: entered allmulticast mode [ 1912.247586][ T7598] tipc: Enabling of bearer rejected, already enabled [ 1912.614621][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1912.774505][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1912.782283][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.794296][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.808897][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1912.823418][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1912.833305][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.848988][ T24] usb 6-1: config 0 descriptor?? [ 1912.889573][ T7126] usb 3-1: USB disconnect, device number 42 [ 1912.909402][ T7126] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1912.933671][ T7126] cyberjack 3-1:0.69: device disconnected [ 1913.124639][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1913.292505][ T24] microsoft 0003:045E:07DA.0141: ignoring exceeding usage max [ 1913.405931][ T7133] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1913.505274][ T24] microsoft 0003:045E:07DA.0141: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1913.552250][ T24] microsoft 0003:045E:07DA.0141: no inputs found [ 1913.570927][ T24] microsoft 0003:045E:07DA.0141: could not initialize ff, continuing anyway [ 1913.614713][ T7133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1913.629219][ T24] usb 6-1: USB disconnect, device number 18 [ 1913.637558][ T7133] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1913.647457][ T7133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1913.662518][ T7133] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1913.673797][ T7133] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1913.684271][ T7133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.697916][ T7133] usb 2-1: config 0 descriptor?? [ 1913.814522][ T7625] veth31: entered allmulticast mode [ 1913.826407][ T7126] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1913.934677][ T7133] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 1913.943071][ T7133] hdpvr 2-1:0.0: device init failed [ 1913.948441][ T7133] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1913.976715][ T808] usb 2-1: USB disconnect, device number 40 [ 1913.996133][ T7126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.007035][ T7126] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1914.016262][ T7126] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1914.025412][ T7126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.036494][ T7126] usb 3-1: config 0 descriptor?? [ 1914.164575][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1914.713357][ T7638] veth13: entered allmulticast mode [ 1914.726534][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.734514][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.204569][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1915.324452][ T808] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1915.485334][ T808] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1915.527190][ T808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.549560][ T808] usb 2-1: config 0 has no interface number 0 [ 1915.557659][ T808] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1915.568105][ T808] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1915.578440][ T808] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1915.596479][ T808] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1915.606681][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.619474][ T808] usb 2-1: Product: syz [ 1915.623875][ T808] usb 2-1: Manufacturer: syz [ 1915.632817][ T808] usb 2-1: SerialNumber: syz [ 1915.649111][ T808] usb 2-1: config 0 descriptor?? [ 1915.659343][ T808] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1915.676199][ T808] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1915.691935][ T808] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1916.244524][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1916.513369][ T808] usb 2-1: USB disconnect, device number 41 [ 1916.536646][ T808] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1916.610336][ T808] cyberjack 2-1:0.69: device disconnected [ 1916.633384][ T7133] usb 3-1: USB disconnect, device number 43 [ 1917.284541][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1917.486596][ T808] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1917.667466][ T808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1917.691445][ T808] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 1917.735781][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.769425][ T808] usb 2-1: config 0 descriptor?? [ 1918.261110][ T808] hid_parser_main: 7 callbacks suppressed [ 1918.261135][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.303657][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.324491][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1918.339953][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.363814][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.391348][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.413965][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.444860][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.477222][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.516591][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.540363][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.555226][ T808] logitech 0003:046D:C211.0142: unknown main item tag 0x0 [ 1918.622339][ T808] logitech 0003:046D:C211.0142: hidraw0: USB HID v7f.fd Device [HID 046d:c211] on usb-dummy_hcd.1-1/input0 [ 1918.699950][ T808] logitech 0003:046D:C211.0142: no inputs found [ 1918.751216][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.917334][ T7685] kvm: kvm [7684]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100007700 [ 1918.984060][ T7685] kvm: kvm [7684]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x100007900 [ 1919.123188][ T24] usb 2-1: USB disconnect, device number 42 [ 1919.267041][ T7699] macvlan2 (unregistering): left allmulticast mode [ 1919.273902][ T7699] macvlan2 (unregistering): left promiscuous mode [ 1919.281915][ T7699] bridge0: port 3(macvlan2) entered disabled state [ 1919.364506][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1919.444964][ T3793] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1919.606636][ T3793] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.618190][ T3793] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1919.632436][ T3793] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1919.647401][ T3793] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1919.657845][ T3793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1919.666584][ T3793] usb 3-1: SerialNumber: syz [ 1919.770417][ T7710] bond17: entered allmulticast mode [ 1919.790193][ T7710] veth13: entered allmulticast mode [ 1919.945238][ T3793] rndis_host 3-1:253.0: skipping garbage [ 1919.952116][ T3793] rndis_host 3-1:253.0: rndis: master #0/ffff8880399bd000 slave #1/0000000000000000 [ 1919.966691][ T3793] usb 3-1: USB disconnect, device number 44 [ 1920.404503][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1921.304457][ T3793] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1921.379194][ T7739] fuse: Bad value for 'fd' [ 1921.454525][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1921.464513][ T3793] usb 2-1: Using ep0 maxpacket: 32 [ 1921.473323][ T3793] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1921.482724][ T3793] usb 2-1: config 0 has no interface number 0 [ 1921.489780][ T3793] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.501776][ T3793] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.512988][ T3793] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1921.523311][ T3793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.540485][ T3793] usb 2-1: config 0 descriptor?? [ 1922.162197][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x689c [ 1922.190348][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000e94d [ 1922.212600][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x89c7 [ 1922.223370][ T3793] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0143/input/input335 [ 1922.237666][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6012 [ 1922.263185][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1922.273650][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe147 [ 1922.287067][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x89b9 [ 1922.300291][ T7742] kvm: kvm [7741]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x90bb [ 1922.319914][ T3793] uclogic 0003:28BD:0094.0143: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 1922.484593][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1922.527396][ T7126] usb 2-1: USB disconnect, device number 43 [ 1922.939839][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27583'. [ 1922.969569][ T7762] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1922.989796][ T7762] gretap0: entered promiscuous mode [ 1922.998060][ T7762] debugfs: 'hsr0' already exists in 'hsr' [ 1923.003927][ T7762] Cannot create hsr debugfs directory [ 1923.036165][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1923.194583][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1923.203489][ T7767] binder_alloc: 7766: binder_alloc_buf, no vma [ 1923.219534][ T24] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 1923.239373][ T24] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1923.249796][ T24] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.262178][ T24] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1923.275654][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1923.286919][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.297429][ T24] usb 6-1: Product: syz [ 1923.302806][ T24] usb 6-1: Manufacturer: syz [ 1923.308222][ T24] usb 6-1: SerialNumber: syz [ 1923.322537][ T24] usb 6-1: 0:2 : does not exist [ 1923.522966][ T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1923.530389][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1923.568207][ T24] usb 6-1: USB disconnect, device number 19 [ 1923.597728][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1923.952950][ T7791] netlink: 'syz.2.27593': attribute type 13 has an invalid length. [ 1923.977785][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27593'. [ 1924.158026][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27596'. [ 1924.334532][ T3793] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1924.504557][ T3793] usb 6-1: Using ep0 maxpacket: 32 [ 1924.519274][ T3793] usb 6-1: config index 0 descriptor too short (expected 6701, got 45) [ 1924.542476][ T3793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.564481][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1924.569126][ T3793] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.587868][ T3793] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1924.599681][ T3793] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1924.607067][ T3793] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 1924.617881][ T3793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.634560][ T3793] usb 6-1: config 0 descriptor?? [ 1924.684917][ T3787] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1924.727513][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.735047][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.844726][ T3787] usb 2-1: Using ep0 maxpacket: 32 [ 1924.860967][ T3787] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1924.870846][ T3787] usb 2-1: config 0 has no interface number 0 [ 1924.890818][ T3787] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1924.902052][ T3787] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1924.914046][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1924.932690][ T3787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.941458][ T3787] usb 2-1: Product: syz [ 1924.952869][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1924.984286][ T3787] usb 2-1: Manufacturer: syz [ 1924.997771][ T3787] usb 2-1: SerialNumber: syz [ 1925.017684][ T3787] usb 2-1: config 0 descriptor?? [ 1925.060409][ T3793] hid_parser_main: 221 callbacks suppressed [ 1925.060497][ T3793] logitech 0003:046D:CA03.0144: unknown main item tag 0x0 [ 1925.076549][ T3793] logitech 0003:046D:CA03.0144: unknown main item tag 0x0 [ 1925.160053][ T3793] logitech 0003:046D:CA03.0144: unknown main item tag 0x0 [ 1925.194128][ T3793] logitech 0003:046D:CA03.0144: unknown main item tag 0x0 [ 1925.209775][ T4325] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.227458][ T3793] logitech 0003:046D:CA03.0144: unknown main item tag 0x0 [ 1925.245781][ T4325] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.255018][ T3793] logitech 0003:046D:CA03.0144: unknown main item tag 0x0 [ 1925.281673][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27595'. [ 1925.294845][ T3793] logitech 0003:046D:CA03.0144: unknown main item tag 0x0 [ 1925.302288][ T4325] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.326592][ T3793] logitech 0003:046D:CA03.0144: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0 [ 1925.342115][ T4325] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.378517][ T3793] logitech 0003:046D:CA03.0144: no inputs found [ 1925.604502][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1925.685451][T28874] IPVS: ip_vs_send_async error -101 [ 1925.730847][ T3787] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1925.757299][ T3793] usb 6-1: USB disconnect, device number 20 [ 1925.766134][ T3787] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1926.564774][ T7133] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1926.644503][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1926.744704][ T7133] usb 6-1: Using ep0 maxpacket: 16 [ 1926.771588][ T7133] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 1926.797571][ T7133] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1926.822944][ T7133] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.853555][ T7133] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1926.898378][ T7133] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1926.930556][ T7133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.960389][ T7133] usb 6-1: Product: syz [ 1926.972388][ T7133] usb 6-1: Manufacturer: syz [ 1926.986575][ T7133] usb 6-1: SerialNumber: syz [ 1927.022010][ T7133] usb 6-1: 0:2 : does not exist [ 1927.213462][ T7133] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1927.254097][ T7133] usb 6-1: USB disconnect, device number 21 [ 1927.288485][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1927.518131][ T7846] vlan4: entered promiscuous mode [ 1927.523270][ T7846] hsr0: entered promiscuous mode [ 1927.529082][ T7846] vlan4: entered allmulticast mode [ 1927.536237][ T7846] hsr0: entered allmulticast mode [ 1927.541437][ T7846] hsr_slave_1: entered allmulticast mode [ 1927.554452][ T7126] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1927.606058][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27612'. [ 1927.615750][ T7847] hsr_slave_1: left promiscuous mode [ 1927.684584][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1927.704565][ T7126] usb 3-1: Using ep0 maxpacket: 32 [ 1927.711698][ T7126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1927.727744][ T7126] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1927.737092][ T7126] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1927.747153][ T7126] usb 3-1: Product: syz [ 1927.751460][ T7126] usb 3-1: Manufacturer: syz [ 1927.756497][ T7126] usb 3-1: SerialNumber: syz [ 1927.763434][ T7126] usb 3-1: config 0 descriptor?? [ 1927.769783][ T7841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1927.778506][ T7126] hub 3-1:0.0: bad descriptor, ignoring hub [ 1927.784708][ T7126] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1927.978993][ T7856] tipc: Enabled bearer , priority 0 [ 1927.996695][ T7856] syzkaller0: entered promiscuous mode [ 1928.006820][ T7856] syzkaller0: entered allmulticast mode [ 1928.016760][ T7856] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1928.041922][ T7856] tipc: Resetting bearer [ 1928.056351][ T7855] tipc: Resetting bearer [ 1928.065334][ T7855] tipc: Disabling bearer [ 1928.252943][ T7865] tipc: Enabled bearer , priority 0 [ 1928.278394][ T7865] syzkaller0: entered promiscuous mode [ 1928.292036][ T7865] syzkaller0: entered allmulticast mode [ 1928.323956][ T7865] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1928.353000][ T7865] tipc: Resetting bearer [ 1928.373309][ T7864] tipc: Resetting bearer [ 1928.390759][ T7864] tipc: Disabling bearer [ 1928.694617][ T7841] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 1928.721707][ T3787] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000034: -71 [ 1928.734496][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1928.775982][ T3787] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write BURST_CAP: -71 [ 1928.812756][ T3787] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1928.852927][ T3787] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1928.893032][ T3787] usb 2-1: USB disconnect, device number 44 [ 1928.916898][ T7841] usb 3-1: device firmware changed [ 1928.927879][ T7126] usb 3-1: USB disconnect, device number 45 [ 1929.104729][ T7126] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1929.266152][ T7126] usb 3-1: Using ep0 maxpacket: 32 [ 1929.277816][ T7126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1929.298215][ T7126] usb 3-1: string descriptor 0 read error: -22 [ 1929.314606][ T7126] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1929.339170][ T7126] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1929.375980][ T7126] usb 3-1: config 0 descriptor?? [ 1929.388806][ T7858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1929.398284][ T7126] hub 3-1:0.0: bad descriptor, ignoring hub [ 1929.412350][ T7126] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1929.450529][ T7875] tipc: Enabled bearer , priority 0 [ 1929.479511][ T7875] syzkaller0: entered promiscuous mode [ 1929.487021][ T7875] syzkaller0: entered allmulticast mode [ 1929.502965][ T7875] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1929.560553][ T7875] tipc: Resetting bearer [ 1929.570955][ T7874] tipc: Resetting bearer [ 1929.580697][ T7874] tipc: Disabling bearer [ 1929.736930][ T7126] usb 3-1: USB disconnect, device number 46 [ 1929.764505][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1930.502307][ T7897] tipc: Enabling of bearer rejected, already enabled [ 1930.588482][ T7897] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1930.804534][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1931.657842][ T7907] tipc: Enabled bearer , priority 0 [ 1931.671509][ T7907] syzkaller0: entered promiscuous mode [ 1931.683765][ T7907] syzkaller0: entered allmulticast mode [ 1931.728342][ T7907] tipc: Resetting bearer [ 1931.744942][ T7906] tipc: Resetting bearer [ 1931.759025][ T7906] tipc: Disabling bearer [ 1931.844537][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1931.933152][ T7910] bond10: option mode: unable to set because the bond device has slaves [ 1931.958171][ T7910] bond10: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1931.976406][ T7910] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1932.542194][ T7921] tipc: Enabling of bearer rejected, already enabled [ 1932.692504][ T7923] ªªªªªª: renamed from vlan0 (while UP) [ 1932.833690][ T7931] syzkaller0: entered promiscuous mode [ 1932.839831][ T7931] syzkaller0: entered allmulticast mode [ 1932.884528][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1932.915787][ T7937] tipc: Enabling of bearer rejected, already enabled [ 1932.936378][ T7937] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1932.988588][ T7940] syzkaller0: entered promiscuous mode [ 1933.002314][ T7940] syzkaller0: entered allmulticast mode [ 1933.324567][ T7126] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1933.476888][ T7126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1933.485998][ T7126] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.496670][ T7126] usb 3-1: config 66 has 0 interfaces, different from the descriptor's value: 2 [ 1933.507892][ T7126] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1933.518022][ T7126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.526216][ T7126] usb 3-1: Product: syz [ 1933.530429][ T7126] usb 3-1: Manufacturer: syz [ 1933.535298][ T7126] usb 3-1: SerialNumber: syz [ 1933.757993][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.766809][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.777360][ T7944] tipc: Enabling of bearer rejected, failed to enable media [ 1933.790830][ T7126] usb 3-1: USB disconnect, device number 47 [ 1933.924604][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1934.339825][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27650'. [ 1934.355826][ T7949] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 1934.373220][ T7949] gretap0: left promiscuous mode [ 1934.497316][ T7962] syzkaller0: entered promiscuous mode [ 1934.520501][ T7962] syzkaller0: entered allmulticast mode [ 1934.554166][ T3787] hid-generic 0000:0000:0000.0145: unknown main item tag 0x0 [ 1934.572336][ T3787] hid-generic 0000:0000:0000.0145: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1934.964580][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1935.012803][ T7974] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1935.571675][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27660'. [ 1935.774503][ T3787] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1935.964444][ T3787] usb 6-1: Using ep0 maxpacket: 8 [ 1935.990532][ T3787] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1936.004534][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1936.022481][ T3787] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1936.063564][ T3787] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1936.099685][ T3787] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1936.123687][ T3787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.159135][ T3787] usb 6-1: Product: syz [ 1936.175414][ T3787] usb 6-1: Manufacturer: syz [ 1936.196826][ T3787] usb 6-1: SerialNumber: syz [ 1936.436685][ T7980] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1936.531922][ T3787] usb 6-1: USB disconnect, device number 22 [ 1936.757174][ T7961] netlink: 'syz.1.27649': attribute type 13 has an invalid length. [ 1936.856152][ T7961] netlink: 'syz.1.27649': attribute type 17 has an invalid length. [ 1937.044509][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1937.209497][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.216715][ T7961] bridge0: port 2(bridge_slave_1) entered listening state [ 1937.224101][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.231314][ T7961] bridge0: port 1(bridge_slave_0) entered listening state [ 1938.084519][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1938.254634][ T808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1938.560408][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.931526][ T8025] kvm_pr_unimpl_wrmsr: 7 callbacks suppressed [ 1938.931623][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x689c [ 1938.964669][ T808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1938.982515][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000e94d [ 1938.998532][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x89c7 [ 1939.018726][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6012 [ 1939.030467][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1939.046603][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe147 [ 1939.060226][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x89b9 [ 1939.074051][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x90bb [ 1939.088634][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x69da [ 1939.100442][ T8025] kvm: kvm [8024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb25b [ 1939.121214][ T7961] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 1939.134492][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1939.190191][ T7961] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 1939.240194][ T7961] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1939.310315][ T8002] veth15: entered allmulticast mode [ 1939.668119][ T4325] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1939.710336][ T4325] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1940.164513][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1940.565331][ T7133] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1940.644777][ T7126] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1940.810764][ T7126] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1940.832664][ T7126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.854907][ T7126] usb 6-1: Product: syz [ 1940.863520][ T7126] usb 6-1: Manufacturer: syz [ 1940.874650][ T7126] usb 6-1: SerialNumber: syz [ 1940.888329][ T7126] usb 6-1: config 0 descriptor?? [ 1941.016886][ T8051] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 1941.027129][ T8051] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 1941.065668][ T8051] tipc: Enabling of bearer rejected, already enabled [ 1941.118318][ T7126] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1941.204535][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1941.514037][T30167] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 1941.774550][T29159] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1941.944518][T29159] usb 3-1: Using ep0 maxpacket: 32 [ 1941.960303][T29159] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1941.980450][T29159] usb 3-1: config 0 has no interface number 0 [ 1942.002763][T29159] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1942.037399][T29159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.057530][T29159] usb 3-1: Product: syz [ 1942.070700][T29159] usb 3-1: Manufacturer: syz [ 1942.081675][T29159] usb 3-1: SerialNumber: syz [ 1942.102208][T29159] usb 3-1: config 0 descriptor?? [ 1942.123570][T29159] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1942.246232][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27688'. [ 1942.255462][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1942.357630][T29159] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1942.387246][T29159] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1942.406786][T26554] Bluetooth: hci5: command 0x0406 tx timeout [ 1942.564634][ T7133] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1942.748513][ T7126] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1942.766731][ T7126] usb 6-1: USB disconnect, device number 23 [ 1942.773603][ T7133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.790082][ T7133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1942.806149][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.822253][ T7133] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1942.837342][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.850373][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1942.853301][ T3787] usb 3-1: USB disconnect, device number 48 [ 1942.862910][ T7133] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1942.875940][ T7133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.896991][ T7133] usb 2-1: config 0 descriptor?? [ 1942.902298][ T3787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1942.937222][ T3787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1942.950069][ T3787] quatech2 3-1:0.51: device disconnected [ 1942.964128][ T8086] tipc: Enabling of bearer rejected, already enabled [ 1943.284494][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1943.685146][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1944.008549][ T7133] ath6kl: Failed to submit usb control message: -110 [ 1944.049170][ T7133] ath6kl: unable to send the bmi data to the device: -110 [ 1944.071770][ T8104] tipc: Enabled bearer , priority 0 [ 1944.095192][ T8104] syzkaller0: entered promiscuous mode [ 1944.102607][ T7133] ath6kl: Unable to send get target info: -110 [ 1944.113312][ T8104] syzkaller0: entered allmulticast mode [ 1944.129900][ T7133] ath6kl: Failed to init ath6kl core: -110 [ 1944.163772][ T8104] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1944.168071][ T7133] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1944.265783][ T8104] tipc: Resetting bearer [ 1944.316211][ T8103] tipc: Resetting bearer [ 1944.324484][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1944.370079][ T8103] tipc: Disabling bearer [ 1944.613880][ T8109] tipc: Enabled bearer , priority 0 [ 1944.633331][ T8109] syzkaller0: entered promiscuous mode [ 1944.651975][ T8109] syzkaller0: entered allmulticast mode [ 1944.693357][ T8109] tipc: Resetting bearer [ 1944.716534][ T8108] tipc: Resetting bearer [ 1944.741997][ T8108] tipc: Disabling bearer [ 1945.010281][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.7.27699'. [ 1945.144443][ T3787] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1945.314461][ T3787] usb 3-1: Using ep0 maxpacket: 16 [ 1945.354774][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.374723][ T7133] usb 2-1: USB disconnect, device number 45 [ 1945.385598][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1945.570422][ T8131] netlink: 44 bytes leftover after parsing attributes in process `syz.3.27704'. [ 1945.589145][ T8131] netlink: 44 bytes leftover after parsing attributes in process `syz.3.27704'. [ 1945.613615][ T8131] netlink: 5 bytes leftover after parsing attributes in process `syz.3.27704'. [ 1945.690938][ T3787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1945.704640][ T3787] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1945.711910][ T8138] x_tables: duplicate underflow at hook 3 [ 1945.714199][ T3787] usb 3-1: can't read configurations, error -71 [ 1946.740819][ T808] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1946.928391][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 1946.948161][ T808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1946.959838][ T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1946.985418][ T808] usb 6-1: config 0 has no interfaces? [ 1947.007721][ T808] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1947.019558][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.044575][ T808] usb 6-1: Product: syz [ 1947.058923][ T808] usb 6-1: Manufacturer: syz [ 1947.071544][ T808] usb 6-1: SerialNumber: syz [ 1947.090238][ T808] usb 6-1: config 0 descriptor?? [ 1947.519802][ T7133] usb 6-1: USB disconnect, device number 24 [ 1947.596387][ T8162] tipc: Enabling of bearer rejected, already enabled [ 1947.894744][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27716'. [ 1948.184587][ T808] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1948.344840][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 1948.357204][ T808] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 1948.367302][ T808] usb 3-1: config 0 has no interface number 1 [ 1948.377144][ T808] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1948.394545][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1948.408043][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1948.432566][ T808] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1948.443258][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.453156][ T808] usb 3-1: Product: syz [ 1948.459983][ T808] usb 3-1: Manufacturer: syz [ 1948.468256][ T808] usb 3-1: SerialNumber: syz [ 1948.479499][ T808] usb 3-1: config 0 descriptor?? [ 1948.492302][ T808] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1948.711482][ T2367] pvrusb2: Failed to submit write-control URB status=-90 [ 1948.722234][ T808] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1948.732405][ T2367] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1948.744253][ T808] usb 3-1: USB disconnect, device number 51 [ 1948.751907][ T2367] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1949.118354][ T8190] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1949.835837][ T8206] tipc: Enabling of bearer rejected, already enabled [ 1949.960442][ T8211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.27733'. [ 1949.969640][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27733'. [ 1949.980137][ T8211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.27733'. [ 1950.520966][ T8213] syzkaller0: entered promiscuous mode [ 1950.529914][ T8213] syzkaller0: entered allmulticast mode [ 1950.537548][ T8215] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1950.556164][ T8215] bond9: (slave lo): Enslaving as an active interface with an up link [ 1950.565738][ T8215] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1950.581861][ T8213] tipc: Enabled bearer , priority 0 [ 1950.597184][ T8213] tipc: Resetting bearer [ 1950.609301][ T8212] tipc: Resetting bearer [ 1950.629911][ T8212] tipc: Disabling bearer [ 1951.352826][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27742'. [ 1951.845271][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1952.487796][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1952.495066][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1952.728188][ T8258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.752870][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27750'. [ 1952.767561][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27750'. [ 1953.193448][ T8273] netlink: 104 bytes leftover after parsing attributes in process `syz.2.27755'. [ 1953.357526][ T8274] team_slave_1: Caught tx_queue_len zero misconfig [ 1953.381054][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27755'. [ 1953.694492][ T8278] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 1953.694514][ T8278] kvm: kvm [8277]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 1953.715891][ T8278] kvm: kvm [8277]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1955.494486][ T3787] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1955.654477][ T3787] usb 2-1: Using ep0 maxpacket: 8 [ 1955.680456][ T3787] usb 2-1: config 0 has no interfaces? [ 1955.693977][ T3787] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1955.716067][ T3787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.742586][ T3787] usb 2-1: config 0 descriptor?? [ 1956.750351][ T7133] usb 2-1: USB disconnect, device number 46 [ 1957.207949][ T8348] netlink: 60 bytes leftover after parsing attributes in process `syz.7.27779'. [ 1958.117309][ T8358] tipc: Enabled bearer , priority 0 [ 1958.136996][ T8358] syzkaller0: entered promiscuous mode [ 1958.157250][ T8358] syzkaller0: entered allmulticast mode [ 1958.190826][ T8358] tipc: Resetting bearer [ 1958.206719][ T8357] tipc: Resetting bearer [ 1958.229025][ T8357] tipc: Disabling bearer [ 1958.603806][ T8371] tipc: Cannot configure node identity twice [ 1959.807184][ T8398] syzkaller0: entered promiscuous mode [ 1959.828231][ T8398] syzkaller0: entered allmulticast mode [ 1961.651644][ T8418] bond10: entered allmulticast mode [ 1961.681926][ T8418] veth15: entered allmulticast mode [ 1961.693763][ T8418] bond10: (slave veth15): Enslaving as an active interface with an up link [ 1962.217563][T30167] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1963.174442][ T3793] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1963.232243][ T8451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1963.370687][ T3793] usb 2-1: Using ep0 maxpacket: 32 [ 1963.410163][ T3793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.428042][ T3793] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1963.448763][ T3793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.460090][ T3793] usb 2-1: Product: syz [ 1963.465188][ T3793] usb 2-1: Manufacturer: syz [ 1963.472388][ T3793] usb 2-1: SerialNumber: syz [ 1963.489398][ T3793] usb 2-1: config 0 descriptor?? [ 1963.543756][ T3793] cdc_ether 2-1:0.0: Descriptor too short [ 1963.576893][ T3793] usb 2-1: unsupported MDLM descriptors [ 1963.666106][ T8459] bond2: entered allmulticast mode [ 1963.719540][ T8459] veth3: entered allmulticast mode [ 1963.753201][ T8459] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1963.822820][ T8441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27806'. [ 1963.999085][ T3793] usb 2-1: USB disconnect, device number 47 [ 1964.552300][ T8481] tipc: Enabling of bearer rejected, already enabled [ 1964.984529][ T3793] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1965.094476][ T3787] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1965.135339][ T3793] usb 6-1: Using ep0 maxpacket: 16 [ 1965.143375][ T3793] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 1965.152336][ T3793] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1965.163807][ T3793] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.176522][ T3793] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1965.189150][ T3793] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1965.198749][ T3793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.208716][ T3793] usb 6-1: Product: syz [ 1965.212959][ T3793] usb 6-1: Manufacturer: syz [ 1965.218005][ T3793] usb 6-1: SerialNumber: syz [ 1965.230674][ T3793] usb 6-1: 0:2 : does not exist [ 1965.256410][ T3787] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1965.269764][ T3787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1965.279253][ T3787] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1965.290672][ T3787] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1965.301956][ T3787] usb 2-1: Product: syz [ 1965.306628][ T3787] usb 2-1: Manufacturer: syz [ 1965.311436][ T3787] usb 2-1: SerialNumber: syz [ 1965.319696][ T3787] usb 2-1: config 0 descriptor?? [ 1965.436635][ T3793] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1965.468999][ T8496] bond15: entered allmulticast mode [ 1965.479388][ T3787] usb 2-1: selecting invalid altsetting 0 [ 1965.486748][ T3793] usb 6-1: USB disconnect, device number 25 [ 1965.510416][ T8496] veth15: entered allmulticast mode [ 1965.519757][ T8496] bond15: (slave veth15): Enslaving as an active interface with an up link [ 1965.626700][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1965.707087][ T3787] usb 2-1: USB disconnect, device number 48 [ 1965.925537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1967.204495][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1967.854485][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1967.861809][ C1] bridge0: topology change detected, propagating [ 1967.868442][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1967.876223][ C1] bridge0: topology change detected, propagating [ 1969.073539][T29159] hid-generic 0000:0000:0000.0146: unknown main item tag 0x0 [ 1969.095883][T29159] hid-generic 0000:0000:0000.0146: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1969.464505][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27841'. [ 1969.484264][ T8565] team_slave_1: Caught tx_queue_len zero misconfig [ 1970.108222][ T8579] netlink: 'syz.7.27845': attribute type 4 has an invalid length. [ 1970.135614][ T8579] netlink: 'syz.7.27845': attribute type 4 has an invalid length. [ 1970.829075][ T8597] tipc: Enabling of bearer rejected, already enabled [ 1971.553346][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27856'. [ 1971.576047][ T8617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27857'. [ 1973.762685][ T8650] sit0: entered promiscuous mode [ 1973.769650][ T8650] netlink: 'syz.7.27866': attribute type 1 has an invalid length. [ 1973.782220][ T8650] netlink: 9 bytes leftover after parsing attributes in process `syz.7.27866'. [ 1974.749670][T30167] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1974.927732][ T8664] netlink: 'syz.1.27870': attribute type 1 has an invalid length. [ 1975.043535][ T8669] netlink: 'syz.1.27870': attribute type 10 has an invalid length. [ 1975.064019][ T8664] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1975.075744][ T8667] batman_adv: batadv0: Interface deactivated: dummy0 [ 1975.089692][ T8667] batman_adv: batadv0: Removing interface: dummy0 [ 1975.100645][ T8669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27870'. [ 1975.133649][ T8667] bond18: (slave dummy0): Enslaving as a backup interface with an up link [ 1975.152752][ T8669] dummy0: entered promiscuous mode [ 1975.168849][ T4559] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1975.180013][ T4559] bond18: (slave dummy0): link status up again after 0 ms [ 1975.192662][ T8669] bond18: (slave dummy0): Removing an active aggregator [ 1975.205906][ T8669] bond18: (slave dummy0): Releasing backup interface [ 1976.166110][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.172927][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.856691][ T3787] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1978.015476][ T3787] usb 6-1: Using ep0 maxpacket: 16 [ 1978.031100][ T3787] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 1978.043449][ T3787] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1978.067642][ T3787] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.092331][ T3787] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1978.115031][ T3787] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1978.134555][ T3787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.157930][ T3787] usb 6-1: Product: syz [ 1978.169755][ T3787] usb 6-1: Manufacturer: syz [ 1978.182103][ T3787] usb 6-1: SerialNumber: syz [ 1978.203943][ T3787] usb 6-1: 0:2 : does not exist [ 1978.413138][ T3787] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1978.500145][ T3787] usb 6-1: USB disconnect, device number 26 [ 1978.584039][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory Stopping sshd: stopped /usr/sbin/sshd (pid 5382) OK Stopping crond: stopped /usr/sbin/crond (pid 5360) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5284) Stopping network: [ 1983.451101][ T8843] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined OK Stopping iptables: OK Stopping system message bus: [ 1985.845273][T29159] usb 2-1: new high-speed USB device number 49 using dummy_hcd done [ 1985.966301][ T8889] input: syz0 as /devices/virtual/input/input338 [ 1985.987854][ T8892] netlink: 164 bytes leftover after parsing attributes in process `syz.2.27915'. [ 1986.000822][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.27915'. [ 1986.015030][T29159] usb 2-1: Using ep0 maxpacket: 32 [ 1986.031087][T29159] usb 2-1: config 0 has no interfaces? [ 1986.056015][T29159] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1986.091660][T29159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.109767][T29159] usb 2-1: Product: syz [ 1986.140988][T29159] usb 2-1: Manufacturer: syz [ 1986.157471][T29159] usb 2-1: SerialNumber: syz [ 1986.178406][T29159] usb 2-1: config 0 descriptor?? [ 1986.271246][ T3787] hid-generic 0000:0000:0000.0147: unknown main item tag 0x0 [ 1986.302831][ T3787] hid-generic 0000:0000:0000.0147: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1986.722445][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27916'. Stopping klogd: OK Stopping acpid: [ 1987.506771][ T3787] usb 2-1: USB disconnect, device number 49 OK Stopping syslogd: stopped /sbin/syslogd (pid 4972) OK umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 1988.730939][ T4990] udevd[4990]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 1989.801509][ T4577] bridge_slave_1: left allmulticast mode [ 1989.807320][ T4577] bridge_slave_1: left promiscuous mode [ 1989.813139][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.822829][ T4577] bridge_slave_0: left allmulticast mode [ 1989.828990][ T4577] bridge_slave_0: left promiscuous mode [ 1989.835859][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.847106][ T4577] erspan0: left allmulticast mode [ 1989.852215][ T4577] erspan0: left promiscuous mode [ 1989.860454][ T4577] bridge2: port 1(erspan0) entered disabled state [ 1989.869463][ T4577] veth7: left allmulticast mode [ 1989.874758][ T4577] veth7: left promiscuous mode [ 1989.879992][ T4577] bridge3: port 3(veth7) entered disabled state [ 1989.889910][ T4577] bridge3: port 2(veth0_to_bond) entered disabled state [ 1989.898434][ T4577] veth5: left allmulticast mode [ 1989.903362][ T4577] veth5: left promiscuous mode [ 1989.910558][ T4577] bridge3: port 1(veth5) entered disabled state Sent SIGKILL to all processes [ 1989.959032][ T4577] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 1989.971172][ T5976] printk: udevd: 1 output lines suppressed due to ratelimiting [ 1990.019139][ T4577] .` (unregistering): (slave bridge0): Releasing backup interface [ 1990.057452][ T4577] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 1990.065816][ T4577] bridge1 (unregistering): left promiscuous mode [ 1990.259473][ T4577] bond10 (unregistering): (slave .`): Releasing active interface [ 1990.270195][ T4577] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1990.279251][ T4577] .` (unregistering): Released all slaves [ 1990.290647][ T4577] bond1 (unregistering): Released all slaves [ 1990.301880][ T4577] bond2 (unregistering): (slave veth3): Releasing active interface [ 1990.310022][ T4577] vlan2: entered promiscuous mode Requesting syst[ 1990.317013][ T4577] bond2 (unregistering): (slave vlan2): Releasing active interface em poweroff [ 1990.327689][ T4577] bond2 (unregistering): Released all slaves [ 1990.339260][ T4577] bond3 (unregistering): Released all slaves [ 1990.352596][ T4577] bond4 (unregistering): Released all slaves [ 1990.363336][ T4577] bond5 (unregistering): Released all slaves [ 1990.377612][ T4577] bond6 (unregistering): Released all slaves [ 1990.391398][ T4577] bond7 (unregistering): (slave veth9): Releasing backup interface [ 1990.402472][ T4577] bond7 (unregistering): Released all slaves [ 1990.414237][ T4577] bond8 (unregistering): (slave dummy0): Releasing active interface [ 1990.422451][ T4577] dummy0: left promiscuous mode [ 1990.429236][ T4577] bond8 (unregistering): Released all slaves [ 1990.440391][ T4577] bond9 (unregistering): (slave veth13): Releasing backup interface [ 1990.449608][ T4577] bond9 (unregistering): Released all slaves [ 1990.460065][ T4577] bond10 (unregistering): Released all slaves [ 1990.478882][ T4577] bond0 (unregistering): Released all slaves [ 1990.489664][ T4577] bond11 (unregistering): Released all slaves [ 1990.500568][ T4577] bond12 (unregistering): Released all slaves [ 1990.510986][ T4577] bond13 (unregistering): Released all slaves [ 1990.521300][ T4577] bond14 (unregistering): Released all slaves [ 1990.532540][ T4577] bond15 (unregistering): (slave veth15): Releasing backup interface [ 1990.541917][ T4577] bond15 (unregistering): Released all slaves [ 1990.602732][ T4577] tipc: Disabling bearer [ 1990.608422][ T4577] tipc: Left network mode [ 1990.816537][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1990.826240][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1990.976168][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 1990.989662][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 1991.320655][ T8925] smc: removing smcd device lo [ 1991.326055][ T2367] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 1991.335947][ T2367] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 1991.345902][ T2367] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 1991.356534][ T2367] pvrusb2: Failure uploading firmware1 [ 1991.362052][ T2367] pvrusb2: Device initialization was not successful. [ 1991.369135][ T2367] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 1991.375690][ T4577] IPVS: stop unused estimator thread 0... [ 1991.381929][ T2367] pvrusb2: Failed to submit write-control URB status=-19 [ 1991.384824][ T808] pvrusb2: Device being rendered inoperable [ 1991.394028][ T2367] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1991.408229][ T2367] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1991.417294][ T2367] ------------[ cut here ]------------ [ 1991.422781][ T2367] ret [ 1991.422806][ T2367] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x755/0xa40, CPU#1: pvrusb2-context/2367 [ 1991.438428][ T2367] Modules linked in: [ 1991.442364][ T2367] CPU: 1 UID: 0 PID: 2367 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.454062][ T2367] Tainted: [L]=SOFTLOCKUP [ 1991.458540][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1991.468661][ T2367] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 1991.475301][ T2367] Code: bb fb e9 48 fc ff ff e8 19 14 bb fb c6 05 9f 0d 10 0a 01 48 c7 c7 40 85 54 8c e8 76 c9 1c fb e9 70 fc ff ff e8 fc 13 bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 86 54 8c 4c 89 e2 e8 76 5b 21 fb e9 [ 1991.495002][ T2367] RSP: 0018:ffffc90007c0f680 EFLAGS: 00010293 [ 1991.501109][ T2367] RAX: ffffffff860ae224 RBX: dffffc0000000000 RCX: ffff88802c771f00 [ 1991.509183][ T2367] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1991.517273][ T2367] RBP: 0000000000000001 R08: ffffffff9030ecf7 R09: 1ffffffff2061d9e [ 1991.525423][ T2367] R10: dffffc0000000000 R11: fffffbfff2061d9f R12: ffffffff8caeca20 [ 1991.533440][ T2367] R13: 0000000000001770 R14: ffff88806a0720b0 R15: 00000000fffffff5 [ 1991.541472][ T2367] FS: 0000000000000000(0000) GS:ffff88812538f000(0000) knlGS:0000000000000000 [ 1991.550487][ T2367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1991.557157][ T2367] CR2: 00007f55bf93ee9c CR3: 000000002cdf2000 CR4: 00000000003526f0 [ 1991.565333][ T2367] Call Trace: [ 1991.568646][ T2367] [ 1991.571616][ T2367] ? kfree+0x1c5/0x640 [ 1991.575872][ T2367] ? __kmalloc_cache_noprof+0x157/0x660 [ 1991.581472][ T2367] _request_firmware+0x1049/0x1780 [ 1991.586673][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.591569][ T2367] ? __pfx__request_firmware+0x10/0x10 [ 1991.597110][ T2367] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 1991.602819][ T2367] request_firmware+0x36/0x50 [ 1991.607637][ T2367] pvr2_locate_firmware+0xb3/0x500 [ 1991.612855][ T2367] pvr2_upload_firmware1+0x1bd/0x940 [ 1991.618265][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1991.624286][ T2367] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1991.630177][ T2367] pvr2_hdw_initialize+0x425/0x3c60 [ 1991.635438][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.640234][ T2367] ? __mutex_trylock_common+0x15f/0x270 [ 1991.645840][ T2367] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1991.651508][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.656331][ T2367] ? trace_contention_end+0x3d/0x140 [ 1991.661646][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.666481][ T2367] ? lock_release+0x4b/0x3c0 [ 1991.671148][ T2367] ? do_raw_spin_lock+0x12b/0x2f0 [ 1991.676255][ T2367] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1991.681927][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.686822][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1991.692849][ T2367] ? schedule+0x16e/0x360 [ 1991.697238][ T2367] pvr2_context_thread_func+0x504/0xc10 [ 1991.702984][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1991.709158][ T2367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1991.715295][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.720093][ T2367] ? trace_irq_enable+0x3b/0x140 [ 1991.725102][ T2367] ? __kthread_parkme+0x71/0x1f0 [ 1991.730079][ T2367] ? __kthread_parkme+0x196/0x1f0 [ 1991.735191][ T2367] kthread+0x388/0x470 [ 1991.739287][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1991.745422][ T2367] ? __pfx_kthread+0x10/0x10 [ 1991.750044][ T2367] ret_from_fork+0x514/0xb70 [ 1991.754766][ T2367] ? __pfx_ret_from_fork+0x10/0x10 [ 1991.759919][ T2367] ? __switch_to+0xc89/0x1420 [ 1991.764735][ T2367] ? __pfx_kthread+0x10/0x10 [ 1991.769359][ T2367] ret_from_fork_asm+0x1a/0x30 [ 1991.774163][ T2367] [ 1991.777282][ T2367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1991.784596][ T2367] CPU: 1 UID: 0 PID: 2367 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.795925][ T2367] Tainted: [L]=SOFTLOCKUP [ 1991.800275][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1991.810336][ T2367] Call Trace: [ 1991.813646][ T2367] [ 1991.816582][ T2367] vpanic+0x56c/0xa60 [ 1991.820723][ T2367] ? __pfx__printk+0x10/0x10 [ 1991.825340][ T2367] ? __pfx_vpanic+0x10/0x10 [ 1991.829868][ T2367] ? is_bpf_text_address+0x292/0x2b0 [ 1991.835266][ T2367] ? is_bpf_text_address+0x26/0x2b0 [ 1991.840790][ T2367] panic+0xc5/0xd0 [ 1991.844530][ T2367] ? __pfx_panic+0x10/0x10 [ 1991.848990][ T2367] ? ret_from_fork_asm+0x1a/0x30 [ 1991.853952][ T2367] __warn+0x315/0x4c0 [ 1991.857953][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 1991.863605][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 1991.869253][ T2367] __report_bug+0x331/0x530 [ 1991.873836][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 1991.879478][ T2367] ? __pfx___report_bug+0x10/0x10 [ 1991.884522][ T2367] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1991.889931][ T2367] ? __up_read+0x284/0x900 [ 1991.894393][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.899190][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1991.903956][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 1991.909591][ T2367] report_bug+0x16a/0x220 [ 1991.913937][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 1991.919692][ T2367] ? firmware_fallback_sysfs+0x757/0xa40 [ 1991.925342][ T2367] handle_bug+0x9c/0x200 [ 1991.929602][ T2367] exc_invalid_op+0x1a/0x50 [ 1991.934123][ T2367] asm_exc_invalid_op+0x1a/0x20 [ 1991.938994][ T2367] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 1991.945271][ T2367] Code: bb fb e9 48 fc ff ff e8 19 14 bb fb c6 05 9f 0d 10 0a 01 48 c7 c7 40 85 54 8c e8 76 c9 1c fb e9 70 fc ff ff e8 fc 13 bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 86 54 8c 4c 89 e2 e8 76 5b 21 fb e9 [ 1991.964911][ T2367] RSP: 0018:ffffc90007c0f680 EFLAGS: 00010293 [ 1991.970988][ T2367] RAX: ffffffff860ae224 RBX: dffffc0000000000 RCX: ffff88802c771f00 [ 1991.978962][ T2367] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1991.986945][ T2367] RBP: 0000000000000001 R08: ffffffff9030ecf7 R09: 1ffffffff2061d9e [ 1991.994953][ T2367] R10: dffffc0000000000 R11: fffffbfff2061d9f R12: ffffffff8caeca20 [ 1992.002944][ T2367] R13: 0000000000001770 R14: ffff88806a0720b0 R15: 00000000fffffff5 [ 1992.010925][ T2367] ? firmware_fallback_sysfs+0x754/0xa40 [ 1992.016570][ T2367] ? kfree+0x1c5/0x640 [ 1992.020643][ T2367] ? __kmalloc_cache_noprof+0x157/0x660 [ 1992.026199][ T2367] _request_firmware+0x1049/0x1780 [ 1992.031328][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1992.036108][ T2367] ? __pfx__request_firmware+0x10/0x10 [ 1992.041614][ T2367] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 1992.047204][ T2367] request_firmware+0x36/0x50 [ 1992.051901][ T2367] pvr2_locate_firmware+0xb3/0x500 [ 1992.057035][ T2367] pvr2_upload_firmware1+0x1bd/0x940 [ 1992.062334][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1992.068332][ T2367] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1992.074152][ T2367] pvr2_hdw_initialize+0x425/0x3c60 [ 1992.079352][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1992.084126][ T2367] ? __mutex_trylock_common+0x15f/0x270 [ 1992.089693][ T2367] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1992.095521][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1992.100288][ T2367] ? trace_contention_end+0x3d/0x140 [ 1992.105579][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1992.110345][ T2367] ? lock_release+0x4b/0x3c0 [ 1992.114970][ T2367] ? do_raw_spin_lock+0x12b/0x2f0 [ 1992.120002][ T2367] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1992.125643][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1992.130409][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1992.136414][ T2367] ? schedule+0x16e/0x360 [ 1992.140865][ T2367] pvr2_context_thread_func+0x504/0xc10 [ 1992.146423][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1992.152497][ T2367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1992.158573][ T2367] ? rcu_is_watching+0x15/0xb0 [ 1992.163430][ T2367] ? trace_irq_enable+0x3b/0x140 [ 1992.168376][ T2367] ? __kthread_parkme+0x71/0x1f0 [ 1992.173320][ T2367] ? __kthread_parkme+0x196/0x1f0 [ 1992.178356][ T2367] kthread+0x388/0x470 [ 1992.182427][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1992.188510][ T2367] ? __pfx_kthread+0x10/0x10 [ 1992.193142][ T2367] ret_from_fork+0x514/0xb70 [ 1992.197775][ T2367] ? __pfx_ret_from_fork+0x10/0x10 [ 1992.202909][ T2367] ? __switch_to+0xc89/0x1420 [ 1992.207605][ T2367] ? __pfx_kthread+0x10/0x10 [ 1992.212194][ T2367] ret_from_fork_asm+0x1a/0x30 [ 1992.216969][ T2367] [ 1992.220613][ T2367] Kernel Offset: disabled [ 1992.224940][ T2367] Rebooting in 86400 seconds..